Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7TzpV6xsauy3sLhONFvA7eK9208.roa
File: 7TzpV6xsauy3sLhONFvA7eK9208.roa (raw, json)
Hash identifier: BjKHF1NFFisvatB4XRgoVwP6peczkGo1UDzrDKiQstw=
Subject key identifier: ED:3C:E9:57:AC:6C:6A:EC:B7:B0:B8:4E:34:5B:C0:ED:E2:BD:DB:4F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CE4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7TzpV6xsauy3sLhONFvA7eK9208.roa
Signing time: Thu 06 Feb 2025 22:25:49 +0000
ROA not before: Thu 06 Feb 2025 22:25:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3300 (0xce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 22:25:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED3CE957AC6C6AECB7B0B84E345BC0EDE2BDDB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:17:55:cf:3d:e1:19:14:98:29:5c:01:b4:69:
20:3a:74:02:8d:77:7a:8b:31:55:2d:9c:a9:7b:a2:
ef:2b:64:85:e5:da:d3:45:28:06:4e:61:c3:d1:3c:
6a:d3:e3:8e:84:1f:48:d6:2b:ca:3d:46:e8:c3:80:
9f:54:6e:e9:5d:49:10:6f:a9:1e:8d:d4:3d:f7:04:
96:0f:e6:aa:0f:9a:03:af:f6:72:0b:5f:a4:9a:aa:
a2:69:67:df:eb:f9:7c:a8:c1:4e:aa:ad:12:1e:b7:
55:f9:f0:f0:18:7c:ae:05:99:67:4c:62:75:36:21:
27:fe:93:e5:bb:b5:a2:d6:1b:1f:ab:a7:25:ae:0d:
23:d5:3d:a4:75:3f:22:af:ec:a9:d2:28:74:31:dd:
e8:4d:1b:bb:33:16:52:23:27:22:6c:bc:a8:48:80:
2e:1b:62:d8:78:de:d8:34:9d:94:3c:d2:ef:93:d3:
70:8a:4f:c8:11:e1:63:80:f2:a9:09:54:56:e6:f4:
a6:e4:2b:4b:d2:2d:ea:d6:fc:2c:16:36:c7:dd:f3:
99:f3:18:c3:0d:35:d0:12:d1:0b:96:b6:10:fe:12:
28:57:b7:d8:b4:28:39:9b:33:c1:d4:3f:bd:ad:e0:
53:6c:7e:9a:fd:f6:a0:ff:5c:de:a4:9c:dd:f1:61:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:E9:57:AC:6C:6A:EC:B7:B0:B8:4E:34:5B:C0:ED:E2:BD:DB:4F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7TzpV6xsauy3sLhONFvA7eK9208.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:44:5c:c2:7f:18:53:c4:b6:7d:37:85:17:58:60:55:27:b9:
25:1e:87:86:3a:71:4d:6c:46:8d:ac:1a:fa:63:e8:ac:f3:3f:
96:a6:87:2a:12:67:28:10:c7:3e:ce:23:ea:fe:26:10:43:15:
f0:2b:e7:cf:ae:15:cd:3f:65:91:e8:df:26:8f:4d:79:3c:04:
a5:f1:89:b7:3e:26:0b:c3:a1:ea:c0:d4:af:d9:fa:41:2e:b6:
8b:2a:d9:3e:15:df:f7:c9:50:ca:3e:86:f0:64:c9:a0:80:99:
80:0a:33:8d:0c:58:d4:b4:2c:39:bf:8f:fe:86:8a:02:a2:b7:
3f:d5:c7:d5:ca:7d:39:9a:bb:cf:2b:d5:7b:25:56:03:57:b0:
f2:04:8f:d9:83:a1:fd:58:db:ab:7a:3c:a9:6a:c3:aa:27:8b:
31:72:77:fa:c0:46:56:00:38:95:2c:c2:59:02:1b:2d:d3:af:
0e:4b:1c:f9:60:a9:da:e4:f7:a9:a4:b7:8b:1d:e7:37:05:3f:
27:50:be:b8:d7:80:b2:8c:fd:4a:62:2f:3d:56:c6:0b:69:ee:
de:21:65:78:73:4f:b6:a1:e6:45:3a:6f:64:1b:7e:ba:a0:b9:
ae:6f:f9:15:fb:78:df:de:c7:bf:5e:d5:c6:b9:71:30:b2:a2:
ed:e2:95:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:27 2025 by rpki-client