Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/iHavSZFujRBDAPaifCoFDHM62Tg.roa
File: iHavSZFujRBDAPaifCoFDHM62Tg.roa (raw, json)
Hash identifier: kn36nakGbihTW3OqoGpJ68bEc0n5ovqLUmRMTbkvU/w=
Subject key identifier: 88:76:AF:49:91:6E:8D:10:43:00:F6:A2:7C:2A:05:0C:73:3A:D9:38
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B1C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/iHavSZFujRBDAPaifCoFDHM62Tg.roa
Signing time: Sun 02 Feb 2025 04:25:35 +0000
ROA not before: Sun 02 Feb 2025 04:25:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2844 (0xb1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 04:25:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8876AF49916E8D104300F6A27C2A050C733AD938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:56:10:c1:81:06:9b:e5:81:d3:24:eb:96:63:
58:79:42:9d:4a:99:99:d3:7b:2e:99:c6:7b:22:00:
8b:f9:33:68:6f:6e:ff:6b:6a:55:45:82:0c:ec:4b:
6c:ff:2f:e8:f7:5e:c6:25:f4:99:ee:93:7c:57:c1:
64:cc:f9:c3:bd:84:3b:08:d2:e6:a3:c9:b4:d4:ea:
41:95:bc:95:95:54:4c:fb:a7:c8:9f:c3:18:9d:bf:
da:b9:8c:73:5c:bc:4b:a7:9d:f2:14:36:f4:b6:ad:
f7:c8:07:79:c3:50:4e:00:bc:b4:d8:ed:08:e4:df:
bc:7a:23:28:f5:62:50:60:fd:d0:07:f3:ba:ce:f9:
9f:35:60:56:88:73:b9:d7:b3:03:00:26:09:c2:14:
9b:59:f1:47:31:43:c3:9c:c6:ad:8b:c4:81:c6:6c:
b2:70:16:e1:85:37:21:56:fb:8c:8e:d8:9c:eb:c8:
d1:79:0b:b3:86:9a:7f:32:d2:ef:d4:36:e8:3d:40:
40:e1:dd:dd:8c:73:d6:f2:86:57:5b:ff:90:43:a7:
b0:1b:d7:68:be:0d:82:40:db:8d:bd:4e:1c:7b:77:
73:bd:fe:8f:3c:0e:a4:86:5e:69:fa:fd:ab:cc:fb:
73:af:01:5f:76:35:a5:35:ac:ee:68:9a:70:7e:83:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:76:AF:49:91:6E:8D:10:43:00:F6:A2:7C:2A:05:0C:73:3A:D9:38
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/iHavSZFujRBDAPaifCoFDHM62Tg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
39:aa:2c:19:64:f4:37:10:ff:64:c4:cc:6c:75:63:bb:47:c5:
1d:1d:60:a2:2c:e2:14:4c:5e:3d:42:a9:40:84:ab:e5:5f:7f:
c1:c5:a4:9e:1b:d8:ff:bc:27:ae:34:b8:72:ed:f6:a4:c0:92:
c8:54:71:f9:7a:bf:6c:14:44:ce:b2:5d:2a:90:4b:31:86:2e:
6c:0b:5f:d5:f9:89:26:18:35:4e:36:1b:a5:2b:a7:ef:fa:36:
a6:4e:c6:c2:69:1f:ab:04:3e:6b:a9:03:dc:dd:0f:c1:14:36:
cb:f5:a4:88:7b:05:5a:e7:c6:14:1a:47:83:48:2f:14:33:4f:
26:05:fc:ff:9b:f5:ab:d2:85:cb:51:53:2e:ea:d3:de:0d:6b:
37:91:68:db:11:ca:16:cc:b7:ac:21:6d:a4:3d:cb:5e:06:ea:
f8:e4:c6:95:5d:90:97:7f:02:8d:68:a0:48:01:6e:42:11:27:
1d:27:5c:05:3e:ed:a1:ae:fc:44:44:f7:e8:53:6b:ad:84:35:
ba:df:d4:c1:e1:7b:a6:05:a8:d0:38:44:cc:fd:16:eb:06:4b:
26:24:7f:5f:02:a9:8c:c2:74:8c:28:46:3b:aa:9c:ef:1b:2f:
c1:71:1d:6a:dd:9f:96:4f:a8:d9:ea:07:8b:cd:d6:7b:8a:17:
fc:a6:49:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 01:49:06 2025 by rpki-client