Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3oDhZVJqOTAdN_EYM7vtYiS7Odw.roa
File: 3oDhZVJqOTAdN_EYM7vtYiS7Odw.roa (raw, json)
Hash identifier: kBW1gClnTtiSqcVQfKE74fI3DJHpdQFNwjJGRRKNYrM=
Subject key identifier: DE:80:E1:65:52:6A:39:30:1D:37:F1:18:33:BB:ED:62:24:BB:39:DC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CA0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3oDhZVJqOTAdN_EYM7vtYiS7Odw.roa
Signing time: Thu 06 Feb 2025 05:25:45 +0000
ROA not before: Thu 06 Feb 2025 05:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3232 (0xca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 05:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DE80E165526A39301D37F11833BBED6224BB39DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:de:35:e5:5f:93:6a:c6:ff:7c:ae:7d:32:
d2:0d:50:35:2f:35:9e:04:a7:74:43:9f:35:87:32:
95:61:4d:78:44:9d:b6:c3:d4:47:56:4b:50:44:03:
27:bb:07:49:0f:b4:11:36:0e:bd:32:84:97:35:de:
20:a5:db:86:eb:6b:49:31:e7:ce:66:fe:a7:ff:38:
5e:58:3e:41:ec:97:e9:77:fd:52:15:44:d0:54:d8:
be:57:3c:8e:21:05:d7:4f:17:a6:9c:4f:48:ae:6b:
c0:69:73:ee:83:26:3b:66:e4:9b:c3:9e:2f:07:cb:
40:70:74:8e:a3:8e:b7:41:f5:2b:d9:8c:ed:fc:14:
65:9d:4b:97:41:14:49:b0:46:fb:a9:a1:a8:8b:a1:
fe:f7:48:40:e5:60:4c:1d:34:31:cd:4f:47:55:ec:
c9:91:26:d2:56:71:6e:e2:c2:91:b7:f9:87:12:ec:
1b:82:2d:7d:2e:ae:b5:76:93:24:1d:bf:bf:de:f4:
80:42:0b:f9:06:51:77:0f:72:cf:aa:12:74:4e:02:
10:a6:d8:38:46:e8:00:92:be:a4:b8:2d:bf:44:d9:
01:12:66:69:b5:12:58:d4:f5:6c:c7:f2:73:fe:88:
88:86:9f:30:9f:c5:d6:9f:27:99:bf:64:4d:1e:40:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:E1:65:52:6A:39:30:1D:37:F1:18:33:BB:ED:62:24:BB:39:DC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3oDhZVJqOTAdN_EYM7vtYiS7Odw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:62:57:84:76:f5:c2:b4:05:94:bb:6d:20:70:3a:6b:66:5d:
72:17:53:3f:14:cd:25:f9:2d:f5:bb:83:26:75:be:98:b8:00:
74:3e:95:d1:14:82:3c:7c:06:2b:62:9a:b8:5a:40:3a:ef:59:
af:ce:8b:63:01:3c:3f:76:a6:f6:ce:ef:5d:4f:59:3f:15:69:
1b:12:bc:82:2f:20:68:ef:46:98:40:34:8d:10:eb:ae:cb:34:
7b:53:f4:4c:34:ad:75:20:58:1b:a0:e2:b5:af:a9:1a:6e:cb:
b5:46:b7:49:8a:7a:37:f9:ab:b1:ad:ea:c0:bb:cb:e9:c9:fa:
e5:51:07:d8:74:46:56:21:14:47:63:0a:d9:8a:aa:6f:54:8a:
93:36:82:01:1e:79:04:b1:79:1e:e8:5f:6b:5e:96:dc:28:c7:
94:0f:b4:5d:27:9a:76:e8:51:75:ca:75:93:27:20:36:28:f9:
de:3d:40:56:94:e2:67:54:be:60:a8:09:14:3f:26:f7:e1:48:
ae:89:db:6b:72:1a:f3:df:53:e4:47:bf:26:f8:af:d6:bb:8c:
be:71:6f:de:8b:53:6e:13:d2:23:eb:84:b1:12:c6:4a:59:f2:
fd:57:0a:15:67:d2:f1:84:02:0f:8a:fa:04:25:89:d6:23:26:
a4:86:bf:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:10 2025 by rpki-client