Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/BTyqTz4mPTL6-yL_uR_jFDzEffY.roa
File: BTyqTz4mPTL6-yL_uR_jFDzEffY.roa (raw, json)
Hash identifier: bnPZFESoOwC+eXKa5v5DR3BH2ZOtJF4G3tmwoCZlIuA=
Subject key identifier: 05:3C:AA:4F:3E:26:3D:32:FA:FB:22:FF:B9:1F:E3:14:3C:C4:7D:F6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0536
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BTyqTz4mPTL6-yL_uR_jFDzEffY.roa
Signing time: Fri 17 Jan 2025 10:54:43 +0000
ROA not before: Fri 17 Jan 2025 10:54:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1334 (0x536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 10:54:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=053CAA4F3E263D32FAFB22FFB91FE3143CC47DF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:96:c1:97:fa:61:59:53:e4:ff:aa:72:1b:55:
d6:b3:a6:93:7a:c3:b0:6c:22:d9:99:8d:10:55:51:
12:bd:ca:58:19:f8:43:25:5f:fb:74:0c:f0:a6:f9:
56:6c:cc:30:c7:9a:47:ea:e4:af:32:61:50:45:7d:
27:c1:25:55:5f:21:1e:51:5b:1f:fb:4b:07:e2:51:
c5:c4:d4:ab:e5:e8:df:b0:df:32:6d:b5:12:38:7e:
a5:65:20:46:82:7b:b3:7e:08:96:e1:46:7a:39:f4:
86:85:ec:bc:e3:51:c0:c5:64:f4:4d:37:16:4e:70:
9d:50:d6:11:4a:07:d2:3e:3f:bf:dc:a9:60:b1:44:
70:4b:91:3c:7a:ac:9d:10:15:82:05:76:04:f4:6c:
83:f3:5c:16:47:57:6e:e9:38:7f:46:f2:a4:02:da:
14:66:e8:f4:c3:3a:c5:0c:a1:05:ce:3e:ee:11:3e:
fd:38:f1:84:47:1d:38:f6:ee:5e:3d:9d:73:19:0a:
13:42:c7:e0:a5:f7:cc:9d:57:9b:3b:50:bd:b5:ac:
b4:d8:c7:3e:50:8c:a5:59:3c:85:9e:82:77:e1:76:
a5:3b:69:8c:4e:bf:9a:68:a4:a7:02:db:b7:ab:34:
96:08:b8:94:e1:be:6b:85:0d:96:23:3a:6a:d5:31:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3C:AA:4F:3E:26:3D:32:FA:FB:22:FF:B9:1F:E3:14:3C:C4:7D:F6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BTyqTz4mPTL6-yL_uR_jFDzEffY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
75:7d:ae:d5:13:71:38:67:5c:8b:cd:4e:aa:57:e8:0f:00:25:
25:b6:3c:d7:52:5c:b3:8a:7f:20:d6:50:88:45:55:07:84:de:
c5:98:fe:89:be:d1:1b:f7:82:a8:8c:21:bf:a4:cb:90:ef:b7:
10:90:e9:12:d9:dd:85:b3:bc:e2:eb:58:e4:ce:6f:17:ae:a6:
74:1a:89:5f:d3:18:91:04:6d:13:8d:e3:00:ea:a5:84:ad:c1:
e5:af:73:f3:15:61:84:7e:9a:c7:2f:f2:1d:41:b9:51:c2:02:
9f:b2:5b:cf:04:12:96:90:cb:a3:71:1d:34:79:2e:87:cf:d5:
79:5b:6d:76:38:8b:a4:43:f8:b9:6b:62:ff:2c:8f:ad:2d:50:
a6:d9:99:11:71:d4:1b:ae:9a:2e:5f:71:38:3e:24:8a:b0:4f:
93:12:9e:38:61:8f:62:68:f2:7e:af:56:4e:fc:da:9f:1f:b8:
a7:ac:20:d1:b7:90:fe:01:b5:f3:00:07:aa:76:9c:9d:88:94:
f3:fb:ae:fb:f6:7d:6e:ec:7c:71:f9:e0:e5:c1:a2:cf:1b:7a:
53:b5:87:c4:a2:7e:a7:b3:d1:9e:39:d9:b9:d4:73:a8:5a:5c:
fd:79:e7:4e:8d:b8:f0:5b:7f:23:ae:bf:12:08:94:2a:ad:0b:
c7:1b:e2:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:33 2025 by rpki-client