Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/vepK3cQ4hwBTc4cOLz_rc9jhuh0.roa
File: vepK3cQ4hwBTc4cOLz_rc9jhuh0.roa (raw, json)
Hash identifier: fJqAmOT3gusKYJOavmqWVsHKhh58/hY2yEGAwCahKPw=
Subject key identifier: BD:EA:4A:DD:C4:38:87:00:53:73:87:0E:2F:3F:EB:73:D8:E1:BA:1D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BB2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vepK3cQ4hwBTc4cOLz_rc9jhuh0.roa
Signing time: Mon 03 Feb 2025 17:55:38 +0000
ROA not before: Mon 03 Feb 2025 17:55:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2994 (0xbb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 17:55:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BDEA4ADDC43887005373870E2F3FEB73D8E1BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:89:3a:13:6c:ea:06:d6:7b:8f:f1:63:f5:3a:
a1:ce:5d:1b:6b:af:25:5f:d1:3e:c2:05:d7:8b:2c:
88:2b:25:85:01:1a:9b:c1:79:7e:47:73:a5:06:e3:
56:f2:8f:56:ba:3d:30:78:45:ca:20:d4:93:79:c9:
4d:3e:07:dd:b7:0e:9c:10:0d:0b:2d:5e:11:33:76:
1d:11:99:2f:b6:1e:27:bb:de:d0:32:17:f2:6f:c6:
d3:9c:ca:c9:e2:49:9c:6c:97:8c:9b:83:a3:5c:b6:
38:91:1d:8e:66:22:37:4e:a7:e8:e8:ec:df:70:7f:
23:fe:fe:43:c8:c9:50:86:86:69:3f:d1:9c:71:a5:
f2:39:80:f3:94:14:11:48:29:80:46:71:9b:12:17:
fd:9e:3b:75:12:73:4f:db:9e:a9:a6:3e:a2:00:d0:
10:18:bb:5e:b8:ed:f8:26:6e:bf:eb:eb:32:d3:26:
12:3c:39:68:c6:92:59:dd:7e:1a:7e:47:32:bd:6e:
48:bb:e0:c6:e6:6c:36:a9:0a:01:c0:b9:75:77:f7:
6a:ba:39:d7:f4:f6:1f:94:2d:b3:28:7f:ba:14:22:
06:d0:0d:96:d7:e6:4e:27:47:d3:9f:f7:df:71:8c:
ca:44:d1:44:a8:29:15:40:8e:eb:bc:5f:07:62:14:
62:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:4A:DD:C4:38:87:00:53:73:87:0E:2F:3F:EB:73:D8:E1:BA:1D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vepK3cQ4hwBTc4cOLz_rc9jhuh0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:8a:c9:2e:2d:c8:b0:49:dd:48:61:ed:e8:7e:88:3c:69:77:
a8:ba:50:0f:bc:6d:2f:93:6f:b8:88:8b:6d:3e:da:bc:a4:05:
b0:56:01:c4:66:39:b5:70:18:35:a5:91:3b:e9:ea:0b:b2:50:
fc:c5:37:56:2b:69:84:dc:c1:12:76:9f:ed:2c:e7:80:6a:45:
e9:18:b2:0c:14:e2:32:45:08:90:9e:09:96:c2:59:7f:c5:ed:
9d:e4:1a:03:2a:a6:8a:0b:80:24:b0:64:e9:06:2a:e9:9c:9d:
87:84:32:c4:a5:ae:7e:ad:96:63:89:10:37:2b:95:32:d1:41:
a4:84:61:c5:6b:a7:13:08:45:58:da:ea:51:65:48:cf:22:ea:
ff:3c:97:c6:d1:03:cc:a8:6b:37:6c:fe:40:8b:5a:da:82:e9:
40:db:8c:30:3c:86:ea:fa:41:ff:8e:da:ae:81:bf:c4:5f:3b:
d2:5f:dc:c8:94:0c:3e:4c:80:3f:67:52:a8:8f:98:01:03:6d:
93:92:9b:16:6c:96:2c:08:6a:04:0b:80:d8:ca:17:9a:fa:4c:
60:3b:b0:e2:11:43:9c:5c:9b:7e:72:25:78:b8:e1:a2:0d:b4:
57:6c:49:89:1f:d8:94:87:90:10:68:11:c6:59:d5:ae:e6:4e:
3a:b1:dc:71
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:07:36 2025 by rpki-client