Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/VYMeWrt7hGGGvTvynSyY9dwd4qc.roa
File: VYMeWrt7hGGGvTvynSyY9dwd4qc.roa (raw, json)
Hash identifier: 44GlIsWNiIz+jJdU61PGHzAfmG5o6vaQLZepBG9Zwl8=
Subject key identifier: 55:83:1E:5A:BB:7B:84:61:86:BD:3B:F2:9D:2C:98:F5:DC:1D:E2:A7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C18
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VYMeWrt7hGGGvTvynSyY9dwd4qc.roa
Signing time: Tue 04 Feb 2025 19:25:41 +0000
ROA not before: Tue 04 Feb 2025 19:25:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3096 (0xc18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 19:25:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55831E5ABB7B846186BD3BF29D2C98F5DC1DE2A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fb:ac:79:c9:fd:49:68:ff:e8:69:c2:79:e2:
da:e2:00:45:e4:ee:09:1f:70:7c:66:c9:f0:16:f8:
6b:49:a9:99:58:45:01:25:61:19:4c:c7:f5:be:dd:
62:be:48:97:c2:1b:8a:7a:c7:02:c9:f4:f8:8b:ab:
9c:ff:97:f5:81:81:1a:e4:34:ec:7b:68:21:3c:68:
2a:d6:37:a7:e3:f9:55:30:db:a4:50:f9:61:69:ed:
0f:8b:7e:1e:38:24:fd:63:96:0d:6b:9f:a9:78:c8:
1d:69:34:88:30:8c:9c:34:c8:3d:7b:3b:6c:50:32:
e5:c0:a2:df:51:c9:09:13:f1:8f:b5:a8:2a:98:68:
77:c3:70:a2:e4:bf:4c:5c:0b:57:4d:b9:84:eb:ea:
1b:e5:01:d1:a3:26:7f:8b:17:9c:c2:3f:24:2c:d9:
70:81:50:73:a3:9b:71:65:9f:0d:d1:1d:28:58:1c:
13:41:7d:ae:72:55:99:c4:32:bd:e3:36:13:6c:45:
82:b8:0d:32:a1:dc:0e:7b:08:5a:39:3e:bb:9c:e6:
28:e6:7e:38:04:2b:61:e0:7f:9e:1c:29:b1:37:5b:
e6:98:35:40:c3:9c:9c:0d:5d:04:3c:d4:f6:59:6c:
21:e1:6a:b9:7c:ba:15:54:ea:b7:2e:eb:6e:6e:e2:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:83:1E:5A:BB:7B:84:61:86:BD:3B:F2:9D:2C:98:F5:DC:1D:E2:A7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VYMeWrt7hGGGvTvynSyY9dwd4qc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
22:12:2d:e4:3a:ab:ba:cc:a3:da:74:f6:a9:79:94:64:ce:53:
c5:3a:6b:0b:dc:8b:56:48:24:d5:af:8e:98:05:71:c2:35:00:
0f:70:5b:b6:fb:f8:67:51:9f:98:f5:fb:45:12:70:80:34:c6:
58:74:60:2b:01:d3:06:f3:6e:e9:dc:ae:e4:89:13:9b:b5:e4:
dd:93:3a:c6:e9:c1:2c:a6:f7:81:ac:39:10:9b:77:d6:e6:e4:
64:20:71:7d:7c:ea:98:dd:55:5f:98:33:96:49:c0:c4:0e:74:
2b:c3:cb:67:d4:08:de:21:b2:30:44:2a:e2:80:79:69:93:8b:
2b:61:ca:d2:12:c4:f4:c5:7a:56:b1:74:78:d8:af:bf:1a:81:
d8:0f:3a:18:15:d8:de:20:52:a7:86:b4:79:43:77:db:74:9b:
79:24:7f:62:15:02:c4:46:ea:b5:ef:34:a3:bd:33:d6:8f:40:
c6:bb:d3:f3:0e:0a:fd:e5:ea:a0:70:31:36:e6:b7:94:52:51:
7e:09:1f:fd:13:75:72:64:41:67:be:a7:3e:c8:25:5c:d6:ef:
60:80:ea:53:76:b7:32:44:b9:25:5a:11:72:bc:17:67:7b:e8:
9f:d2:53:55:3e:8a:78:3d:be:31:d7:4a:a0:c3:05:64:f8:31:
f7:3c:50:23
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:44 2025 by rpki-client