Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ENMJ-V5OSqfkbf6-sm-hQ8tfpmc.roa
File: ENMJ-V5OSqfkbf6-sm-hQ8tfpmc.roa (raw, json)
Hash identifier: Gx3qDMofUk7E4h3v+8cw133Sesp048EsBCvrdk3uc+s=
Subject key identifier: 10:D3:09:F9:5E:4E:4A:A7:E4:6D:FE:BE:B2:6F:A1:43:CB:5F:A6:67
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 069A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ENMJ-V5OSqfkbf6-sm-hQ8tfpmc.roa
Signing time: Tue 21 Jan 2025 03:54:59 +0000
ROA not before: Tue 21 Jan 2025 03:54:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1690 (0x69a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 03:54:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=10D309F95E4E4AA7E46DFEBEB26FA143CB5FA667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:ec:84:d6:45:19:cb:ce:f3:c7:89:74:b5:
13:80:08:71:7f:87:62:96:24:b0:fe:d4:e6:eb:61:
d3:a0:c5:e4:d2:48:42:e3:b3:a3:94:a6:21:18:c3:
9c:be:8d:60:be:b9:a7:9e:af:be:9e:09:ff:e8:0d:
bb:30:a1:d3:0f:82:71:9a:59:22:be:c7:3b:f9:ab:
10:d0:1d:90:a6:66:c8:de:1d:fd:60:13:02:80:f2:
ce:80:05:7b:33:f7:b3:0e:4b:93:f8:55:7b:6a:e6:
e2:f2:7d:13:07:70:1b:6b:76:64:e0:af:00:b7:57:
be:80:ca:64:3d:bd:a0:b8:ea:b7:92:08:f3:d8:44:
93:90:29:9a:e9:02:01:5c:a0:29:6b:1e:52:9a:1d:
a7:4f:f8:f1:2f:58:03:d5:4b:25:6a:3f:92:10:1f:
d5:98:3a:54:dc:23:9c:b4:fd:44:91:94:41:64:d0:
c4:58:62:04:a1:3d:02:ee:6f:16:bf:83:49:7c:33:
d2:71:5c:f0:32:5b:70:ad:54:2b:75:d3:b3:26:12:
1f:77:a3:58:be:e1:c0:0d:97:b2:f4:c7:96:d7:14:
06:9c:fe:d2:f9:9e:33:33:de:c8:f2:cf:80:75:e0:
71:a8:3c:00:1d:db:2e:1e:61:9f:62:b5:65:ae:96:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D3:09:F9:5E:4E:4A:A7:E4:6D:FE:BE:B2:6F:A1:43:CB:5F:A6:67
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ENMJ-V5OSqfkbf6-sm-hQ8tfpmc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:17:2c:25:ac:95:2c:72:2b:14:01:ad:60:0e:74:3b:be:f6:
7a:36:1a:d2:4b:13:30:3e:e1:e9:40:24:27:ad:34:de:8b:59:
00:10:aa:3e:6c:ac:c4:f3:74:7e:64:2a:b5:aa:f3:f0:26:8b:
da:f2:ef:9b:19:02:2c:b7:41:b9:21:ae:34:41:87:91:76:58:
de:4b:03:44:df:0f:62:1d:fc:25:88:ea:0d:e7:fb:a8:a9:7e:
0a:8e:fa:76:da:be:7a:91:38:e4:ff:92:a6:c9:a0:7e:c1:5b:
34:17:94:11:17:c4:0e:1c:30:9f:ca:39:e0:cb:df:0f:db:12:
1f:ff:78:05:77:a2:ce:6d:df:c1:99:67:58:ab:78:fb:2c:08:
4c:94:bb:19:3f:b2:6b:05:3b:a9:20:70:38:f6:f1:7d:7e:54:
74:63:eb:e7:64:12:2e:11:5f:e4:35:e2:26:f1:8b:b9:e4:7b:
59:bb:57:3c:1a:3e:e1:e1:c4:78:cd:4f:af:42:4e:bd:8e:25:
38:2f:37:ec:7d:d0:d1:30:0c:bb:bb:63:95:cd:8e:3b:0e:7c:
e1:cb:9f:30:94:ce:e8:97:51:21:3d:21:66:6b:27:ca:63:9d:
cd:38:d5:de:e8:c8:70:8f:bd:e8:e5:48:cc:83:27:9a:ae:cd:
5f:29:76:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:02 2025 by rpki-client