Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Et5Yg2vm-bjkgqr4rxkqHMhLDDc.roa
File: Et5Yg2vm-bjkgqr4rxkqHMhLDDc.roa (raw, json)
Hash identifier: EqDvD+zgBgSJZM5i5uac/Pjl0ty8Sv77rUBR/mrgKDY=
Subject key identifier: 12:DE:58:83:6B:E6:F9:B8:E4:82:AA:F8:AF:19:2A:1C:C8:4B:0C:37
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 095A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Et5Yg2vm-bjkgqr4rxkqHMhLDDc.roa
Signing time: Tue 28 Jan 2025 11:55:19 +0000
ROA not before: Tue 28 Jan 2025 11:55:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2394 (0x95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 11:55:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=12DE58836BE6F9B8E482AAF8AF192A1CC84B0C37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:d4:69:60:28:c8:97:2a:66:5a:42:4b:d9:
6a:3a:99:dd:ee:b4:4b:01:8d:20:9e:4a:6e:2e:a6:
ad:c2:6c:19:0f:a7:68:aa:fe:fd:66:ac:b7:2d:9c:
6c:ff:5f:b4:b2:91:ea:5a:76:78:08:22:8a:3a:f0:
4b:f4:2d:b0:01:00:57:a1:f0:b3:27:bc:26:84:60:
37:00:8a:c5:57:d5:69:8b:c5:e7:86:de:14:0a:c7:
88:5f:18:8b:41:3e:cf:e7:93:b3:62:df:e9:c3:ed:
60:e7:c6:ef:0f:63:8f:6f:d9:9a:6b:38:33:0b:95:
10:87:3d:75:f1:5b:7c:33:1e:d6:2f:ec:4f:5b:d7:
70:a0:35:13:3b:e7:ed:37:47:7c:2e:67:e6:1d:1e:
59:a9:90:ca:b1:90:96:35:7c:04:26:71:88:49:79:
bb:e1:6a:dd:9f:6f:4d:c8:3a:ad:89:93:f7:cd:0c:
ed:12:a6:b6:0a:f5:ee:3f:ef:c9:53:56:7e:13:7e:
e9:56:f4:76:03:84:14:ce:4d:6a:d9:15:7e:60:54:
63:1c:80:a4:42:e1:82:46:29:88:4f:43:95:0d:6e:
bb:c0:3a:ff:7d:54:b9:53:8e:38:61:ab:75:cb:1b:
7f:8d:fa:8b:f2:81:31:e3:53:52:bb:3f:41:18:bb:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:DE:58:83:6B:E6:F9:B8:E4:82:AA:F8:AF:19:2A:1C:C8:4B:0C:37
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Et5Yg2vm-bjkgqr4rxkqHMhLDDc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
13:db:49:c2:fd:c6:5d:19:7c:c8:23:4a:f5:5b:90:f2:17:11:
b3:63:6b:f0:d3:5c:f9:f6:c4:ba:b0:69:b5:e9:29:07:83:e0:
86:24:61:32:94:47:41:8a:76:00:9f:f5:9b:16:be:38:85:43:
06:ea:4b:9b:ab:8b:ab:9d:54:f2:6f:e0:fe:34:93:2c:40:a2:
ad:ea:5d:1b:19:96:e1:34:56:fa:58:e5:a1:ce:04:5a:23:35:
2a:c0:97:71:58:4f:10:63:4c:56:30:3f:cf:ba:ab:2c:55:df:
3c:35:68:b6:21:32:c5:d8:dc:37:d1:6f:f8:d9:96:e8:7e:81:
aa:00:63:5e:b4:fb:84:01:f0:b2:ba:06:6a:4e:cf:c7:99:e2:
59:94:ec:8c:48:3d:54:72:2e:46:9d:7e:85:a1:7d:bd:7d:73:
ca:23:1b:6c:72:f3:2e:ef:dc:40:2f:2a:2f:1f:0b:52:1a:79:
4e:40:79:cc:bc:49:e9:fe:1a:8a:7c:90:94:cc:56:2e:5d:4f:
0f:58:13:a5:b1:f8:44:a0:75:21:94:1a:66:e8:26:8a:1f:28:
f5:0e:6c:98:90:50:38:dd:98:5b:b1:3b:73:72:e6:d8:36:36:
26:26:49:66:31:3f:63:0f:f7:83:ef:e5:6a:7b:cb:4b:46:70:
16:f9:05:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:30 2025 by rpki-client