Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/2kjnu6j8FcxraPh7KfwoUi34_xE.roa
File: 2kjnu6j8FcxraPh7KfwoUi34_xE.roa (raw, json)
Hash identifier: G9IXogV4Cw4WgrzY8Q0/0uekPdMWqG2vze3FcGXmWYA=
Subject key identifier: DA:48:E7:BB:A8:FC:15:CC:6B:68:F8:7B:29:FC:28:52:2D:F8:FF:11
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 052A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/2kjnu6j8FcxraPh7KfwoUi34_xE.roa
Signing time: Fri 17 Jan 2025 07:55:05 +0000
ROA not before: Fri 17 Jan 2025 07:55:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1322 (0x52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 07:55:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DA48E7BBA8FC15CC6B68F87B29FC28522DF8FF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:44:89:59:83:eb:e5:ff:72:4e:29:98:49:
b8:d5:16:f8:47:db:40:6f:f3:96:6c:ef:2b:ea:d0:
f4:18:76:91:3d:c8:ca:36:02:87:49:6a:ac:22:2a:
f7:27:c7:c2:32:49:e9:82:8e:51:6e:75:74:c2:e0:
dc:de:39:dc:e3:c7:fb:46:d3:ef:c5:b9:44:35:11:
aa:53:d8:14:12:46:11:ce:a3:9a:63:dd:1f:3b:56:
49:42:cd:d4:43:9a:57:8f:5e:a1:54:b2:81:2a:d0:
a9:bf:3e:1b:2d:2c:77:77:ad:d0:2c:9b:78:be:9b:
97:90:70:70:c7:a8:4f:67:f4:99:4f:86:d4:10:be:
47:49:7c:a8:1e:33:35:8f:fb:12:7b:8e:00:67:ac:
18:1d:66:42:c5:27:af:9a:46:52:95:07:d7:77:df:
af:c6:92:cc:f0:80:3e:6f:f6:92:14:ad:ff:b0:fd:
f2:cf:45:4f:fd:ba:63:05:a7:96:fd:21:15:ed:e1:
9e:08:db:2b:50:9d:c2:29:6d:da:d3:3e:71:bc:f6:
a1:59:cb:8c:7b:cc:3f:63:b1:f9:85:38:27:87:54:
42:25:21:a2:b3:00:51:bb:be:21:10:2d:a5:47:1a:
66:d1:88:fe:8f:5f:cf:df:bd:78:48:39:92:78:18:
ef:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:E7:BB:A8:FC:15:CC:6B:68:F8:7B:29:FC:28:52:2D:F8:FF:11
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/2kjnu6j8FcxraPh7KfwoUi34_xE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
90:24:f8:22:a0:f4:c9:76:4a:43:82:37:88:9e:1c:f2:1c:f2:
a2:45:ea:85:07:91:08:84:0a:a4:a2:6e:da:92:8c:6a:4b:f1:
31:db:67:ad:51:41:e0:22:57:0f:d4:65:32:bf:ca:0b:34:0c:
e1:3a:8f:b5:93:b5:0e:bb:3b:4e:0f:b7:cf:9c:5c:b6:06:3b:
57:08:49:f5:c9:40:7c:a0:00:ec:72:25:13:86:4c:06:57:5c:
52:ca:bb:32:f9:23:42:70:55:d9:81:fd:1a:3d:c8:01:e0:0e:
71:79:c4:bd:db:23:37:79:f5:d7:4d:12:fc:98:af:30:c0:f5:
76:92:50:88:97:de:ed:52:62:bb:6a:59:e4:ff:e6:62:a3:38:
1d:f3:63:d1:ba:0f:f3:65:1a:c8:c6:21:71:1b:78:05:3c:57:
cd:ff:43:48:96:12:ec:da:58:1b:4b:b5:91:b2:c5:d1:83:56:
45:50:d9:e2:b3:0b:b0:06:aa:77:59:77:fb:91:a6:d2:57:1c:
e0:6b:7d:e8:2f:d4:47:2d:35:e5:c3:50:b2:cb:1a:c9:01:60:
5b:3d:8b:21:05:b5:e4:5e:79:4e:65:ab:b2:b0:04:cb:56:6f:
1c:8a:0f:41:97:c8:64:2f:5c:ec:bd:c2:b6:fc:cc:1e:a8:72:
dc:02:2d:ab
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:27 2025 by rpki-client