Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/155TVH02l86EED025gpY2ZD5Da4.roa
File: 155TVH02l86EED025gpY2ZD5Da4.roa (raw, json)
Hash identifier: 1vENtUeMdkB3jUKhfmSZayLyvy2FHKG/MWsQVHJK9kg=
Subject key identifier: D7:9E:53:54:7D:36:97:CE:84:10:3D:36:E6:0A:58:D9:90:F9:0D:AE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C5C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/155TVH02l86EED025gpY2ZD5Da4.roa
Signing time: Wed 05 Feb 2025 12:27:02 +0000
ROA not before: Wed 05 Feb 2025 12:27:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3164 (0xc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 12:27:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D79E53547D3697CE84103D36E60A58D990F90DAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3c:ed:45:49:83:f6:1c:7d:61:bc:78:8c:59:
e5:81:a1:ab:8f:ae:5d:98:ce:36:af:87:d0:2b:3c:
c2:43:e6:d6:7a:65:74:b4:d8:32:49:97:4e:c3:e8:
74:7c:ad:3e:79:9a:0b:9d:80:86:0d:59:b3:9e:a2:
63:24:a5:3d:64:b1:fe:60:e5:32:1d:e1:3c:37:0b:
8c:af:61:55:22:c7:74:32:f5:2a:c5:df:b4:ed:ce:
05:dc:2b:ce:58:48:bd:82:91:b8:6a:c2:92:3e:3e:
b4:71:3f:70:83:28:c1:1d:54:c8:e4:73:30:e5:a2:
9d:6d:6d:6a:ef:d2:e4:63:ca:33:84:a1:3f:fc:85:
a0:f6:d3:ae:43:37:e0:45:f4:80:c7:da:c9:75:37:
15:ba:df:f8:62:60:7f:17:27:1b:ec:2a:d4:b3:40:
f8:5c:85:1b:63:2e:f7:83:9c:cb:e4:dc:fa:1e:5e:
e9:32:c4:e2:b2:cb:19:2a:79:14:3e:87:f9:9b:d1:
b9:06:9f:c6:a3:9d:3a:ce:a7:fa:3d:88:aa:21:e5:
90:34:af:f3:f6:a2:04:95:01:b5:ff:20:2d:79:b0:
a6:16:26:40:96:03:76:66:36:c8:af:02:1c:6e:56:
f2:7b:e3:32:ef:03:9a:40:7b:ee:03:fc:0e:22:80:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:53:54:7D:36:97:CE:84:10:3D:36:E6:0A:58:D9:90:F9:0D:AE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/155TVH02l86EED025gpY2ZD5Da4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
73:f0:04:c1:7d:58:19:bd:34:8b:e4:d9:c4:f2:c3:1e:a6:15:
ea:30:40:f1:b6:47:d7:e8:e9:7c:51:5e:0e:2b:b0:ea:17:aa:
41:ed:f9:53:52:16:9e:3c:e0:99:fc:2e:1d:27:3f:9a:6a:95:
7f:f5:bd:a0:ab:15:c9:94:a1:30:11:28:3b:98:9b:07:71:7f:
3b:ad:e8:fc:af:9a:18:8f:d5:b4:4d:fe:2d:1c:ca:30:6c:07:
d7:8d:ff:44:ab:15:0c:d9:98:6d:aa:20:59:0a:57:f9:02:56:
5d:6d:49:58:9d:1c:f8:b4:7c:8b:1f:3b:62:69:fe:dc:b9:e2:
2f:b3:7c:d7:0d:0a:6d:3d:d8:73:dd:33:c2:cb:8f:5d:6b:a5:
69:ea:21:e6:f1:da:a3:8c:d4:ae:24:a9:45:6a:a7:df:29:9a:
48:c6:a2:d2:24:44:c3:49:6b:61:6b:08:4c:08:2e:67:29:25:
5d:82:05:1a:66:30:d5:d7:2e:e7:af:99:14:a6:02:e8:3d:29:
73:ab:a9:41:91:9c:8d:32:93:f6:e5:d8:6c:db:e8:80:8e:c7:
b3:60:61:60:d5:75:46:a3:32:6f:65:db:de:72:83:0f:af:90:
42:a4:c6:fe:03:5c:e2:bf:8b:1d:67:97:88:85:e9:82:95:75:
8f:5a:68:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:17 2025 by rpki-client