Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/PbHk8_6iSi3p72O028mS-2IEF78.roa
File: PbHk8_6iSi3p72O028mS-2IEF78.roa (raw, json)
Hash identifier: XI33wAvfgxGeCVG9hPiRcIayvY+sSc0ix5FHFfpoNlA=
Subject key identifier: 3D:B1:E4:F3:FE:A2:4A:2D:E9:EF:63:B4:DB:C9:92:FB:62:04:17:BF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BBC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PbHk8_6iSi3p72O028mS-2IEF78.roa
Signing time: Mon 03 Feb 2025 20:26:23 +0000
ROA not before: Mon 03 Feb 2025 20:26:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3004 (0xbbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 20:26:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3DB1E4F3FEA24A2DE9EF63B4DBC992FB620417BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9d:20:83:32:48:55:31:b3:83:3a:96:dc:b0:
c8:95:96:44:94:7e:ca:d6:24:3b:bc:72:80:38:e7:
6b:03:c8:37:69:80:b0:18:40:29:11:14:4a:6d:c3:
be:51:f2:f7:a5:54:11:5a:69:ef:95:d8:2a:32:74:
73:ee:a7:ad:50:92:c8:4a:7c:51:e8:27:22:76:e2:
a4:9a:ad:76:85:70:1a:1d:68:8d:14:a0:a9:6e:74:
12:a1:40:03:38:56:fb:ab:df:f6:d3:dc:51:6e:4f:
49:e2:62:7a:39:fe:84:00:25:ef:94:3b:b8:9b:f6:
e7:36:2c:5a:d9:85:14:50:c2:eb:4b:10:9c:40:2c:
72:a2:19:fa:c1:9a:01:1a:46:61:1b:60:44:62:40:
3f:00:87:94:40:6c:c8:05:1f:56:d0:61:71:32:94:
d9:01:07:44:9b:aa:0d:3d:c9:ec:f5:48:f3:39:bb:
22:ca:fa:01:f5:75:d1:cc:50:3b:c7:73:cd:34:bd:
3f:99:10:36:93:89:9b:0d:0c:fc:0d:bf:d9:ae:10:
24:db:e9:e8:c8:74:ad:a7:b6:23:5b:2e:0f:e5:58:
35:38:9c:3f:ed:d2:f9:e9:f5:88:20:22:b3:76:89:
e3:5c:1c:36:53:c8:f4:08:3b:64:e6:69:d1:94:d8:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B1:E4:F3:FE:A2:4A:2D:E9:EF:63:B4:DB:C9:92:FB:62:04:17:BF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PbHk8_6iSi3p72O028mS-2IEF78.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
10:12:39:7a:1f:04:3f:a4:42:da:54:54:a8:7e:05:98:03:cf:
84:84:f4:21:05:2d:4e:a0:42:c0:0b:46:be:03:d9:96:c0:db:
bf:37:cb:3b:36:05:cb:3a:36:5a:66:95:7c:d0:00:3b:c7:68:
78:67:3c:71:38:be:fe:1b:a5:05:fd:ed:1a:fb:16:4e:b5:3d:
47:d7:d1:aa:fb:0c:f9:51:6b:86:fe:4b:8c:c0:27:f9:b8:e7:
7c:c6:22:4b:53:9a:12:ae:de:1e:dc:7c:71:c1:b5:47:75:4d:
1e:5a:48:ff:ef:f0:34:d4:67:f9:c1:e0:ac:b1:7e:bd:68:53:
2b:a1:9d:d5:49:ef:6a:67:a0:20:42:7e:3d:5c:63:ef:37:66:
8c:94:3d:34:78:03:19:79:72:48:3f:d0:05:a8:8e:0f:93:47:
c3:45:d7:ff:b3:32:44:c0:40:bb:41:4a:03:be:cb:b3:da:52:
24:d7:d6:86:ac:bd:b0:9e:de:8e:4a:62:b4:a4:f3:00:5a:c4:
00:77:b0:41:ea:dc:b5:3d:c5:ab:35:17:ea:81:7b:d2:bb:5f:
40:1a:98:a4:2f:aa:83:f4:55:b5:48:58:4c:91:49:60:08:7c:
fe:4b:4e:84:7e:8f:c7:87:6d:12:ae:68:ba:c2:b9:ec:e2:53:
a7:6f:0f:74
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:59 2025 by rpki-client