Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/2RrXL5oyukFZFLZaffFk4bjKh5o.roa
File: 2RrXL5oyukFZFLZaffFk4bjKh5o.roa (raw, json)
Hash identifier: rkh/IVF1PUH1IGIpx/7YpcO58Vm9pY/MZcpbhlc9hvE=
Subject key identifier: D9:1A:D7:2F:9A:32:BA:41:59:14:B6:5A:7D:F1:64:E1:B8:CA:87:9A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D36
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/2RrXL5oyukFZFLZaffFk4bjKh5o.roa
Signing time: Fri 07 Feb 2025 18:55:48 +0000
ROA not before: Fri 07 Feb 2025 18:55:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3382 (0xd36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 18:55:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D91AD72F9A32BA415914B65A7DF164E1B8CA879A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:34:62:60:2b:09:23:81:05:66:45:99:ad:
71:b7:e9:e7:23:70:ed:93:89:69:9e:ae:cb:00:22:
96:7d:b8:dc:35:3a:02:de:da:fe:77:e5:8b:5f:51:
2e:52:77:1a:15:6e:2f:26:cd:78:15:36:a2:5f:5f:
72:b3:e8:80:75:d2:59:b9:46:3c:3e:5e:64:69:d3:
51:40:21:54:7b:75:5e:9c:92:66:35:0b:07:d7:c7:
7c:51:b2:a0:35:c0:85:cf:f3:b4:34:3c:da:e9:7f:
a5:9e:e4:dd:72:6b:28:37:97:f8:28:6b:74:0a:dc:
45:2a:68:a7:29:0c:76:3f:f1:5c:8b:1c:6c:b4:01:
d6:1e:cc:1c:fd:ca:bf:71:21:1a:1c:f6:a8:42:1e:
fb:20:4f:b2:17:4e:2d:6e:48:ad:91:79:00:34:6b:
f6:b7:87:c8:52:13:48:2d:62:7d:3b:11:b3:b1:ae:
c6:e2:da:60:9b:b1:be:a9:92:bb:ce:dd:a0:63:77:
21:0b:e5:d2:d9:8a:5d:06:c6:df:b7:b3:49:24:f7:
a7:56:77:ed:da:ad:cf:88:22:2e:62:f4:78:93:b8:
90:16:cb:95:2d:e0:99:72:24:1f:64:ec:aa:e7:8a:
85:39:62:b9:a1:8e:4c:1b:3e:b2:59:20:07:30:9e:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1A:D7:2F:9A:32:BA:41:59:14:B6:5A:7D:F1:64:E1:B8:CA:87:9A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/2RrXL5oyukFZFLZaffFk4bjKh5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
29:ab:d4:93:80:9f:14:9d:62:27:3b:e8:7f:af:f3:56:9f:2a:
a9:a7:97:2e:a5:3b:90:12:87:11:68:e3:50:37:f2:a7:c6:04:
6a:17:91:63:7c:40:7b:0d:66:dd:81:9c:4c:1c:c4:e2:e6:12:
07:41:20:8c:4f:4f:81:9d:0e:cf:49:26:6e:40:36:9c:c3:51:
4d:8d:d9:cf:92:4f:63:5c:65:f2:b5:57:f1:ca:65:d0:4c:2c:
bc:67:0b:f6:27:2d:cb:36:82:03:a6:64:bd:1d:ce:cd:c3:f1:
a2:93:49:35:64:e1:20:7e:a5:76:35:dd:5b:4f:d2:60:6a:f3:
c7:de:5a:d5:be:eb:28:c0:56:7a:74:55:91:be:68:f6:6c:c5:
af:13:b3:e0:10:38:38:f3:7d:b4:3d:a8:2d:7f:81:36:16:8f:
eb:d1:f8:b7:38:2c:c6:52:09:3a:99:75:8b:50:7a:61:80:91:
a7:f1:c2:68:49:a3:14:00:de:bb:d5:26:03:eb:c8:07:1d:a4:
b3:b6:f3:15:38:3b:80:99:1d:e8:4b:12:3e:10:83:02:d3:c9:
8f:6d:a0:5f:b9:e0:c6:e9:b8:73:b9:11:0f:30:1d:34:2c:82:
aa:fb:3e:9d:38:9c:12:94:85:ef:79:08:73:20:b5:f0:e6:b6:
36:ad:ae:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:29 2025 by rpki-client