Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8dotZud9y48mc3Ngj7yCj3n7IXY.roa
File: 8dotZud9y48mc3Ngj7yCj3n7IXY.roa (raw, json)
Hash identifier: OcFfNNBv7CBowdevoF14l4QNV19GCO1oHwQZosrCP7M=
Subject key identifier: F1:DA:2D:66:E7:7D:CB:8F:26:73:73:60:8F:BC:82:8F:79:FB:21:76
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CEE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8dotZud9y48mc3Ngj7yCj3n7IXY.roa
Signing time: Fri 07 Feb 2025 00:55:52 +0000
ROA not before: Fri 07 Feb 2025 00:55:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3310 (0xcee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 00:55:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F1DA2D66E77DCB8F267373608FBC828F79FB2176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3d:88:81:ed:cf:4d:bd:5e:33:f7:9c:93:12:
a7:25:8d:e1:1b:2e:79:42:38:c2:0c:59:44:a7:b0:
ee:99:65:9a:75:db:26:14:12:8a:25:96:ab:3f:68:
48:d8:cb:f3:8e:09:2f:d6:e3:a8:46:a3:c4:7e:23:
b6:37:dc:94:43:0d:42:cf:1b:6c:b3:6f:6f:90:30:
1b:05:f9:48:f3:f3:33:3b:08:23:72:69:7d:46:69:
6f:49:f9:7e:37:c8:04:15:b7:72:d3:6b:57:86:c7:
a9:de:f7:6e:44:6b:2f:09:3c:f0:f0:bb:c5:ad:26:
48:73:e8:97:b4:4c:0c:89:d6:46:1f:4e:fa:61:f8:
a3:6a:18:0e:05:0c:ae:a5:11:bc:aa:be:cc:ec:f4:
0d:e9:6c:3d:99:f2:24:90:28:df:24:d3:12:4e:0b:
01:2e:cb:ac:8c:7b:71:80:67:cd:46:e7:bb:36:34:
5c:5c:96:80:61:46:9d:8b:2b:4c:78:dd:e9:17:a4:
cc:95:12:44:34:52:29:98:a8:90:63:c8:2e:8e:d1:
5b:74:b3:cc:57:33:ee:a8:17:89:26:c4:c1:de:27:
17:ae:b6:94:5e:a2:fd:2a:4e:26:80:6c:c4:59:86:
57:11:ad:6b:83:42:61:74:0c:1d:94:50:c6:ef:03:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:2D:66:E7:7D:CB:8F:26:73:73:60:8F:BC:82:8F:79:FB:21:76
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8dotZud9y48mc3Ngj7yCj3n7IXY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
81:f2:a8:d3:e2:0a:2e:80:49:56:ac:6d:30:df:cb:14:1b:c4:
42:af:9b:bb:ab:77:44:cb:dd:64:f1:dc:df:f3:c5:2a:cc:d0:
d9:9d:95:42:50:72:b9:92:9b:5d:c3:46:68:51:c0:a5:cf:dc:
b3:03:93:15:72:29:cc:84:de:3a:2f:81:24:77:72:40:ab:41:
39:ad:06:44:24:05:80:0b:2b:02:30:6e:44:37:c7:55:fd:90:
ad:f2:93:5a:48:b9:fe:4b:59:24:21:cd:2f:99:37:ca:4a:4a:
b3:3d:76:42:5d:97:8e:4d:f1:bd:b0:60:81:e2:d8:1c:a5:70:
0b:d0:c0:f7:1f:9d:79:c4:1d:7f:f8:2e:b0:0b:c4:be:1b:3e:
20:e2:c4:84:99:cb:57:fe:9b:80:4c:53:31:74:fd:a2:28:96:
5b:34:4b:17:3c:26:4e:f0:32:55:a2:fb:4f:0a:39:7e:2c:ca:
86:35:c6:1e:05:f8:b9:11:65:10:7e:be:2c:f6:14:1f:42:23:
c1:68:d2:50:ed:b8:93:32:7d:1e:d5:9b:32:83:cb:dc:ac:91:
ae:56:fe:d3:5f:0d:7d:2c:ce:10:40:87:41:8d:27:b9:d9:6b:
6f:fa:ce:2b:a3:b6:79:a5:ec:f1:6a:90:7e:02:cc:b0:dd:5c:
30:22:55:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:27 2025 by rpki-client