Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/LnRsubBTkv3s9ohBiv38topTxbI.roa
File: LnRsubBTkv3s9ohBiv38topTxbI.roa (raw, json)
Hash identifier: WVGtZIVqdG6ul1VhD7PV5j1piSuUgPDCJ7wkq8ppoOU=
Subject key identifier: 2E:74:6C:B9:B0:53:92:FD:EC:F6:88:41:8A:FD:FC:B6:8A:53:C5:B2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A96
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LnRsubBTkv3s9ohBiv38topTxbI.roa
Signing time: Fri 31 Jan 2025 18:55:32 +0000
ROA not before: Fri 31 Jan 2025 18:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2710 (0xa96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 18:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2E746CB9B05392FDECF688418AFDFCB68A53C5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:57:f4:b2:c4:16:35:a2:e6:cd:7b:81:f1:
4f:d7:de:7a:66:dd:a0:58:a9:90:10:59:b7:c1:36:
cf:dd:10:74:c3:75:39:d1:fb:a5:16:6b:8a:96:de:
42:e5:21:67:5e:54:fc:05:bd:37:da:ef:d5:07:b1:
9c:28:c5:9d:88:17:12:5c:0b:53:55:c6:8b:c8:72:
3a:80:88:cf:d7:da:79:f9:cf:af:48:f6:1a:38:11:
ef:a0:13:2e:9f:e4:98:80:22:00:73:5c:5d:b2:b2:
ee:79:02:22:b1:ab:10:62:b9:71:8d:2d:13:f4:0e:
c7:e2:a3:db:cf:0b:5d:8d:16:93:f4:17:dd:5f:8b:
56:80:f4:97:8f:ab:dc:8d:5a:72:44:81:4f:20:d2:
40:ab:c3:a6:bd:fb:20:86:1d:8c:25:f4:c5:66:7d:
c8:f5:cf:06:f9:dc:87:54:93:61:82:ec:da:34:4c:
a0:7d:37:53:e2:3d:ab:fe:eb:79:22:d7:eb:e5:61:
3a:11:36:0d:6e:87:20:4e:7e:26:13:d5:0a:9d:77:
e7:ad:43:08:a2:65:ce:e0:d0:4d:ad:84:e6:53:c0:
45:e1:a3:f0:fd:c5:68:68:62:a3:1e:8c:54:a4:37:
67:5c:b2:c0:a8:ae:f4:da:d5:2c:0a:93:45:20:bc:
7e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:74:6C:B9:B0:53:92:FD:EC:F6:88:41:8A:FD:FC:B6:8A:53:C5:B2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LnRsubBTkv3s9ohBiv38topTxbI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:14:de:d9:ed:15:28:78:f8:27:87:0f:aa:25:9a:a9:93:55:
83:59:98:57:2b:72:14:b1:a5:13:68:40:48:bf:8c:1c:bd:53:
47:26:9a:e6:94:b0:f0:3a:ec:fa:74:8d:d4:b9:b9:6d:55:a1:
86:2f:e3:65:c6:08:fa:3d:16:3b:92:16:0c:5b:51:26:00:51:
19:7c:90:88:07:b9:22:d4:8c:fe:24:ec:82:be:86:f2:58:95:
33:a4:20:8c:fd:af:ee:ec:58:f7:b3:f4:6e:b6:09:36:a5:92:
60:aa:bc:49:fb:d2:91:aa:2e:8c:c2:d1:60:60:c0:a2:d1:3f:
ed:f1:0e:2b:d0:d1:61:49:62:cb:82:8c:9d:9c:ab:14:03:57:
0c:82:89:37:50:c4:b9:e3:2a:cd:55:3f:64:8b:44:17:ea:bc:
61:1e:95:0e:c3:ef:50:18:50:b9:dc:c3:de:53:36:6e:eb:34:
c5:b9:3c:d5:ba:51:f8:ac:6b:bd:56:d4:8c:a2:e1:5d:31:9c:
d9:e3:92:d7:21:7e:44:0a:02:f7:83:8c:3a:20:09:3e:47:d2:
61:8e:07:51:80:e6:05:a3:6b:db:ef:a8:e5:fe:b2:29:62:bc:
c1:46:65:07:4a:8f:dc:95:f2:24:bf:ef:ef:ca:9e:c2:ca:4e:
93:e8:13:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:57 2025 by rpki-client