Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/jK2avXebHeK-RdfAQ7CHLr69gFM.roa
File: jK2avXebHeK-RdfAQ7CHLr69gFM.roa (raw, json)
Hash identifier: hZmiIqpeVie+vfKW/VK2AqU3hx82oohfoi9qvb/0UKw=
Subject key identifier: 8C:AD:9A:BD:77:9B:1D:E2:BE:45:D7:C0:43:B0:87:2E:BE:BD:80:53
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B36
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jK2avXebHeK-RdfAQ7CHLr69gFM.roa
Signing time: Sun 02 Feb 2025 10:56:14 +0000
ROA not before: Sun 02 Feb 2025 10:56:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2870 (0xb36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 10:56:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8CAD9ABD779B1DE2BE45D7C043B0872EBEBD8053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ca:4f:56:60:83:d0:a4:09:38:ca:6b:fb:1e:
8b:58:ff:ef:78:33:e6:a6:07:e3:79:9a:13:5b:74:
6b:68:ce:c1:b1:11:dc:ea:a5:fe:40:df:64:7a:30:
f1:35:77:80:36:04:9e:5e:59:77:d7:ae:4c:3d:0c:
7a:e2:58:44:d7:4a:e7:9d:69:f0:22:d3:06:3d:7c:
22:e9:83:cf:9c:0f:78:a7:d3:a3:16:be:fc:80:34:
e4:44:41:93:e6:6e:4d:5f:cc:3b:98:09:78:db:38:
dd:e9:4d:6f:10:42:e7:9a:1f:3b:67:02:89:7b:86:
b5:75:38:a0:78:53:00:71:c7:6c:29:d4:b8:cb:80:
b1:b8:90:f3:f7:70:05:f7:5c:f7:36:17:68:47:bd:
79:49:89:39:20:a5:6d:72:a7:cc:48:9c:f0:a4:db:
1c:14:03:bc:ee:a4:d0:56:75:5c:48:a9:19:9a:67:
4b:fe:ff:87:fe:a9:d2:33:0b:7b:88:20:27:45:b1:
c3:88:0b:2f:b2:53:4d:12:00:d2:d2:5a:bb:38:d9:
36:71:ff:28:0a:8f:93:68:98:f2:e1:08:fa:c2:64:
4b:4c:99:af:56:48:33:cf:3d:b0:1a:72:b1:66:01:
20:ff:a1:38:a2:44:b4:48:9e:49:f7:c3:b8:69:5b:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:9A:BD:77:9B:1D:E2:BE:45:D7:C0:43:B0:87:2E:BE:BD:80:53
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jK2avXebHeK-RdfAQ7CHLr69gFM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
12:98:28:09:27:42:29:60:b5:63:54:fc:51:31:2b:de:b2:2c:
55:36:9a:90:7d:c0:53:d0:30:f8:57:c7:16:ba:2f:06:bc:a8:
88:c5:47:57:da:cf:f2:88:21:2b:e2:b1:8c:59:1f:66:dc:ec:
cf:2c:45:6f:a9:9f:9c:fa:b7:75:79:8d:ce:bb:fb:3c:9c:da:
77:86:90:d1:b0:6b:29:c2:eb:ac:9f:26:19:37:a1:47:ca:b5:
09:da:fd:aa:91:d9:0d:ce:38:6e:f0:2d:bf:f8:5e:97:73:12:
a0:f8:86:b3:e5:11:6c:a0:8e:15:5b:11:a4:5a:a2:86:85:17:
fb:9e:96:22:68:d3:40:01:d9:4f:51:d3:b8:00:0a:90:be:42:
11:ac:2b:50:f1:0e:44:31:d9:ee:46:bf:ae:20:89:84:b1:c1:
00:d2:3d:b9:d4:04:00:e9:12:32:1c:5b:2d:87:61:4a:83:6f:
d6:d3:4e:3e:f5:e8:9b:af:7f:e8:22:60:51:fa:dc:b6:0e:21:
63:69:29:b2:24:a1:6c:0d:a6:3d:9c:9e:5f:be:da:ea:56:98:
16:8d:8d:64:4d:09:57:57:ec:3f:14:ca:04:ce:96:a8:d6:e8:
56:17:4d:00:bf:d9:c9:7b:7e:8f:dd:ff:c9:ec:1e:7f:47:7d:
dc:bf:c9:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:59:00 2025 by rpki-client