Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8MkKMYlm6P38e6UmBLY-ab77yIw.roa
File: 8MkKMYlm6P38e6UmBLY-ab77yIw.roa (raw, json)
Hash identifier: oLBG0Gxn/+saHnzS+nmGbsmIw9V5tFWMNMVS6ONx9ng=
Subject key identifier: F0:C9:0A:31:89:66:E8:FD:FC:7B:A5:26:04:B6:3E:69:BE:FB:C8:8C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A8C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8MkKMYlm6P38e6UmBLY-ab77yIw.roa
Signing time: Fri 31 Jan 2025 16:25:30 +0000
ROA not before: Fri 31 Jan 2025 16:25:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2700 (0xa8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 16:25:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F0C90A318966E8FDFC7BA52604B63E69BEFBC88C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:11:d8:58:b8:1f:7d:30:ba:a1:e6:03:19:c2:
05:96:7f:bc:53:6c:0a:20:43:60:70:dd:fd:63:db:
b2:5b:62:d5:32:90:f0:f3:81:7c:61:b6:ee:52:8b:
d3:c8:6a:1a:c6:52:a9:ae:e5:14:d2:c0:ac:e0:63:
8a:e1:e1:b6:45:d2:b7:6a:86:5f:ea:bf:96:25:0d:
e3:60:28:66:ec:25:a8:18:46:79:58:63:ee:22:8b:
4a:ee:22:54:d9:28:44:af:09:e7:15:e1:00:de:76:
c9:dd:bb:48:0c:d4:90:33:38:cd:2c:ea:df:fe:40:
7a:94:65:d8:f5:ff:17:e7:e2:57:15:48:48:e8:44:
a1:3c:b3:64:4a:82:29:d4:68:6f:13:bd:14:a4:2d:
ad:6a:52:3c:0d:ba:27:87:2c:1b:c4:40:63:2b:b7:
f0:d2:c5:5b:2f:cd:7c:e4:a9:b6:5e:bc:3a:6a:50:
0f:d9:ba:a6:eb:c4:ca:b9:41:0e:f2:cd:99:f5:f6:
5c:28:b7:53:60:6f:a0:6c:ef:e7:ea:ad:a1:33:f2:
b2:1b:5c:45:3f:1d:09:57:ff:b1:47:e8:14:00:ed:
6d:6c:ca:1b:2f:6b:0d:ec:87:9f:ca:f5:97:0d:6d:
b6:b7:a5:7d:3d:b4:2b:a9:0c:35:8a:99:4e:63:3c:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C9:0A:31:89:66:E8:FD:FC:7B:A5:26:04:B6:3E:69:BE:FB:C8:8C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8MkKMYlm6P38e6UmBLY-ab77yIw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:e7:70:a8:da:d3:f6:6b:06:91:5d:ba:97:25:28:4c:94:74:
23:ea:89:79:45:df:30:a9:70:b4:fe:db:f3:1d:e9:c7:43:95:
d6:68:0a:69:c6:e5:77:4f:15:9b:47:90:90:05:10:57:10:d3:
88:06:7e:8f:d2:09:fc:43:b5:d5:f3:50:f9:96:b3:f4:50:51:
2e:10:6c:ab:5e:c9:b1:dd:b2:05:88:c4:de:b3:cc:f2:9e:42:
3f:0c:fd:0e:e7:94:f5:44:bf:f6:4b:fe:70:f8:b2:a6:e5:31:
94:0b:78:7d:12:8a:d2:7b:b5:1d:02:a9:a7:81:ab:91:e7:ba:
3e:f6:ba:01:3e:2c:66:4b:33:0e:57:e9:38:8a:07:b8:bc:62:
5e:ee:49:5c:76:9a:fc:f4:1a:46:ca:d8:51:04:96:55:c4:9b:
c6:95:a1:d6:26:11:4e:e6:d9:fc:dc:6b:a9:94:22:70:c7:cc:
21:f1:96:ca:48:a6:f7:dc:c4:e2:35:e2:6e:c5:e3:79:7d:32:
55:6c:c7:20:9c:f3:bb:15:67:9c:71:a7:6f:09:3e:41:99:fa:
ce:f9:3a:57:15:48:7d:52:15:85:7c:e7:01:23:df:0c:64:ab:
b5:77:d4:da:85:8c:47:c6:89:80:f0:01:37:8f:62:77:4f:b5:
21:1b:94:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 09:09:56 2025 by rpki-client