Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/uXwzkacB4vsjYKYqtZ8kAHEH_g8.roa
File: uXwzkacB4vsjYKYqtZ8kAHEH_g8.roa (raw, json)
Hash identifier: FwGn9Po2z6VzZCzz/oUVoC2WZIKV7kbajO+A8JgmGjg=
Subject key identifier: B9:7C:33:91:A7:01:E2:FB:23:60:A6:2A:B5:9F:24:00:71:07:FE:0F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BA6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uXwzkacB4vsjYKYqtZ8kAHEH_g8.roa
Signing time: Mon 03 Feb 2025 14:55:39 +0000
ROA not before: Mon 03 Feb 2025 14:55:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2982 (0xba6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 14:55:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B97C3391A701E2FB2360A62AB59F24007107FE0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:2d:99:c9:3b:b3:7c:72:e3:bd:15:8c:d1:
63:92:81:e4:3f:4e:41:39:29:6d:6c:35:8b:f7:96:
ea:7b:70:5c:a9:7a:ee:3d:45:d6:eb:1c:45:42:fa:
31:5a:57:5c:74:97:7d:5d:84:7d:89:af:33:5d:35:
7e:cb:00:56:c9:d4:7e:e5:8f:11:bb:09:57:08:1d:
39:3f:0e:d2:bb:4e:04:4b:6c:72:40:22:c5:cd:b6:
1c:84:12:8c:7e:73:30:c5:75:6d:fe:e1:14:a5:2d:
89:bd:9c:55:c8:09:5d:fd:5d:c3:08:a7:e9:37:59:
a6:c9:9d:25:0d:cd:93:87:dd:c7:1b:d9:41:09:cf:
f7:ce:9d:64:5e:30:5a:4b:2d:08:fa:61:fe:bc:27:
2f:23:3e:ed:af:2b:02:70:99:10:d8:18:f4:89:0f:
05:db:8e:47:05:81:01:ea:75:3a:69:b8:c3:3b:69:
fb:51:d2:c2:db:d7:5d:96:ec:19:9d:62:06:1f:2a:
47:49:bf:fc:07:ad:a7:23:53:59:3c:66:0e:9f:2c:
c5:52:a4:6f:e1:cc:a0:f1:8f:da:43:8f:1d:45:eb:
65:51:00:16:d0:0f:60:9f:12:13:52:7e:04:b1:32:
c6:94:69:3f:31:c6:ce:13:48:70:a2:7c:1d:26:df:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:33:91:A7:01:E2:FB:23:60:A6:2A:B5:9F:24:00:71:07:FE:0F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uXwzkacB4vsjYKYqtZ8kAHEH_g8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2d:ca:dc:2d:0c:0d:17:d2:e1:9d:78:29:4a:80:13:65:41:62:
c3:99:49:6b:dc:25:7c:6c:2c:85:6e:29:ad:fb:82:e4:bc:7b:
78:0b:23:5e:52:08:55:93:c2:fa:6c:58:c6:ed:8c:b3:a1:4c:
d7:d8:12:68:e6:0e:c0:b0:59:3a:47:35:07:bf:6e:c2:f6:91:
9b:22:15:68:20:f5:94:e0:fc:05:c2:39:b2:f7:45:bd:c4:01:
d1:47:1e:12:22:04:22:87:1b:e5:ac:0e:cb:bb:7c:33:eb:01:
c1:72:83:9a:44:57:1e:b6:10:21:84:02:90:cc:9e:70:08:d2:
be:be:5d:ff:aa:0c:bf:81:ec:44:98:a5:6a:b6:61:50:7b:93:
26:91:ae:de:df:bf:16:1e:9c:9e:c6:6c:9b:7c:a2:38:a1:5f:
f9:dd:60:7d:75:18:a1:32:c2:00:14:63:d1:72:9a:72:f2:dd:
4f:a6:8d:f4:a9:e5:a9:14:0a:f1:7f:0f:59:55:a3:e2:6d:90:
26:ee:48:0d:15:26:11:40:a5:5d:87:99:68:d0:a5:36:e5:4b:
4a:7c:b4:44:77:4c:5e:e7:fe:5a:a2:fa:af:40:2d:12:8d:07:
cb:77:7f:d4:3c:7d:71:b2:44:14:d5:bc:0d:8e:cf:37:c1:76:
c1:4c:1a:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 06:02:16 2025 by rpki-client