Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/80xV8pk-wK_9ZJxrbcBS5xKCLdE.roa
File: 80xV8pk-wK_9ZJxrbcBS5xKCLdE.roa (raw, json)
Hash identifier: zCW7QeaciHZ/g745W38ClBFox/8JLjPa7XeRFaOa++w=
Subject key identifier: F3:4C:55:F2:99:3E:C0:AF:FD:64:9C:6B:6D:C0:52:E7:12:82:2D:D1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D54
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/80xV8pk-wK_9ZJxrbcBS5xKCLdE.roa
Signing time: Sat 08 Feb 2025 02:25:51 +0000
ROA not before: Sat 08 Feb 2025 02:25:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3412 (0xd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 02:25:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F34C55F2993EC0AFFD649C6B6DC052E712822DD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:5f:42:b2:4c:d5:1c:80:5d:ba:0e:f8:0c:
24:14:ac:35:53:bc:e0:10:ae:71:16:a5:57:77:7d:
ce:aa:31:9e:f1:fc:ae:83:c2:9b:b9:24:2d:a6:b3:
42:1d:ea:e1:11:a6:15:82:7f:ef:f7:5a:a3:da:82:
75:5c:53:f4:d2:db:1b:47:2e:ea:b9:07:50:a3:fe:
ac:9d:17:06:5b:e0:0f:e7:37:6a:6f:f9:81:45:1e:
64:d7:97:7a:68:bc:1e:2a:6c:18:4a:dd:70:75:30:
a2:a3:b1:a8:93:92:41:f6:c0:c4:78:b3:be:cf:01:
30:be:19:e1:a3:75:68:8f:76:99:aa:9d:dc:45:4c:
47:5d:13:73:87:37:6f:c0:b2:42:db:e7:5d:5a:0c:
91:08:de:85:2a:fe:d4:7d:dd:de:4d:e8:d0:7b:fe:
5d:f3:f4:8c:0e:35:92:e7:cf:53:ba:67:a3:b6:89:
5b:3c:f0:6e:61:1a:34:6b:f6:5b:d8:01:a3:fc:07:
a9:08:d0:08:ec:84:5d:40:0b:53:d4:37:c6:90:63:
3d:c9:db:f0:d1:17:f0:37:aa:9b:b5:2f:f8:66:59:
b9:5e:56:1e:a9:55:b0:c6:aa:68:df:a7:8e:28:77:
1c:d2:24:9d:c9:41:3f:04:f8:e5:c5:9c:b1:3d:1e:
11:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4C:55:F2:99:3E:C0:AF:FD:64:9C:6B:6D:C0:52:E7:12:82:2D:D1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/80xV8pk-wK_9ZJxrbcBS5xKCLdE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
65:ca:ce:67:69:f0:7b:b1:c0:1b:76:ca:3b:8b:f6:2b:77:b1:
b3:c2:70:8d:f1:81:e5:dc:2a:11:0d:ed:5c:96:99:88:70:5c:
91:19:a5:03:d1:9d:8c:ff:56:85:47:83:ba:cf:a6:38:56:f0:
2f:41:04:ee:b5:ed:1e:a7:8e:80:62:4a:ae:84:48:57:2b:59:
e6:90:f1:60:75:f5:f8:0a:dc:8c:94:4c:03:fb:40:ae:75:3a:
59:3c:57:40:c3:29:73:1e:c6:dc:64:67:c6:76:85:0b:65:38:
97:c5:ac:59:7e:8d:ee:20:31:71:51:e2:8a:ea:d0:a7:f1:78:
a1:73:d3:4f:94:e8:19:5b:15:ff:c5:64:d1:97:18:80:f4:4b:
f2:2a:a5:3a:11:99:1e:86:04:b7:30:35:b2:92:b5:61:0a:50:
12:77:91:73:2b:33:5b:2e:fb:e4:0c:f7:5b:d2:00:02:8c:cc:
4f:b4:b1:cd:a7:bc:79:13:1c:6d:6a:5f:3c:a2:ab:72:12:c5:
dd:84:59:dd:72:a9:32:2b:38:a8:9c:8f:ce:f6:a1:27:1f:ef:
25:30:88:b6:c9:6c:48:38:3b:e4:4b:3a:1a:8a:9f:62:97:dc:
25:4d:03:df:a2:32:68:9a:31:c6:9d:7b:2c:8d:94:23:1c:b0:
ce:58:6c:fc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:03 2025 by rpki-client