Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/zUGbHuxmKZvP28ddL-OO6wyXM9k.roa
File: zUGbHuxmKZvP28ddL-OO6wyXM9k.roa (raw, json)
Hash identifier: vdUsOzid7eir/zlJ8F4rvb9EccF6Xcz0LIN4kn46OnE=
Subject key identifier: CD:41:9B:1E:EC:66:29:9B:CF:DB:C7:5D:2F:E3:8E:EB:0C:97:33:D9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C74
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/zUGbHuxmKZvP28ddL-OO6wyXM9k.roa
Signing time: Wed 05 Feb 2025 18:25:44 +0000
ROA not before: Wed 05 Feb 2025 18:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3188 (0xc74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 18:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CD419B1EEC66299BCFDBC75D2FE38EEB0C9733D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:04:50:8d:f0:c7:bf:2d:60:8a:4a:74:51:
38:44:d6:4f:3e:8c:87:bd:c8:83:c9:f8:da:8a:1b:
79:f3:6d:8f:5c:b4:46:20:1d:14:b0:f5:f0:3b:13:
97:64:87:44:80:41:16:1d:0e:09:f8:7a:74:13:41:
8d:05:70:6f:4c:ac:a2:94:27:10:99:53:93:e4:53:
0a:e5:3b:7b:53:57:6d:16:92:df:3c:78:56:f6:0e:
ba:b2:f9:61:94:8b:c8:8a:15:2c:7b:c1:4c:b1:96:
f7:72:51:93:77:3e:be:2e:a9:a2:ad:a8:74:63:ab:
81:a6:9a:ca:72:70:84:b9:50:d8:ab:b9:35:15:3a:
5a:14:f6:16:61:7a:0b:df:10:1c:3f:49:d6:bd:cb:
a2:52:fb:35:02:b1:bc:0f:f4:24:35:2b:da:db:07:
78:fc:ff:c9:8f:69:68:d9:71:46:14:da:2e:69:c6:
45:05:eb:bd:2d:31:8c:24:a7:35:98:05:31:53:69:
25:9b:08:2d:30:57:37:bb:6b:4f:e4:76:09:0a:5f:
41:0e:17:33:62:21:12:ef:e5:18:02:28:3e:bf:98:
b0:5b:c6:dc:e1:34:17:5a:de:0c:d8:b5:f7:4d:07:
96:c3:ae:73:33:e5:ef:1b:8e:4a:49:46:ab:80:09:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:41:9B:1E:EC:66:29:9B:CF:DB:C7:5D:2F:E3:8E:EB:0C:97:33:D9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/zUGbHuxmKZvP28ddL-OO6wyXM9k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:62:db:d4:21:ea:80:57:22:e6:a9:71:a4:a8:d1:0a:ee:d2:
f9:78:99:99:c7:f2:30:4e:85:ad:59:ab:8f:ad:6c:d9:9f:1c:
42:4d:05:08:0a:42:99:cd:9c:41:e9:df:6a:14:af:51:50:fd:
fa:35:6d:6d:f7:81:29:4c:51:d0:1f:49:91:42:c8:4e:ea:4c:
19:53:f5:c4:10:d0:72:b6:5e:9e:8a:f1:8b:e5:16:9f:a8:01:
e2:45:2a:f2:f9:e6:07:49:2c:b9:51:69:90:fe:8f:25:a7:ec:
c0:da:2a:92:a4:20:f8:6f:fe:4d:19:30:63:81:af:90:0b:58:
a6:4d:eb:c6:81:be:53:57:fc:1e:56:3f:86:48:b9:7b:1c:cc:
23:0e:83:7d:be:22:94:9d:fa:71:74:39:72:ac:19:85:3f:69:
97:99:16:bd:d6:b8:fa:d6:bc:e7:cb:5a:90:ac:eb:25:29:f0:
8c:6b:9f:ee:81:b4:27:d9:a6:fd:66:46:aa:69:9b:40:7a:c7:
be:9d:e7:a7:69:9c:ba:a8:d9:7f:a5:74:6d:3b:93:dc:21:c5:
d0:9e:81:7d:01:f8:30:fd:8e:93:1b:52:12:24:00:10:6c:2f:
96:5b:98:cc:24:57:44:8d:98:73:86:c3:69:0e:dc:e8:c5:56:
2b:ec:b7:98
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:58 2025 by rpki-client