Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A_MAGeC7G3di_YnV5xoyNZW_9MU.roa
File: A_MAGeC7G3di_YnV5xoyNZW_9MU.roa (raw, json)
Hash identifier: ay0bV5C1/U/vtg+YMlmtBDmEioLpIyscJ9iCLA2pBsE=
Subject key identifier: 03:F3:00:19:E0:BB:1B:77:62:FD:89:D5:E7:1A:32:35:95:BF:F4:C5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C54
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A_MAGeC7G3di_YnV5xoyNZW_9MU.roa
Signing time: Wed 05 Feb 2025 10:25:43 +0000
ROA not before: Wed 05 Feb 2025 10:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3156 (0xc54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 10:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=03F30019E0BB1B7762FD89D5E71A323595BFF4C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:a4:d6:71:36:a5:84:ce:83:f9:73:64:fc:
21:d5:dd:17:60:42:39:f9:88:32:bb:53:c6:43:30:
46:92:25:3c:9c:52:0e:48:f0:1e:10:7c:14:77:04:
b2:2f:48:94:b6:8f:a7:b1:ba:e6:2e:72:cb:f7:d4:
c1:36:e1:d4:f9:02:0d:4b:19:61:93:a3:26:dd:d9:
59:2e:d0:ce:62:3b:f2:a9:8e:7c:81:f6:be:1d:e5:
a5:3b:99:ea:ee:88:12:7b:fe:f7:44:c6:0b:41:57:
b1:15:cd:9b:91:93:3a:5a:6a:9b:b0:97:bc:04:6e:
9f:1b:53:7b:03:e1:6c:ed:65:4a:f5:7c:93:2f:de:
89:54:3f:e3:0c:c1:6b:55:77:6a:10:53:07:13:63:
07:3b:99:95:a3:21:fb:2b:45:c6:a0:38:06:b4:96:
08:79:d4:76:79:08:4f:71:9e:ad:d6:e0:77:6e:3c:
5f:76:a6:26:a7:53:5e:eb:de:12:e8:06:67:83:2a:
61:93:83:be:04:a2:d1:e9:82:9f:3b:59:f4:66:f8:
78:72:50:d0:d9:56:73:79:ec:18:c3:fd:f6:e2:12:
75:13:8c:51:d3:5c:de:ed:be:f5:e1:70:74:bc:42:
57:61:5d:49:76:5c:97:51:c9:79:bb:de:68:ec:17:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:00:19:E0:BB:1B:77:62:FD:89:D5:E7:1A:32:35:95:BF:F4:C5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A_MAGeC7G3di_YnV5xoyNZW_9MU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
87:9e:21:c2:a0:f6:64:8c:df:dc:0e:e3:8c:53:3a:d9:4e:f9:
78:5c:75:fe:a4:cf:9b:1c:b3:be:9f:bb:08:5e:01:c4:5a:d7:
c2:a1:22:e1:ed:db:97:8c:36:3c:e4:05:0e:50:6c:be:e6:fe:
38:66:34:e1:51:df:35:d8:53:f3:33:21:44:a9:43:84:11:b4:
d4:b7:88:2b:0f:71:1a:53:83:da:82:e7:ac:98:89:2a:0f:1a:
19:a6:0f:fe:a0:18:f3:e0:c6:b6:74:6d:ff:fe:f4:d7:53:bd:
d7:c3:33:95:c9:10:9f:00:ad:fe:f7:3b:f0:fc:8b:b3:55:7a:
0a:a7:a9:37:00:cf:09:20:3c:61:0f:a3:2b:40:bd:b7:9f:db:
a2:c7:d2:64:b1:7e:c8:31:04:1a:0c:74:31:4c:24:8a:5f:5e:
75:2b:49:82:22:c3:fa:fe:06:e3:ad:bf:d0:5a:2a:b9:d6:5e:
25:71:cf:5f:8a:43:9e:17:24:2a:af:db:44:bb:1c:3f:85:27:
a2:62:a8:da:15:4c:6e:78:fc:36:05:12:f2:12:91:45:e9:a4:
e1:b7:d9:ff:40:ef:ca:fb:85:0b:15:5c:b1:cf:8d:65:91:f9:
83:df:78:7b:2c:7a:95:fe:c6:de:9a:9f:56:e0:df:c2:78:47:
5e:7a:99:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:23 2025 by rpki-client