Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/KgNOnhp5g1ESjPbTsoMVISTRdj8.roa
File: KgNOnhp5g1ESjPbTsoMVISTRdj8.roa (raw, json)
Hash identifier: AjNv3Q+CTrDF/52imMYRL5mYw+vqpWBkmYHwzg7gL94=
Subject key identifier: 2A:03:4E:9E:1A:79:83:51:12:8C:F6:D3:B2:83:15:21:24:D1:76:3F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CD0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KgNOnhp5g1ESjPbTsoMVISTRdj8.roa
Signing time: Thu 06 Feb 2025 17:25:49 +0000
ROA not before: Thu 06 Feb 2025 17:25:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3280 (0xcd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 17:25:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2A034E9E1A798351128CF6D3B283152124D1763F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d9:9b:9e:e5:12:73:66:ac:23:5d:54:b5:ad:
97:dd:d9:01:cb:3a:02:36:74:cf:83:1a:bd:48:39:
96:b7:81:cb:5e:7b:d3:e2:68:91:79:97:2b:12:d3:
87:b2:b1:e7:37:d5:bd:1a:a8:19:f9:f2:49:87:86:
de:83:8e:02:03:5f:e6:75:9a:46:df:a9:de:f3:0e:
d4:ed:49:ed:1f:30:99:54:05:38:5e:1e:58:32:39:
8f:d3:47:a4:7c:73:f3:e2:24:e2:33:10:b2:22:85:
44:27:14:4b:36:58:5d:c3:0d:04:36:f5:7b:a9:15:
a0:10:91:00:27:a2:f4:a4:cf:d3:79:b2:0c:0c:57:
c3:74:36:09:bf:d0:2e:27:27:39:a5:2e:0c:f6:52:
5e:e2:2c:e0:f4:26:93:72:96:55:0d:ad:42:2c:b5:
9f:06:0f:8f:f0:7a:c7:c7:ed:f2:1f:cf:02:fe:86:
3f:63:3e:2a:a7:1b:77:c7:ab:fd:a2:8e:48:bf:6a:
4e:16:76:84:61:1a:91:d3:e6:3a:2c:67:42:ae:e5:
c3:ee:c1:30:7d:2a:15:4b:81:84:2f:5b:3e:82:72:
17:fe:b7:3e:e9:2e:c5:a8:b7:1f:87:7e:1a:7c:fe:
f0:69:34:40:2c:7f:e7:f6:c0:26:ec:b5:41:5f:4e:
49:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:03:4E:9E:1A:79:83:51:12:8C:F6:D3:B2:83:15:21:24:D1:76:3F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KgNOnhp5g1ESjPbTsoMVISTRdj8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
54:52:2b:b1:ea:06:27:44:5a:fb:71:8c:93:5c:ab:52:6f:f5:
ba:3f:2f:8f:6d:50:40:9b:43:5d:2e:12:27:ad:39:c3:39:29:
65:fc:33:d1:7f:62:85:90:98:9d:ef:83:2a:f7:ae:07:1a:22:
b4:3a:23:68:cf:17:bd:23:c3:51:ae:c1:3a:ed:a9:55:54:a3:
be:41:76:81:4e:92:c5:76:d6:85:e7:91:73:a2:36:92:4b:5d:
34:c3:14:25:e7:1a:bb:65:e6:5f:06:46:5d:0b:67:84:14:8c:
99:8f:90:96:c2:94:1a:7a:3d:0e:29:6e:56:31:90:19:b8:58:
d5:3f:68:90:b9:62:b2:68:fc:9f:11:83:07:32:ec:5b:d9:fe:
6b:aa:65:22:db:a7:a9:ac:3b:9f:f4:36:80:50:dc:c4:0a:98:
72:4a:ef:97:55:7c:b2:fa:d9:18:2f:6d:01:45:5e:5f:1f:91:
a5:b8:f8:b5:89:c9:c0:d3:49:d2:ba:66:a1:65:d3:81:de:a8:
f4:98:42:e4:6c:61:68:a8:3a:3c:56:40:f0:3d:1f:79:16:94:
7e:ae:c1:42:b7:88:fa:d0:ba:95:42:52:9d:36:1a:67:49:86:
60:87:98:93:2e:31:aa:21:34:23:7c:c9:07:22:86:dd:d9:c0:
7a:c1:49:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:07 2025 by rpki-client