Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/VZNbFUTRQhHmrmuuv5FkfWsw_54.roa
File: VZNbFUTRQhHmrmuuv5FkfWsw_54.roa (raw, json)
Hash identifier: v51Xi6Cw25ZMDXddLPbd0f1X16j2Anz4E+MRkBlX/1M=
Subject key identifier: 55:93:5B:15:44:D1:42:11:E6:AE:6B:AE:BF:91:64:7D:6B:30:FF:9E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D7E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VZNbFUTRQhHmrmuuv5FkfWsw_54.roa
Signing time: Sat 08 Feb 2025 12:55:51 +0000
ROA not before: Sat 08 Feb 2025 12:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3454 (0xd7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 12:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55935B1544D14211E6AE6BAEBF91647D6B30FF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:43:ed:02:07:3e:d5:d3:a5:b3:10:e2:9e:
4c:a4:7d:87:3e:19:2e:09:01:ff:43:fc:b6:22:70:
2f:43:98:76:d8:74:74:f2:86:de:40:d7:b8:cf:d1:
ba:00:a6:a5:f0:eb:80:ce:39:5a:13:26:60:09:89:
d1:71:7e:21:1d:00:87:2f:da:3e:3e:46:6e:2d:64:
43:e2:3f:e8:2d:a2:95:9a:4b:d9:76:23:e8:fd:fd:
bf:33:a8:07:bf:a5:99:de:b3:08:53:82:35:e1:43:
c0:e4:3c:f6:e7:45:5f:47:58:7d:f3:3f:81:94:1d:
97:40:b9:4a:fc:07:50:6a:2b:cd:03:c9:f7:f2:25:
35:6d:f1:47:4c:4c:cf:70:e0:c8:bb:ee:4d:7e:b6:
21:69:ee:fa:29:85:7a:d5:fe:0a:f5:a2:55:60:7f:
0e:68:3c:ea:1a:6b:42:bd:82:10:92:95:e2:b6:70:
2e:8a:d8:72:84:16:7a:d1:bb:01:38:18:fa:bb:0a:
ea:86:62:f1:6a:36:91:e4:04:16:01:9e:02:69:fd:
85:42:0f:00:a7:37:90:cc:8e:2f:9b:62:f3:c1:42:
a1:0a:66:65:e9:8f:76:5d:22:ac:07:cb:c7:8e:c8:
3c:41:a0:b1:6c:a3:cf:be:e1:ad:03:1b:74:9b:8d:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:5B:15:44:D1:42:11:E6:AE:6B:AE:BF:91:64:7D:6B:30:FF:9E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VZNbFUTRQhHmrmuuv5FkfWsw_54.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
78:6e:32:be:f2:dc:ef:b3:b7:d4:b8:85:5e:33:11:47:6c:de:
f3:b2:0c:e8:cd:95:da:8c:f8:36:20:7d:88:79:f6:9a:7c:dd:
2d:ea:02:38:19:9d:f6:23:12:bd:19:bd:e7:9a:99:e9:a4:23:
8a:03:db:74:0c:90:04:ce:27:fa:54:e1:9f:23:c0:98:3d:68:
44:b3:40:eb:5b:e0:af:03:92:64:8c:8b:73:f7:cf:85:db:65:
a9:26:3a:aa:60:6b:99:4b:17:3a:8b:6a:69:51:15:e7:3a:e6:
86:9a:17:80:1c:e2:73:b2:22:0d:c0:25:d5:38:90:64:59:62:
18:62:dd:43:80:69:73:f6:d6:a2:4b:e7:19:c9:23:fb:11:94:
63:56:9c:0b:93:b3:34:b3:96:45:2e:5c:7d:2a:60:69:b3:ba:
6f:69:2e:3a:2e:e5:0c:f0:07:96:c5:83:20:d9:8e:c1:a7:56:
1b:31:ab:46:29:00:fc:4a:5b:fa:72:bf:03:ea:cd:79:ad:a5:
d4:10:c5:3c:24:7e:66:0d:36:98:fa:55:c7:06:e2:49:5c:29:
54:06:18:c8:ce:25:c3:1e:ae:18:60:51:f1:59:04:ed:9b:cc:
76:3b:a3:6b:d5:3e:68:9d:04:79:73:cf:f4:03:e5:9d:cf:a7:
04:fa:5f:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:40 2025 by rpki-client