Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/qs4gi_LrDvrDsdojgs5QTrzYsXY.roa
File: qs4gi_LrDvrDsdojgs5QTrzYsXY.roa (raw, json)
Hash identifier: psTDuuMt+q4in6UcPeZ1w5YRLBUuDbTjJlOlLQpQlOM=
Subject key identifier: AA:CE:20:8B:F2:EB:0E:FA:C3:B1:DA:23:82:CE:50:4E:BC:D8:B1:76
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0ACC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/qs4gi_LrDvrDsdojgs5QTrzYsXY.roa
Signing time: Sat 01 Feb 2025 08:25:33 +0000
ROA not before: Sat 01 Feb 2025 08:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2764 (0xacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 08:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AACE208BF2EB0EFAC3B1DA2382CE504EBCD8B176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:42:ff:a0:ce:e0:15:c4:10:e4:d7:2c:b3:fa:
91:45:46:2c:11:f7:e7:f4:4c:70:8e:59:06:a4:59:
a1:23:3d:66:b7:a6:93:bf:99:42:43:f7:41:57:62:
5b:18:fd:f8:f1:8f:72:f8:5a:2a:a0:74:72:02:70:
6e:f6:52:0a:ce:c3:04:25:0c:7c:d2:56:2c:5f:b3:
7c:d8:66:0e:3b:8c:08:97:5c:99:a9:f7:78:d8:0a:
57:0f:ee:5a:f0:2d:79:99:58:ef:8b:c0:74:92:a9:
8b:3a:60:cf:e0:53:80:6a:08:57:3f:f1:ba:eb:49:
1a:3c:ed:fd:e3:66:09:5c:49:7e:24:57:e9:90:fc:
4f:1e:1b:49:a7:c3:b4:12:3c:71:3d:a5:09:65:48:
3b:a9:cd:42:80:46:33:84:ab:e4:a6:78:c6:1b:b9:
4a:0c:47:24:43:f0:d2:81:19:e9:91:36:68:9a:f2:
63:b1:e1:ee:a9:e9:eb:71:43:62:e3:0e:b6:50:55:
30:10:32:81:f9:50:10:b9:ae:56:54:e0:d9:17:10:
63:31:98:b3:9f:ed:90:2c:f4:52:b8:e0:ff:de:db:
cb:c8:0b:17:2c:ad:3c:1b:80:5c:06:ad:70:ce:4d:
7d:83:d2:f1:86:ce:73:bb:4d:4f:78:0c:75:53:e1:
4a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CE:20:8B:F2:EB:0E:FA:C3:B1:DA:23:82:CE:50:4E:BC:D8:B1:76
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/qs4gi_LrDvrDsdojgs5QTrzYsXY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:bf:10:d9:a3:cf:3f:0f:45:0b:16:ac:77:7e:15:2e:7f:95:
2c:03:4c:1e:84:a4:45:3e:fb:44:e1:3a:9a:7b:cf:27:8a:64:
6e:1c:e0:b8:f7:87:c8:c9:20:2b:ba:03:d3:61:c3:e4:25:90:
38:c1:2a:ab:e5:be:48:aa:d6:64:8a:69:17:08:2e:98:c8:f8:
e7:54:94:61:fc:ea:69:2f:a2:32:71:3d:e9:45:29:75:96:ab:
a4:6c:c9:b1:b1:61:e3:86:2e:9f:35:25:33:a0:e7:de:ae:db:
42:17:2c:f6:d2:fc:63:93:94:a3:f0:9e:30:34:a7:41:0c:2f:
ba:09:21:0a:75:90:43:77:bf:51:65:6a:ea:37:53:34:52:3f:
23:6f:b6:12:48:ea:5d:de:9b:3c:93:ae:a5:c0:0b:57:96:81:
c2:ed:be:52:5e:c2:ff:8d:83:40:78:17:38:23:da:c8:09:e7:
34:c6:43:4e:65:72:1c:1a:ea:57:0d:53:61:d7:96:3c:45:a8:
77:d0:69:22:9d:4f:e8:a9:3e:2d:bf:ac:30:0a:5f:89:c1:04:
24:fa:b4:ff:e3:ab:ed:ef:28:7c:a3:4b:53:7b:73:66:1a:f4:
da:91:6a:97:ff:b4:01:69:51:51:46:3c:b4:e5:16:e5:b8:85:
43:c3:e7:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:28:54 2025 by rpki-client