Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/AlVTnP3ZjhuZJl6-bOH73Fw7i4I.roa
File: AlVTnP3ZjhuZJl6-bOH73Fw7i4I.roa (raw, json)
Hash identifier: QcEhg+p79/3tjO9G2g82p09JaV1TP/g6fTEFou6Y1dY=
Subject key identifier: 02:55:53:9C:FD:D9:8E:1B:99:26:5E:BE:6C:E1:FB:DC:5C:3B:8B:82
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CCC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/AlVTnP3ZjhuZJl6-bOH73Fw7i4I.roa
Signing time: Thu 06 Feb 2025 16:25:46 +0000
ROA not before: Thu 06 Feb 2025 16:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3276 (0xccc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 16:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0255539CFDD98E1B99265EBE6CE1FBDC5C3B8B82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:b8:55:2d:25:67:06:97:da:94:f4:63:74:
3d:31:52:49:c2:54:8a:ae:f2:d1:86:90:c2:ca:47:
09:f4:f2:ca:1e:03:6b:0c:5f:71:b9:b8:41:00:8d:
db:d0:df:49:84:db:c2:19:0a:11:3b:b4:4e:5b:16:
15:ec:96:0c:40:d8:26:83:d9:b3:43:cf:a1:be:11:
3d:ec:1a:ed:84:86:64:fd:d8:08:01:91:c2:f9:cc:
85:60:fe:73:26:fb:d2:0d:9d:c5:bd:05:a3:e7:db:
9a:5d:a7:a7:a3:22:b7:26:2a:b1:b1:d7:04:04:49:
f6:d3:9f:6a:9b:c6:b2:81:a0:01:22:94:0d:97:dc:
bf:5b:fd:3a:d2:96:e8:7b:d8:9e:34:48:ef:e0:64:
73:9e:76:29:d2:45:43:f4:fd:72:bf:c1:60:46:ab:
c8:bc:05:65:77:94:40:b8:67:33:e3:00:5e:ea:8b:
4c:23:82:4c:5c:10:18:aa:d8:01:3a:8f:9a:a4:2a:
97:3e:fe:d2:82:7e:d1:b5:1d:d7:da:8e:8b:dd:33:
11:f6:da:21:48:81:b5:89:94:54:bb:a4:9f:c6:49:
9e:2f:69:eb:d4:bc:89:51:ac:cc:ef:13:c0:fa:8f:
1c:35:ee:e0:5e:8a:11:38:33:96:ca:f0:b0:84:e7:
15:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:55:53:9C:FD:D9:8E:1B:99:26:5E:BE:6C:E1:FB:DC:5C:3B:8B:82
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/AlVTnP3ZjhuZJl6-bOH73Fw7i4I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
97:77:1e:86:f2:f8:e1:df:bb:0c:6c:4f:07:0b:e2:ca:af:fd:
31:ca:2c:6a:9c:5c:10:32:de:fe:d9:e1:8d:b6:b7:97:4d:b0:
ee:ab:d3:82:94:81:df:45:4e:ab:dd:a5:d2:66:1c:27:88:57:
ee:28:bc:82:3c:9d:e0:e7:09:a3:15:cd:41:7d:d8:37:1b:2c:
55:e1:a3:80:db:80:a3:89:3e:d5:c3:25:17:2d:a8:97:87:f8:
25:55:36:c3:24:c7:39:bf:fe:51:17:d1:6d:b3:2c:f1:f6:3a:
fd:31:c0:4f:4b:2e:24:c5:ed:e6:b0:b3:72:6f:a0:67:9b:f3:
82:04:8f:9f:5a:f2:87:e1:ec:93:26:85:f6:d5:21:39:3e:59:
4f:80:2e:2f:64:fd:56:84:8e:78:5e:2e:1a:c4:a9:f9:17:73:
76:a9:75:2c:0c:bc:95:ed:ff:eb:b0:50:de:85:1d:3f:84:14:
21:43:f8:2c:73:e7:80:7b:5a:44:28:df:84:66:1f:54:a7:58:
c4:a0:9b:d9:43:0b:1f:e8:d5:8a:d3:1d:d0:1f:d4:03:6b:a1:
00:57:04:44:41:c3:c7:7c:59:1f:9f:c9:df:49:6a:3c:0f:f7:
3d:d2:5a:51:1d:66:8d:10:fb:d1:14:ed:ac:b0:41:18:5b:39:
a1:5a:1c:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:04 2025 by rpki-client