Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/z-rFXQb_K5fVZbwun5gXL_8HOm0.roa
File: z-rFXQb_K5fVZbwun5gXL_8HOm0.roa (raw, json)
Hash identifier: 56Ze5CfOUSXxFp1xqabpYRAX0CpodWqYCENNm06WG0s=
Subject key identifier: CF:EA:C5:5D:06:FF:2B:97:D5:65:BC:2E:9F:98:17:2F:FF:07:3A:6D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BDE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z-rFXQb_K5fVZbwun5gXL_8HOm0.roa
Signing time: Tue 04 Feb 2025 04:55:40 +0000
ROA not before: Tue 04 Feb 2025 04:55:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3038 (0xbde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 04:55:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CFEAC55D06FF2B97D565BC2E9F98172FFF073A6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:a9:e8:cf:0e:05:70:44:0a:de:0a:84:c6:
cf:0a:a8:8b:aa:71:c1:02:7d:ea:ec:9f:11:64:7b:
84:fc:49:49:24:92:41:1c:eb:47:7f:06:96:a8:76:
91:aa:86:46:7c:55:31:d7:86:f4:46:79:66:b5:4a:
21:2e:40:7a:ba:79:20:14:7b:9b:c3:77:eb:2e:01:
19:ca:a7:0d:c8:79:c1:23:6e:c3:06:be:88:05:a4:
36:46:66:15:6c:c5:00:ec:eb:4a:3a:58:61:d5:de:
e8:43:af:cb:eb:36:01:0e:9c:3b:fa:b2:7d:dc:bc:
f9:30:bc:bc:b0:73:f0:7b:07:c0:d4:d8:7a:80:4b:
2a:9a:ad:f3:85:33:58:cc:d7:19:7a:cb:80:ee:e8:
d6:58:4e:08:73:6e:9b:95:fb:90:db:59:fc:73:61:
ac:ed:fa:dc:62:79:c2:bc:ea:b6:23:f4:3d:b1:88:
e2:3b:42:df:21:59:b7:5c:92:e9:3f:53:eb:57:ab:
54:c4:ee:e1:0a:29:19:e0:5d:26:a4:d7:a5:b7:30:
44:c7:26:1a:e0:96:38:15:10:bf:1a:3e:3b:3f:f2:
8f:1c:32:50:7e:f6:01:07:74:6c:9e:01:1c:69:9b:
d7:a9:43:0c:d3:07:71:4e:39:fa:03:21:92:18:4a:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EA:C5:5D:06:FF:2B:97:D5:65:BC:2E:9F:98:17:2F:FF:07:3A:6D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z-rFXQb_K5fVZbwun5gXL_8HOm0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
93:62:f5:4b:d2:95:47:4e:8b:34:56:58:a5:50:c6:52:6c:69:
ca:24:93:6d:46:8e:53:50:6a:11:4f:2d:26:09:20:f6:26:45:
ce:40:8d:9d:64:d9:f5:f7:09:7a:86:96:e2:5e:82:14:90:ac:
3f:af:8b:15:29:ad:e7:8d:b2:93:8c:ef:2c:7a:6f:42:fe:dd:
e8:41:71:4f:63:d2:95:14:26:42:30:e7:31:74:a0:b4:a2:b3:
23:0c:03:ee:cf:60:0a:70:e3:dd:76:af:8b:18:b9:37:4f:64:
5d:9f:70:7c:37:3c:c9:66:c2:6f:5c:c1:64:f2:b2:d7:d5:87:
77:36:36:9e:15:7e:b3:54:90:c7:ff:9c:ed:f1:65:29:b2:8b:
c1:e7:03:b3:05:14:92:7d:30:89:ea:5e:81:f7:ed:39:3a:0c:
01:42:fb:d7:b9:20:d2:2e:d4:fd:76:04:44:b4:02:e9:0f:ef:
35:a5:13:bb:9d:35:5d:65:55:5a:37:fc:01:ad:fa:53:96:53:
5e:64:af:c9:8b:11:b6:eb:90:fa:f3:9e:58:2c:2e:d9:5e:cd:
4b:28:7a:57:61:d4:36:2c:c2:ff:4c:79:19:9e:e9:11:99:a7:
9c:a3:8f:ac:77:74:7a:55:a7:77:b4:e6:fd:79:72:d7:56:e0:
91:04:ca:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:47:53 2025 by rpki-client