Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/9wWq-mVCTtot4LgpG7SSBXcXnb8.roa
File: 9wWq-mVCTtot4LgpG7SSBXcXnb8.roa (raw, json)
Hash identifier: 0i4kB/7w2QFqRjj5EhF2+QSO+jvMqZc2Y6JJVtQYN78=
Subject key identifier: F7:05:AA:FA:65:42:4E:DA:2D:E0:B8:29:1B:B4:92:05:77:17:9D:BF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08E4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/9wWq-mVCTtot4LgpG7SSBXcXnb8.roa
Signing time: Mon 27 Jan 2025 06:25:18 +0000
ROA not before: Mon 27 Jan 2025 06:25:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2276 (0x8e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 27 06:25:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F705AAFA65424EDA2DE0B8291BB4920577179DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0f:11:c0:9d:b9:5c:f5:1c:0f:d8:73:74:2a:
02:69:8b:13:75:26:ac:8a:54:d8:e6:95:4d:67:3a:
9e:e0:07:b6:3c:4d:ae:1e:c3:ea:3a:59:5b:a9:54:
16:0a:a5:e9:2b:15:13:51:aa:7a:b9:c3:e8:5d:56:
47:72:24:a5:e4:70:2d:20:3e:7b:09:46:2c:bb:0b:
d6:cd:f4:cd:bd:c1:d0:12:3b:ea:04:ad:e4:a3:dc:
46:ba:87:05:29:a8:c5:28:04:1d:58:a5:73:f6:bd:
d8:1d:d8:ff:f4:d7:7c:6c:d9:ab:14:92:31:c6:bf:
67:97:79:4e:fb:9c:d4:c2:dd:1d:07:5e:67:1c:4e:
50:fc:5c:85:fe:87:6d:b1:59:f7:f3:e4:ee:d8:c4:
f2:13:aa:86:b1:4a:a6:ea:53:22:ac:28:8d:ff:8b:
61:cb:49:1f:3c:80:bf:14:fb:bd:8a:b2:90:b1:12:
bf:9a:a6:fe:27:2a:d4:5a:f2:a8:48:53:4d:41:0c:
db:c8:4d:b1:5b:0e:3f:8f:18:64:56:e1:f1:a1:5e:
53:7a:bd:77:a9:14:d0:de:24:ae:51:05:16:ce:4a:
bb:4c:b7:9c:26:88:de:bc:a5:45:fd:3d:f9:dd:a8:
f5:75:3e:a7:02:12:87:4f:33:52:cc:6b:97:5b:ca:
91:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:AA:FA:65:42:4E:DA:2D:E0:B8:29:1B:B4:92:05:77:17:9D:BF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/9wWq-mVCTtot4LgpG7SSBXcXnb8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
08:bc:28:5a:52:2c:48:a3:32:0c:45:a2:ea:54:99:01:14:50:
cf:ca:4b:8c:4e:10:70:61:40:04:7a:c2:f6:55:0b:b8:d5:fa:
ba:05:08:5c:3d:6b:e4:34:93:1b:f4:e7:9c:aa:a9:79:8e:0d:
12:48:fd:ab:17:be:b4:1e:3e:11:0e:c0:3e:42:33:2d:2e:bd:
ba:13:a5:21:c9:ca:5e:88:12:96:99:6e:e2:0b:4a:15:eb:7c:
92:6d:d6:6b:51:ed:68:0c:e0:f2:0d:72:48:9e:18:c8:22:0a:
62:fd:40:41:ae:0b:91:bf:93:53:3d:ad:86:69:91:f8:5c:64:
2d:8e:36:4a:dc:ff:27:9c:fe:24:e7:3a:58:b6:75:51:e4:9e:
dc:9e:4e:65:94:f9:3b:14:a6:c9:e2:c4:0d:72:9a:f8:03:40:
68:fa:df:26:e5:ed:cf:a8:5d:85:39:1f:a0:f1:10:20:83:57:
d8:35:ef:7b:73:b4:58:7b:ea:27:f5:53:d5:4e:d3:57:bb:3d:
e9:f8:e3:d1:99:79:11:2f:93:17:0c:90:6a:33:2c:a7:50:f4:
d5:b7:aa:b7:7a:d9:a3:b0:78:7f:c6:7a:aa:a0:68:e3:d8:cb:
22:ef:6a:d9:4d:68:3c:fb:a2:94:11:58:33:42:75:3c:68:5b:
66:04:8b:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:44 2025 by rpki-client