Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/qTrPVCDWKfeG_neV-egmQWD8p4w.roa
File: qTrPVCDWKfeG_neV-egmQWD8p4w.roa (raw, json)
Hash identifier: LElCHV/KiTmMWapGA3LrOeMwc4pclhAEXEbDT2oMeB4=
Subject key identifier: A9:3A:CF:54:20:D6:29:F7:86:FE:77:95:F9:E8:26:41:60:FC:A7:8C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0960
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/qTrPVCDWKfeG_neV-egmQWD8p4w.roa
Signing time: Tue 28 Jan 2025 13:25:25 +0000
ROA not before: Tue 28 Jan 2025 13:25:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 13:25:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A93ACF5420D629F786FE7795F9E8264160FCA78C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:aa:19:f0:ba:96:ae:9e:01:02:7c:1a:f3:
c9:a8:c6:1a:07:71:ac:2b:bb:d1:8c:83:2b:06:87:
b6:8d:7b:2e:7d:11:9a:28:31:70:9f:45:f9:1f:21:
e2:16:74:3f:a7:78:24:4c:03:1d:67:60:a8:de:c4:
95:51:36:75:b6:88:54:13:3e:62:a6:d7:ee:02:c9:
3c:85:62:ea:12:5f:ff:e8:bb:5b:da:39:7c:b1:e6:
d4:36:c9:85:e7:30:8b:02:99:e9:4d:cc:f8:ed:97:
3c:fe:32:0c:80:58:37:e6:e0:10:66:44:75:98:ec:
0e:e4:e6:ab:07:cf:e9:5a:c4:88:34:b2:6a:1c:93:
c8:ac:ba:a9:6b:8a:97:8d:b2:f6:b5:eb:5c:d2:54:
f4:14:77:e6:ab:dc:71:8b:5c:a2:e6:a1:cb:09:af:
05:b3:7d:f8:3f:00:05:80:e1:13:13:16:34:88:d9:
19:c0:e9:34:8d:32:a7:0f:0f:71:43:63:5b:b1:ae:
89:5a:74:d6:65:81:a9:06:0d:5a:0d:90:97:17:55:
64:f3:6f:d9:1c:32:a3:77:92:b2:a6:75:67:bd:2a:
3a:ef:58:bf:76:0b:b9:07:a8:0a:e3:a8:dd:2b:61:
fd:c8:2f:f4:58:13:ab:fd:0d:5a:fe:55:9a:b0:e4:
fa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:3A:CF:54:20:D6:29:F7:86:FE:77:95:F9:E8:26:41:60:FC:A7:8C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/qTrPVCDWKfeG_neV-egmQWD8p4w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
43:f9:e1:9b:72:77:a0:49:28:79:45:dc:8b:aa:7b:f6:14:ef:
ab:31:f8:1f:cf:ae:df:bf:a7:4a:a4:12:16:c8:b8:fc:55:a6:
81:38:2d:e3:67:ee:a2:5c:e5:b7:2d:86:17:75:11:90:ba:61:
60:9b:9f:dc:58:8c:e0:99:97:03:f3:13:c8:c9:69:1c:1b:4a:
08:82:2e:c7:7b:fd:23:6d:89:65:c6:04:71:be:de:54:90:2b:
35:a3:66:e8:48:2c:9a:81:cb:21:7a:09:c5:dc:25:d0:8a:c5:
46:49:34:8d:73:7b:33:40:ce:3f:da:08:e0:5c:46:82:22:33:
4c:ec:10:8a:b9:52:94:88:bb:ad:1d:92:2e:b2:f1:6b:ef:a3:
41:f9:e2:ac:d5:34:48:c7:a7:6a:ce:ba:c9:26:6e:b5:5f:32:
46:d8:ed:e5:bd:89:a5:8c:90:fa:eb:89:d4:6e:06:85:ab:af:
26:89:f4:39:51:c8:a3:d2:02:dd:19:50:73:fb:b2:a1:58:54:
c5:c1:99:a4:27:29:8c:d1:99:97:e5:68:37:28:9b:9d:11:dc:
99:c9:3a:ec:6f:98:0c:31:97:7d:3c:36:b8:cd:7a:d5:16:42:
86:99:56:22:1f:c3:f7:5b:af:46:2b:e1:fa:b7:b1:bb:92:cb:
48:65:2f:ea
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:37:18 2025 by rpki-client