Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/zE3nH4l1pYNenWnYrbd-65TH_UM.roa
File: zE3nH4l1pYNenWnYrbd-65TH_UM.roa (raw, json)
Hash identifier: mSSWcNRO5J1Z3K3JwWPO1ceRXwF29mVCV/9F4k2EJnE=
Subject key identifier: CC:4D:E7:1F:89:75:A5:83:5E:9D:69:D8:AD:B7:7E:EB:94:C7:FD:43
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CAC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/zE3nH4l1pYNenWnYrbd-65TH_UM.roa
Signing time: Thu 06 Feb 2025 08:25:44 +0000
ROA not before: Thu 06 Feb 2025 08:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3244 (0xcac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 08:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CC4DE71F8975A5835E9D69D8ADB77EEB94C7FD43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:db:22:5d:91:5b:0f:54:6c:7c:96:37:62:
69:6a:c7:3d:ea:67:c6:da:b6:ec:f6:51:8b:65:d5:
be:e4:c0:7f:68:7c:30:8f:50:dc:1f:b2:31:b4:5e:
8f:8d:42:26:d2:ee:f3:e8:b5:b4:77:01:34:1b:1e:
69:a4:04:9a:b5:6c:17:65:0f:bc:0a:9a:9d:af:4d:
cb:ed:d5:b3:3b:be:46:1a:45:e0:7a:31:50:71:66:
2d:8b:3a:15:a8:ce:13:00:73:f6:98:13:64:65:aa:
5b:c6:8f:c1:92:f8:8a:c9:a1:a8:05:a5:2b:b6:a2:
a7:26:23:56:e7:d1:00:19:d5:72:1e:ac:24:71:82:
e0:28:b5:36:a1:54:21:a1:26:a8:17:04:e7:9d:68:
c3:a0:82:1d:ab:8b:4b:4f:68:3d:d6:f6:e5:09:32:
f4:be:d5:d2:6b:34:8f:5e:f5:ee:f7:e2:1e:4f:17:
fd:d5:40:82:2c:35:19:7b:e0:41:af:f3:3f:52:b3:
fc:43:a6:66:36:6f:89:d0:64:c0:8a:6f:7f:23:01:
26:d5:ce:30:07:58:55:e7:11:cf:19:4e:de:f5:df:
b9:c4:b7:eb:10:76:f4:de:30:46:50:81:fd:4a:97:
a5:84:39:a9:bb:fc:55:66:87:b8:ae:0d:06:c5:7b:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4D:E7:1F:89:75:A5:83:5E:9D:69:D8:AD:B7:7E:EB:94:C7:FD:43
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/zE3nH4l1pYNenWnYrbd-65TH_UM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
97:51:7d:5f:12:a1:22:38:b6:c6:ee:aa:c7:ca:15:58:43:d6:
9b:c0:32:5d:a0:02:f2:f6:85:06:87:f9:d3:3f:6d:1c:42:45:
0e:ec:24:1d:85:36:b7:24:f4:83:bc:2a:54:dc:65:50:05:07:
49:54:6c:38:59:89:b3:ee:e6:a4:24:2c:f0:ed:33:96:7e:f8:
43:ca:39:25:02:97:0c:df:e4:d4:bf:58:3f:d1:73:96:a8:5d:
e0:a7:9c:6b:71:f2:98:2e:db:1a:1b:9b:c3:71:54:7e:50:fc:
35:ab:64:1d:b4:25:00:00:8f:0c:e5:60:5f:b5:dd:80:ce:d3:
79:c7:16:c5:95:ea:a9:12:5a:00:9f:b9:80:b9:7d:33:22:96:
98:d3:e9:41:75:1e:b7:84:63:f6:05:82:d5:72:ff:22:a8:d6:
77:2b:9e:10:0c:02:f9:97:92:07:3a:cd:c2:ed:e6:f5:69:a8:
cc:ff:d3:7a:9b:dd:2d:b1:80:e1:88:5c:99:75:ac:00:82:46:
43:b6:ef:fd:a5:26:a5:9b:a0:6d:7d:ac:68:57:a1:43:7e:4c:
9b:c7:8d:e1:9c:46:fc:49:f9:60:77:af:93:12:cc:02:75:51:
b5:70:07:3c:f2:dd:09:1a:1d:ba:73:bd:9b:f8:b2:42:18:c6:
0e:e6:d4:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 20:52:33 2025 by rpki-client