Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/vBqQOCj1XiLfuQRQxD7vFjPLB7c.roa
File: vBqQOCj1XiLfuQRQxD7vFjPLB7c.roa (raw, json)
Hash identifier: zFc2BQul9n6/bceoOXOlBktU0eEMDSJTbKsSd+RNacQ=
Subject key identifier: BC:1A:90:38:28:F5:5E:22:DF:B9:04:50:C4:3E:EF:16:33:CB:07:B7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05DA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vBqQOCj1XiLfuQRQxD7vFjPLB7c.roa
Signing time: Sun 19 Jan 2025 03:54:47 +0000
ROA not before: Sun 19 Jan 2025 03:54:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1498 (0x5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 03:54:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BC1A903828F55E22DFB90450C43EEF1633CB07B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:3c:69:ac:9e:a5:fe:44:a6:19:e3:23:88:
94:4e:b2:60:2b:64:5a:35:30:02:55:0e:30:ce:65:
ed:8e:9e:37:fd:4d:3b:66:b0:92:6f:51:c4:f1:15:
f4:e5:89:0f:1b:0d:0c:7c:5b:09:58:6a:fb:ec:6d:
01:ff:9b:50:0b:11:f1:9c:72:56:2a:7a:86:a0:7a:
c2:ce:37:0e:c2:66:20:53:fe:77:ea:28:90:75:86:
6d:c2:b8:ba:c3:c2:47:ed:b6:f3:63:07:22:05:44:
b4:f2:82:ca:61:94:10:0c:3a:07:03:fa:97:c2:ca:
24:38:f5:3b:80:09:a6:7c:83:ca:c3:a4:54:57:7d:
9e:b9:78:79:8b:3b:ff:ed:b3:98:ee:8b:2b:34:f7:
5c:da:3f:a1:98:50:2e:7c:a9:8c:d4:1c:f1:e1:17:
ab:59:6d:f0:11:61:3f:75:95:7a:39:5f:c5:dc:45:
2f:6e:17:16:62:f9:5f:e3:b8:f4:da:5e:cf:ee:ce:
e8:d2:2f:77:1f:5a:db:0c:ed:6c:de:3e:a8:f0:94:
44:64:15:37:26:66:9e:52:7c:49:a1:08:e3:a7:f7:
a6:7f:1d:be:03:e6:de:70:3a:60:98:35:82:ad:2b:
1c:20:92:b0:03:27:de:11:a5:cd:4b:3d:23:65:67:
e4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:90:38:28:F5:5E:22:DF:B9:04:50:C4:3E:EF:16:33:CB:07:B7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vBqQOCj1XiLfuQRQxD7vFjPLB7c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:7f:bc:8e:04:b5:eb:5c:fe:b5:bf:ba:05:35:09:e9:3e:eb:
f2:52:dd:57:2a:63:1a:c3:70:73:6c:b1:7d:e1:df:ff:94:e9:
05:61:1e:af:a3:3b:3f:13:cb:2c:b1:7c:da:c0:27:b2:96:00:
16:ec:68:a7:6a:7e:7d:85:a9:cb:9f:40:d5:6c:b6:f0:08:b8:
ce:f2:ae:d3:d2:f4:f1:58:1f:0d:2f:8a:de:43:36:d2:8d:44:
7e:c2:21:9f:62:5b:ca:6b:ee:12:78:0b:61:df:69:86:2d:da:
3c:c9:64:98:98:5b:4e:1b:a2:ce:e0:5a:42:6c:98:90:88:8e:
4c:cd:4e:12:c5:30:28:63:0d:2d:95:c3:4c:3f:26:9c:19:a3:
26:10:e5:a1:3a:25:e1:90:d3:6c:46:e6:98:8b:61:c9:f1:41:
8d:bb:75:25:fe:f5:a6:a4:ad:77:9c:f6:03:ca:ca:14:61:57:
dd:a6:40:b9:8a:e5:39:10:86:f4:14:72:c3:cd:79:5e:e2:13:
12:ea:0f:86:50:42:f5:48:d0:22:87:ec:2b:96:cf:d7:0f:cf:
8e:86:57:f1:31:29:62:4d:24:9d:29:0f:4c:37:94:c3:cd:90:
29:14:76:c2:11:d3:dd:bd:13:a0:74:4e:f5:7b:5c:f5:cc:97:
35:70:98:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:41:27 2025 by rpki-client