Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/HyFGtYun9uDXGD80GKfL0R707QE.roa
File: HyFGtYun9uDXGD80GKfL0R707QE.roa (raw, json)
Hash identifier: /paJK568/gIkTzb9aAczVrcCCQmrm7zXceWuZvhcCn0=
Subject key identifier: 1F:21:46:B5:8B:A7:F6:E0:D7:18:3F:34:18:A7:CB:D1:1E:F4:ED:01
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C90
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/HyFGtYun9uDXGD80GKfL0R707QE.roa
Signing time: Thu 06 Feb 2025 01:25:45 +0000
ROA not before: Thu 06 Feb 2025 01:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3216 (0xc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 01:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1F2146B58BA7F6E0D7183F3418A7CBD11EF4ED01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3b:81:9e:45:b2:b3:06:32:b9:f4:c5:fa:ff:
9a:78:33:31:c1:93:80:c0:e3:49:83:7a:d4:2e:f2:
87:74:7c:e9:8e:ac:88:11:b6:ba:c8:28:13:88:3a:
18:fa:7b:1f:4a:c8:26:d0:e6:dc:bb:57:da:87:8a:
37:c3:1d:04:25:44:e4:f7:17:49:da:5a:91:6b:db:
0f:aa:a5:5a:2e:62:15:aa:60:77:f5:ed:b2:2a:a3:
28:55:62:b2:84:fd:bb:dd:9b:2d:da:0d:de:0a:20:
73:ae:4c:8f:72:ec:6f:ef:d5:2c:7f:da:1f:f6:aa:
cb:a4:7a:5a:b0:8a:a3:91:b7:bc:1f:ec:19:3b:d7:
e9:10:3d:4d:a7:ad:c2:15:92:84:e4:22:47:1d:3a:
65:82:1c:31:b5:9d:1d:a5:02:13:77:d1:46:1e:f0:
fd:00:42:ce:e9:c7:4a:a9:e5:05:7a:f2:cd:02:9c:
1c:53:16:73:79:54:81:db:ae:a0:dd:74:c8:97:3f:
38:90:2b:9a:01:6b:44:a5:34:0d:d5:c1:8d:2d:79:
40:6e:b8:f1:f3:92:6a:76:e7:d3:8f:31:e7:9c:f7:
a7:38:5d:2b:d1:c7:88:35:c7:00:a8:57:9b:77:9f:
db:0a:2b:99:64:c6:dd:9c:e2:0d:89:1b:b1:4d:c1:
17:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:21:46:B5:8B:A7:F6:E0:D7:18:3F:34:18:A7:CB:D1:1E:F4:ED:01
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/HyFGtYun9uDXGD80GKfL0R707QE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:f6:cc:9d:3c:f7:1e:74:3b:37:ed:2f:c7:7f:af:6b:f0:55:
6f:5c:ef:62:57:d2:84:4d:79:14:97:bd:7d:fe:a1:21:69:a7:
a0:52:7e:19:1d:7d:84:fa:0e:6d:10:57:7c:61:e0:70:1b:40:
02:0a:82:b6:45:5a:86:94:f0:38:64:41:9e:f5:19:98:e0:31:
fc:b8:ea:2b:76:c4:9c:aa:c3:c4:48:c5:38:bf:30:ab:72:e2:
fa:96:41:e1:a1:9d:09:1c:ed:45:40:6b:59:fd:a9:0f:ce:d2:
00:3b:b1:b0:67:3a:a8:5f:76:a9:d5:3a:ce:2a:59:b0:d0:9a:
17:bf:39:e5:e9:7b:bb:0b:4e:73:a1:e0:a9:b3:fa:da:6f:37:
97:f4:92:33:5e:15:3f:ba:25:d9:51:10:12:41:6b:43:df:b7:
19:5b:1d:1e:36:a5:ed:24:02:bb:ef:bc:5e:ed:42:4c:1f:2d:
6c:43:99:92:e8:43:ad:a9:09:c3:cd:0b:98:1c:df:32:e3:df:
f6:31:37:12:55:38:4b:a6:e1:91:4f:ee:2f:22:c8:c0:6b:1e:
54:31:b1:34:93:a6:70:18:ab:75:23:38:ba:8d:54:9e:ff:dc:
10:d4:a1:17:8c:3f:52:4a:c7:58:e0:bd:58:ee:3e:52:c1:41:
d5:fc:2b:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:41 2025 by rpki-client