Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/n7jCyqwd1RdPg4UpURwuoznlbo8.roa
File: n7jCyqwd1RdPg4UpURwuoznlbo8.roa (raw, json)
Hash identifier: Ca2LU17vaox0+hsbtRPc9S7KhitwKQANkq25fIh1kXM=
Subject key identifier: 9F:B8:C2:CA:AC:1D:D5:17:4F:83:85:29:51:1C:2E:A3:39:E5:6E:8F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CD2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/n7jCyqwd1RdPg4UpURwuoznlbo8.roa
Signing time: Thu 06 Feb 2025 17:55:45 +0000
ROA not before: Thu 06 Feb 2025 17:55:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3282 (0xcd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 17:55:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9FB8C2CAAC1DD5174F838529511C2EA339E56E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:de:53:9f:47:79:0b:b7:f0:f8:bf:2f:d4:
6d:03:1e:77:9a:99:e2:9f:7e:dc:3e:27:8a:ce:49:
28:f4:a6:9d:87:c6:0a:2f:18:ea:85:80:04:27:41:
60:b1:cb:38:04:91:d0:25:6f:ba:3c:05:fa:b3:f7:
d5:4e:05:67:de:70:00:0d:52:38:4b:34:6b:f6:80:
9f:01:b2:87:1b:f4:b3:4f:f0:00:99:bb:d9:f5:c1:
5e:79:2e:22:2e:2f:24:34:d8:e4:f5:30:18:e9:25:
b7:e8:a9:20:e7:fc:34:68:c0:d8:c8:cd:44:f9:6e:
5f:82:7e:1b:b6:f8:e9:c0:16:49:b8:0b:e7:d5:fa:
d9:fe:c3:b9:b5:07:db:8d:32:6e:0e:e1:84:3d:87:
25:67:d6:7d:bc:32:9c:db:36:a9:da:bc:65:72:ff:
c6:43:fb:03:6f:38:db:97:13:5d:9f:17:0a:cc:5a:
54:62:b8:bd:3f:49:cb:06:06:40:8f:ee:95:00:14:
d3:79:40:65:81:50:62:19:c8:59:35:6a:06:f2:00:
75:b7:af:85:e4:6e:42:91:be:a0:00:18:a0:4c:a0:
ce:33:ac:d4:64:df:44:4c:15:d6:c6:ee:e1:a8:72:
f6:c4:24:6e:a6:d0:78:9f:36:fb:bc:cb:99:8d:65:
4d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:C2:CA:AC:1D:D5:17:4F:83:85:29:51:1C:2E:A3:39:E5:6E:8F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/n7jCyqwd1RdPg4UpURwuoznlbo8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
10:23:5c:43:f7:1d:2a:8d:1d:4f:2e:8f:be:77:fc:cf:4b:34:
56:ff:0e:14:a7:6c:65:95:d2:ab:01:cd:87:38:1a:98:e9:b0:
dd:ec:fc:33:3e:46:f5:fc:df:11:12:b9:2f:aa:60:04:da:20:
03:76:a8:07:2a:f7:5a:ee:68:d9:dc:36:ab:c1:5b:6c:5d:c2:
91:a6:13:07:7b:1a:d5:06:3d:f1:e4:14:2d:c2:eb:39:7f:a0:
10:f5:15:97:a2:14:98:f7:7e:3e:c0:e2:f4:a5:0f:02:ff:b5:
7a:b6:04:95:7c:99:17:b7:94:fc:42:a1:db:64:56:db:dd:c5:
0e:8e:5b:6a:11:5c:8e:63:65:0d:5a:6f:f3:e8:31:7a:1c:47:
0b:ed:e0:a6:e2:c4:7f:ba:a3:06:72:48:ff:44:fb:04:c8:0a:
81:04:a5:4c:e6:fc:e3:17:7f:10:77:bf:ff:15:6e:ec:d9:ad:
15:b4:3e:85:d7:58:bb:c0:76:55:6a:0c:91:71:90:5e:83:d2:
01:be:05:cb:88:51:6b:40:80:ef:f3:97:21:19:50:60:cf:1e:
c2:d3:88:0e:2b:15:16:b0:93:8b:f1:35:08:cb:39:66:52:dc:
2f:b0:fc:d4:e8:ce:f7:31:47:d4:07:9e:b0:94:83:e9:70:93:
4b:b2:86:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 17:05:17 2025 by rpki-client