Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/V3ftBgFQRl5ttabDrwm4m_a9aZI.roa
File: V3ftBgFQRl5ttabDrwm4m_a9aZI.roa (raw, json)
Hash identifier: GtSAtXP7DwWpiuq0ww9XdL+t1GcyE7HPXdKwwEp6Adc=
Subject key identifier: 57:77:ED:06:01:50:46:5E:6D:B5:A6:C3:AF:09:B8:9B:F6:BD:69:92
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BC4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/V3ftBgFQRl5ttabDrwm4m_a9aZI.roa
Signing time: Mon 03 Feb 2025 22:25:42 +0000
ROA not before: Mon 03 Feb 2025 22:25:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3012 (0xbc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 22:25:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5777ED060150465E6DB5A6C3AF09B89BF6BD6992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:8a:37:fd:a0:e5:28:ed:ac:a2:fe:e2:12:
fa:5e:15:95:3f:29:c9:87:d5:54:3d:ba:f9:bb:ef:
3d:6a:a0:0a:6b:80:dc:08:49:8a:4c:28:22:d0:e2:
e2:0b:ed:22:a1:5f:8a:cb:52:27:9d:b0:07:b2:96:
3d:f0:1c:4b:43:bb:8b:62:00:51:08:29:13:92:f5:
b4:98:d5:f1:d2:e0:35:86:ed:46:f1:f8:3d:38:1f:
5f:18:e7:9c:40:55:de:58:e5:0d:85:c1:5c:5a:93:
10:77:1e:94:e6:2a:8f:1b:0b:c7:cb:98:11:73:44:
b0:b8:36:40:8f:4c:c2:d8:69:17:5c:38:09:a8:dc:
d9:73:4b:9f:4c:34:a7:12:b3:04:ff:60:66:85:d6:
d4:c9:0f:6e:38:c8:63:00:64:67:99:59:c1:57:a6:
04:5e:76:77:2d:bb:be:43:24:cd:41:91:f1:21:5f:
db:0d:45:9e:22:2e:65:ed:e7:aa:52:72:bd:b3:d4:
05:b5:de:dd:c4:17:6e:58:fa:ad:e7:69:53:09:f4:
8b:0d:eb:a9:6b:f7:a7:df:c2:3e:ea:7f:be:1d:2e:
2f:55:ab:11:d0:5f:e3:0c:c7:bf:21:74:d0:a4:b5:
44:fb:67:28:70:9c:1b:cf:55:5a:cc:37:11:5c:16:
58:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:77:ED:06:01:50:46:5E:6D:B5:A6:C3:AF:09:B8:9B:F6:BD:69:92
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/V3ftBgFQRl5ttabDrwm4m_a9aZI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
09:6f:b3:3e:cf:56:29:b7:a5:7a:7d:a0:cd:41:dc:f4:f6:8e:
b7:99:f5:6e:c9:39:4c:50:b7:da:20:99:9b:e2:25:0d:0f:a6:
d5:11:60:c4:64:e2:bc:e9:30:66:f6:3e:06:de:c2:eb:6a:c6:
3d:49:43:cb:53:8e:ff:b4:b3:52:30:63:39:52:b9:61:a1:07:
dd:37:9b:ab:9e:a2:a4:43:ac:3f:79:21:98:7f:d8:ff:24:a4:
69:d2:0a:7f:6a:5e:65:bd:e5:68:8f:bc:26:1a:a9:60:21:e7:
f7:68:b6:dd:1b:ac:3a:c1:a3:f5:8d:74:4d:27:b4:6e:44:26:
d9:e7:cb:7d:5b:71:a6:a4:4b:a6:a3:53:f3:a8:ac:2c:6a:24:
c2:e8:34:ef:1a:2a:7d:11:9b:9b:d0:73:47:ca:b4:fb:cb:05:
55:0d:65:69:dc:6d:91:dd:0d:e2:93:3a:63:57:6e:30:51:84:
f0:36:f0:c0:e1:43:a8:48:b9:a5:95:70:29:f1:ce:2c:80:45:
7f:ff:98:6a:aa:6e:7a:6d:98:6b:8f:04:d6:bd:18:ef:29:1e:
37:3e:bc:30:d9:6b:71:35:38:79:8b:62:8c:2d:19:9c:16:35:
90:aa:4f:98:88:c2:a4:cf:d2:ac:51:0e:9e:ea:09:c1:c6:d9:
88:6f:12:d3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:06 2025 by rpki-client