Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/y2jbjDw1uYwa5sZ8b4wo8unhWPo.roa
File: y2jbjDw1uYwa5sZ8b4wo8unhWPo.roa (raw, json)
Hash identifier: Tl57hvzbeW4Xzig2bKPSYKe6jzw/kJ4dpuUrj2PcoIQ=
Subject key identifier: CB:68:DB:8C:3C:35:B9:8C:1A:E6:C6:7C:6F:8C:28:F2:E9:E1:58:FA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AFA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y2jbjDw1uYwa5sZ8b4wo8unhWPo.roa
Signing time: Sat 01 Feb 2025 19:55:33 +0000
ROA not before: Sat 01 Feb 2025 19:55:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2810 (0xafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 19:55:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CB68DB8C3C35B98C1AE6C67C6F8C28F2E9E158FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:43:97:03:b0:63:75:20:fe:0d:4a:c1:05:8b:
7f:14:fa:f7:f4:6b:9a:e8:e1:15:92:b6:0c:0f:0f:
ad:0a:aa:33:d0:05:b9:24:80:bf:35:9f:5d:f6:4b:
ea:3b:40:78:0f:2d:77:f5:48:63:5d:02:32:99:d9:
4e:e8:e9:3b:6f:61:88:54:23:2d:f7:be:14:63:ee:
0a:6c:7a:4a:cf:4b:22:c7:61:69:74:f6:fb:8d:95:
10:d0:1a:04:e6:bf:b0:50:2d:de:ba:28:06:3f:81:
eb:ed:d2:0d:8d:29:a6:c4:74:e0:d2:6b:3d:10:18:
3c:19:a4:06:e8:8c:38:49:79:2a:82:10:75:62:08:
8d:ad:47:7e:74:4d:68:b8:83:78:57:18:00:7c:17:
63:8d:c5:3b:6e:8d:3a:53:92:67:ed:25:8f:7c:3b:
cf:6f:11:5f:34:76:bc:59:68:5c:0e:94:05:78:f7:
cb:5d:1a:7c:9a:32:8e:0e:c6:be:40:67:cc:16:37:
cc:ee:df:42:4c:c7:76:b2:12:95:aa:9f:1a:9a:5f:
b6:ca:b9:9c:fa:85:48:83:70:8e:17:78:36:bb:f1:
1e:de:40:4e:6a:fe:f8:0a:88:d4:8b:72:59:62:8c:
57:09:3d:df:71:ca:fc:be:aa:1a:fa:98:92:03:64:
6b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:68:DB:8C:3C:35:B9:8C:1A:E6:C6:7C:6F:8C:28:F2:E9:E1:58:FA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y2jbjDw1uYwa5sZ8b4wo8unhWPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:7d:b9:73:4e:1b:fc:b2:94:53:56:cd:1f:82:c0:ad:16:1a:
bc:23:3f:61:71:d4:80:c6:77:89:7b:c9:86:9a:c8:ec:c4:16:
57:d9:d6:4a:8b:af:78:94:8f:84:56:d6:ee:71:47:c5:f0:10:
93:68:4b:7e:af:02:9b:49:be:2e:f0:a3:ba:a6:54:32:30:21:
a5:e0:32:49:e5:a3:18:91:4b:44:58:db:74:ad:48:51:86:da:
55:2b:79:d1:6b:15:d8:c4:01:7c:fd:bb:04:ef:8e:8f:e1:98:
7f:76:79:82:2e:d2:6a:7f:27:4e:f0:d1:f6:08:43:a1:99:cb:
78:f0:e1:90:b8:9b:ef:98:27:b8:73:0f:d9:be:c8:b6:3c:51:
32:d2:64:e2:b0:9c:2d:3c:9c:24:ca:55:81:4f:9d:60:5d:8b:
6d:83:9f:c6:d7:61:86:ae:c2:97:02:24:35:39:23:a0:09:12:
5b:79:50:12:79:c6:00:a2:97:4b:90:9a:ff:3c:3f:98:e3:60:
26:4c:94:cf:7e:2b:80:b6:93:ac:93:54:59:5c:b9:22:25:55:
f6:a3:bd:b1:9c:4e:7e:df:49:00:72:9d:f4:78:8c:ab:6f:85:
43:d6:4d:c7:ee:30:ce:02:cf:ac:68:3a:0e:66:7b:b3:c1:e2:
25:c6:6a:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 13:30:52 2025 by rpki-client