Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/EX_CG2yY4p2m-VQnil69kW--lmg.roa
File: EX_CG2yY4p2m-VQnil69kW--lmg.roa (raw, json)
Hash identifier: 6litPKUWd+IX2RIl5S57iMbkhumAEVXka6W9O51dtWc=
Subject key identifier: 11:7F:C2:1B:6C:98:E2:9D:A6:F9:54:27:8A:5E:BD:91:6F:BE:96:68
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0730
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/EX_CG2yY4p2m-VQnil69kW--lmg.roa
Signing time: Wed 22 Jan 2025 17:25:42 +0000
ROA not before: Wed 22 Jan 2025 17:25:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1840 (0x730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 17:25:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=117FC21B6C98E29DA6F954278A5EBD916FBE9668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:a7:1e:c4:b0:14:df:d6:6f:c0:57:7c:75:
17:e6:03:be:57:a9:d7:9d:28:bb:1c:e9:6d:4a:7f:
c8:7d:c4:2a:93:ae:0e:b7:ef:1c:09:80:26:80:c3:
33:a9:59:e9:0a:3f:e7:a5:ff:f1:20:1c:b1:aa:45:
2e:ed:80:9f:90:db:20:cf:ae:2b:fe:10:8a:37:38:
5b:fc:a4:40:17:d0:51:3d:36:fd:0e:dd:5c:b1:08:
63:01:9c:e7:de:c6:8a:c3:bd:88:19:a8:5b:61:53:
fc:2b:5b:1a:18:bc:f3:ae:50:0b:03:60:26:2b:04:
9f:d7:62:73:61:88:9d:2b:3b:e5:69:3e:fd:2c:58:
09:3b:43:d0:48:a8:26:ae:20:ec:c1:d5:69:ca:5a:
dd:1c:01:e6:ec:b7:14:f5:a2:7f:ba:88:b6:9f:52:
56:22:38:ff:be:ae:ca:f7:9a:c3:34:51:51:13:b6:
53:f7:e6:2c:84:b8:a0:76:f5:41:f4:82:80:25:ab:
ce:28:b1:9e:ba:5b:67:91:af:cb:61:12:be:4d:ff:
0c:c1:20:7d:77:ab:96:65:d3:e0:17:ed:66:8b:c7:
04:c9:80:3d:5f:8c:e2:39:5f:14:10:e0:37:d9:40:
8e:9d:fc:ea:06:d8:5b:59:7d:42:25:b9:15:1f:1d:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7F:C2:1B:6C:98:E2:9D:A6:F9:54:27:8A:5E:BD:91:6F:BE:96:68
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/EX_CG2yY4p2m-VQnil69kW--lmg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
31:de:b7:cc:c6:77:9f:50:f5:cc:cb:d4:18:59:be:ea:f3:4c:
5d:bb:a6:50:e5:2e:2d:31:62:ad:99:96:14:b6:ff:3b:20:f4:
10:82:a6:05:32:a1:ad:85:e1:0f:c2:0b:23:ad:76:e4:ac:bb:
f3:f1:0a:fe:19:23:17:55:52:be:84:dc:15:16:ce:de:50:a8:
e5:98:a3:58:0a:2f:c8:2f:cd:19:a0:a2:b4:9e:cb:26:81:cc:
ee:e9:f2:69:bf:13:01:64:6a:09:bc:60:8e:6f:04:7f:81:97:
7d:c2:95:ca:38:c1:f2:1a:40:15:43:f6:06:9f:22:a2:b5:b5:
f3:6e:f1:b0:aa:6e:34:b6:f3:40:20:3b:a2:11:c1:bb:7d:6d:
bd:40:8e:b2:76:2e:2b:a1:d1:62:e9:e4:3d:3c:f5:dd:2d:e1:
12:77:5a:7e:e3:9a:85:09:b2:49:8e:17:ea:72:a7:a0:a4:89:
6e:51:01:61:a9:80:2f:fd:b0:c0:27:f1:61:8f:a6:68:7e:09:
4f:eb:c5:b0:44:91:54:1f:9b:48:d9:01:7c:48:44:05:e3:90:
a6:42:06:cd:df:38:37:9e:e9:1b:d1:20:51:49:b8:42:07:4f:
48:3b:0c:e4:47:cd:71:f3:77:aa:36:45:8c:34:50:6e:46:19:
fb:59:52:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:56:11 2025 by rpki-client