Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/46ZnF-l1LJNmI89xcLwBLTPBV8M.roa
File: 46ZnF-l1LJNmI89xcLwBLTPBV8M.roa (raw, json)
Hash identifier: 48pltupmsbO8R9bW5MmBWlAFBEcMpLH69Eudl3imeJs=
Subject key identifier: E3:A6:67:17:E9:75:2C:93:66:23:CF:71:70:BC:01:2D:33:C1:57:C3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D92
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/46ZnF-l1LJNmI89xcLwBLTPBV8M.roa
Signing time: Sat 08 Feb 2025 17:55:52 +0000
ROA not before: Sat 08 Feb 2025 17:55:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3474 (0xd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 17:55:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E3A66717E9752C936623CF7170BC012D33C157C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b5:50:17:31:2b:ec:3c:ec:07:4e:41:0b:0d:
dd:08:4c:ec:a0:9c:2e:9d:ef:eb:55:4b:41:34:67:
a9:15:e1:d3:6c:3f:7d:1b:97:8b:88:68:75:3b:2c:
21:0f:ac:64:30:34:fa:03:19:07:36:1d:ec:03:ef:
8f:65:e4:50:fd:2f:b7:40:fe:ff:ec:19:6e:d8:ad:
6e:56:dd:80:e5:c2:ab:95:37:0d:e6:e7:5f:f9:e0:
d4:e7:28:bd:7e:c9:af:09:10:45:f5:f4:54:8b:da:
0c:89:21:93:14:17:e7:98:b5:32:56:59:35:eb:4d:
19:62:ee:bd:c1:8a:92:e6:57:ed:52:3e:3c:3d:1f:
dc:f8:f5:84:12:35:f7:a7:c4:a3:49:07:bb:97:a7:
01:4b:f9:7f:f7:c6:eb:85:e4:71:af:04:b6:9e:cf:
d8:62:55:e9:23:85:70:f5:90:e5:a5:7e:e2:f5:05:
e5:ff:76:2c:ed:66:97:a7:04:60:d6:1a:17:b3:78:
ef:a7:44:ac:7f:bb:80:64:9d:0a:ac:f8:49:d4:b9:
8e:c3:33:c6:bd:69:07:ad:ef:ef:be:e4:07:fb:3b:
93:9d:11:54:05:01:56:75:fd:f6:ab:e4:e4:8f:6e:
4f:51:8e:75:2d:1e:5b:ad:e2:1f:bd:c7:26:35:8a:
ad:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:67:17:E9:75:2C:93:66:23:CF:71:70:BC:01:2D:33:C1:57:C3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/46ZnF-l1LJNmI89xcLwBLTPBV8M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
88:75:e6:67:43:96:54:1b:76:b3:44:64:cc:7e:79:b8:50:02:
28:0a:73:4c:db:e9:6b:1c:0f:30:61:c8:dc:16:a9:88:a1:8a:
83:d4:93:0d:e5:8e:d7:bb:84:ed:46:38:2a:a7:3f:2d:87:5d:
76:01:89:1d:d1:cf:c2:07:50:33:3f:5f:2e:05:de:34:a5:26:
ac:1d:5e:83:32:2c:1f:75:b6:67:80:ed:17:16:16:1d:46:47:
e1:2f:f6:02:3a:39:66:ee:2e:f7:09:c5:5f:fc:dc:d8:e2:62:
f3:db:7b:97:a5:45:fd:3c:9b:e6:88:f3:1c:f8:07:55:5b:f5:
61:02:03:b1:b7:48:05:38:34:d2:9e:b0:31:1f:c2:e4:90:67:
4d:99:09:20:92:7c:1f:51:2c:d9:8f:28:e3:fc:fc:fa:9b:99:
0d:9f:11:1d:4c:52:b6:1d:e4:d4:a8:a3:8d:a3:af:e3:d4:29:
2a:30:99:99:ac:5b:f2:02:47:72:55:dd:40:e7:a9:40:61:4a:
fb:c7:ef:39:bb:44:32:a4:49:3f:ed:e5:88:95:61:79:23:7f:
ff:59:9a:ff:8f:c3:8c:65:f5:74:02:fe:f6:f1:94:6f:4c:27:
0f:be:2a:27:70:db:02:2c:10:40:97:ef:f7:c9:95:ff:c7:1b:
2a:53:3c:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:54 2025 by rpki-client