Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ODz77N3-hdQYTU_pIySMjGuQhM8.roa
File: ODz77N3-hdQYTU_pIySMjGuQhM8.roa (raw, json)
Hash identifier: 0eI6SoHm9+9MyPjZRb5vGJc2bu4s7EMXV/CsMXYwUlw=
Subject key identifier: 38:3C:FB:EC:DD:FE:85:D4:18:4D:4F:E9:23:24:8C:8C:6B:90:84:CF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0662
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ODz77N3-hdQYTU_pIySMjGuQhM8.roa
Signing time: Mon 20 Jan 2025 13:54:51 +0000
ROA not before: Mon 20 Jan 2025 13:54:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1634 (0x662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 13:54:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=383CFBECDDFE85D4184D4FE923248C8C6B9084CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:5b:dc:ba:55:8a:92:82:90:96:72:89:d5:
85:13:6e:19:22:0b:67:3c:5c:2c:4e:72:cb:9c:a2:
4e:ed:95:d9:73:f0:c6:69:2b:dc:f7:75:76:d6:31:
e2:63:30:b3:a8:84:0f:5b:e2:60:98:8b:1c:8b:9f:
4a:47:6e:94:a0:36:ce:ee:f2:1f:47:1d:de:74:83:
16:54:3a:c9:b2:f8:5d:72:fb:9c:5e:ff:77:82:f0:
ac:c9:a9:d1:cb:5a:a7:aa:ba:ff:6f:70:29:0c:ef:
ec:d0:38:ca:77:5b:82:5b:4c:05:a6:af:77:89:a9:
1f:c0:3a:9e:a5:22:59:b2:9d:2c:45:25:57:e2:67:
1a:64:5d:01:c7:19:23:49:a5:66:3d:54:80:2f:83:
d6:31:ce:71:0f:e0:ef:ef:9d:f1:35:32:21:c0:7c:
94:c7:73:a2:9d:7d:c9:6b:82:c5:90:d1:73:ce:ba:
0f:02:67:2d:a2:fd:0e:68:7d:d7:4a:cb:80:ba:91:
95:55:20:68:24:8b:45:28:74:e1:c0:fd:df:42:42:
13:27:60:02:3a:73:8c:8b:2d:c2:c6:0a:53:82:95:
14:74:34:20:0a:93:6e:a6:a9:81:11:08:20:ac:f8:
63:1f:47:e9:4a:2c:b6:22:a4:e7:4f:9d:ea:d4:79:
0b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:FB:EC:DD:FE:85:D4:18:4D:4F:E9:23:24:8C:8C:6B:90:84:CF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ODz77N3-hdQYTU_pIySMjGuQhM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:1c:b6:0c:c2:12:a5:88:23:74:af:54:11:05:53:9f:8e:15:
b5:e5:99:fc:b8:40:ac:30:6c:99:37:5c:10:18:ed:d4:2d:47:
5f:73:98:f6:bc:9e:92:8d:b1:90:5d:e9:28:24:87:b6:b2:0a:
ae:62:17:c9:47:9b:76:d8:50:a3:0e:28:84:dc:87:cf:41:f2:
18:28:0f:47:d7:78:0d:ff:c7:c6:e7:f0:d2:6d:d5:41:19:b8:
0b:d1:2f:10:60:f6:84:7b:f4:00:3f:63:2f:a0:d9:73:94:56:
2f:ed:c8:7d:8a:de:e6:cf:40:89:ed:ad:72:6c:dd:ce:57:93:
4f:cd:51:4f:c0:ad:85:cf:20:08:64:05:81:6f:00:05:28:1b:
d9:29:76:33:3d:55:5c:b9:f6:8e:b5:33:40:87:b3:23:d1:95:
e9:f7:df:e8:92:8e:b3:df:92:eb:68:59:e5:1d:eb:12:a6:25:
02:fd:b2:0a:4b:17:9e:28:a8:2f:a8:63:bc:cc:fa:c0:ad:f0:
e3:88:58:63:11:02:86:99:b6:2c:ea:ac:38:e1:00:18:a6:de:
19:4d:24:6a:93:a9:11:88:54:b3:cf:a1:17:00:87:b5:38:90:
e4:1d:61:b4:b0:46:02:a9:df:b5:7f:b4:17:81:5c:a1:f4:5a:
4e:fd:40:dc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:05 2025 by rpki-client