Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/TNIr1C9Yvbtv0hxWM8ozVYUkiCk.roa
File: TNIr1C9Yvbtv0hxWM8ozVYUkiCk.roa (raw, json)
Hash identifier: KLtuoy9rQxVnq0AJ2RZEEC8BYvvgpeeJ2qf0j/9xsU8=
Subject key identifier: 4C:D2:2B:D4:2F:58:BD:BB:6F:D2:1C:56:33:CA:33:55:85:24:88:29
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0EA7
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TNIr1C9Yvbtv0hxWM8ozVYUkiCk.roa
Signing time: Mon 10 Mar 2025 15:36:14 +0000
ROA not before: Mon 10 Mar 2025 15:36:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3751 (0xea7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Mar 10 15:36:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4CD22BD42F58BDBB6FD21C5633CA335585248829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:c5:e0:73:a7:08:5b:4f:86:9f:84:ca:8e:
c2:6b:d9:b6:79:87:e9:40:18:90:b3:1f:bf:49:fb:
90:3e:67:73:ac:92:64:c6:ea:f4:2c:6c:84:35:5a:
e1:f1:58:38:52:4d:e8:2d:ae:ff:82:2d:85:1d:f4:
81:13:1c:49:37:1b:9f:9d:3b:9a:8a:0b:29:83:f4:
98:45:ce:76:43:3f:21:6b:cf:a3:6c:cd:27:2c:51:
e3:75:08:7b:05:20:69:7b:6d:47:20:40:53:44:97:
8c:4a:6a:5a:2a:13:43:0b:8d:47:d8:81:d7:1c:e5:
9b:50:be:9e:9c:54:26:17:4d:cc:e4:80:eb:0d:3a:
0b:7e:b9:bf:a4:7d:c8:ce:d0:60:13:02:01:4d:f9:
1a:88:9e:7c:32:13:92:c7:d2:23:3f:05:a2:49:a5:
48:af:d5:24:ee:ea:1c:9c:96:47:d7:fd:1a:b0:df:
c5:dd:89:e1:cd:cd:d4:fe:9b:9c:9b:65:0e:f8:15:
de:d6:b4:8f:e9:c4:8f:44:fa:5c:16:65:93:13:17:
5b:55:12:9f:0b:18:ad:cb:fa:af:49:23:24:c0:d1:
0d:78:13:67:11:79:ad:f5:fc:76:a4:7f:0d:a1:9f:
22:a4:77:8c:5a:3b:d1:8a:bd:c2:e9:fe:df:ad:dd:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D2:2B:D4:2F:58:BD:BB:6F:D2:1C:56:33:CA:33:55:85:24:88:29
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TNIr1C9Yvbtv0hxWM8ozVYUkiCk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.92.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:05:e4:cd:7f:7b:99:91:2a:c0:c8:76:bf:88:1c:4c:d7:6e:
e4:b6:77:b4:2f:30:e7:e0:8c:ae:d8:e0:0a:47:e7:6e:60:49:
8d:46:71:14:db:04:bd:aa:96:88:46:89:80:86:8d:fd:3f:4b:
89:1b:49:7e:1b:20:1c:f2:d2:ed:2f:0d:3e:1e:08:cd:9e:95:
08:8c:49:6d:ab:55:d9:f9:0d:5c:09:51:cf:32:59:be:af:97:
d8:df:90:d0:06:4f:fd:34:62:59:f3:f2:18:24:bb:1d:bd:93:
9b:8a:3e:f4:9b:d7:d6:05:fd:3c:1b:7b:72:ab:0e:c8:90:ea:
3a:5a:16:59:ff:96:aa:f4:f9:72:de:0e:a7:6b:6f:49:76:20:
a5:bd:c5:1a:fc:6d:b3:84:e1:d9:1f:34:e9:de:df:46:c1:2d:
67:36:40:64:89:48:6b:33:b4:a0:1c:c2:86:44:48:78:98:80:
fe:02:d9:a7:a1:09:73:d7:52:c5:7b:57:9a:5a:58:8d:bc:0f:
48:a7:c4:c2:ab:3a:e9:09:b9:82:ac:c0:db:f9:79:55:f2:18:
6e:84:91:44:b2:ad:5d:f8:ee:b5:ae:fa:a3:23:e6:7d:17:61:
2a:d3:2f:3b:ad:88:6d:d7:70:df:c5:2f:c2:8e:c4:a8:21:d7:
47:42:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:59:11 2025 by rpki-client