Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/W3mSeQV6m02NKkfZB-y-zugs_rE.roa
File: W3mSeQV6m02NKkfZB-y-zugs_rE.roa (raw, json)
Hash identifier: GupQschjWaR3oEakSJBrFfXX8mJWMdYwBsGze5Zs/CQ=
Subject key identifier: 5B:79:92:79:05:7A:9B:4D:8D:2A:47:D9:07:EC:BE:CE:E8:2C:FE:B1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C0C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/W3mSeQV6m02NKkfZB-y-zugs_rE.roa
Signing time: Tue 04 Feb 2025 16:25:40 +0000
ROA not before: Tue 04 Feb 2025 16:25:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3084 (0xc0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 16:25:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5B799279057A9B4D8D2A47D907ECBECEE82CFEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:76:b3:b7:eb:5a:93:0f:ef:71:4e:86:00:
2c:e0:0c:e7:ca:47:c9:1e:1a:07:7c:6b:4d:1e:25:
1e:ca:96:b1:da:7f:bb:34:aa:16:2c:c2:59:62:07:
f2:8d:81:de:ae:d8:75:b1:be:5a:d6:f3:ef:c5:39:
02:10:42:0a:0d:e4:23:5d:83:b5:f3:2a:e4:b7:7a:
db:d5:cb:a8:a1:85:81:76:c4:f8:fd:e2:17:35:b3:
35:93:8b:7a:b0:d2:05:2f:ea:5c:de:a0:a3:94:e5:
6f:c6:00:41:4e:ef:51:44:05:e9:a4:18:80:69:31:
59:80:12:f2:32:b9:04:93:d0:c7:81:6b:15:c9:8e:
5a:cd:10:85:de:36:32:2d:b4:45:43:47:f3:9c:10:
14:3a:57:8a:d5:3d:65:f1:89:9a:3e:c2:2f:d1:57:
b4:66:e0:56:95:e0:5c:2d:35:ef:0f:5c:b1:10:c2:
62:6e:65:2b:08:00:51:a0:57:7d:92:2a:3b:fe:75:
c8:06:76:51:12:cb:17:8e:03:9a:8c:9d:f5:99:37:
fa:49:a5:f3:70:3d:2b:65:35:1f:9c:51:97:3f:49:
1a:78:d2:05:ea:78:cb:dd:f2:c5:80:0d:7b:fe:62:
d5:23:92:17:f5:b1:a9:89:c1:64:41:98:4d:fe:45:
bb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:79:92:79:05:7A:9B:4D:8D:2A:47:D9:07:EC:BE:CE:E8:2C:FE:B1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/W3mSeQV6m02NKkfZB-y-zugs_rE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
82:06:37:5e:e5:6b:18:92:49:cf:db:2f:f6:ee:af:ae:6b:ea:
bb:bc:df:57:5a:08:e3:56:83:b7:5e:e4:76:63:d9:54:fd:6c:
31:d7:7a:66:17:e3:2f:33:dc:cc:5c:02:16:be:41:b3:a5:3c:
87:e6:31:70:b6:6e:dc:ea:03:dc:27:33:9e:52:c1:cf:da:45:
ec:47:d2:10:61:5a:4f:b9:71:5c:56:ee:8b:ee:a3:68:00:0f:
64:d6:93:6a:d1:11:57:89:24:e8:aa:65:05:3b:88:11:95:67:
3e:71:d5:be:0b:36:58:55:61:68:ff:aa:a2:c2:a1:b9:e5:79:
63:b9:e2:84:ce:b5:b8:85:20:1f:b5:48:85:b1:70:40:55:90:
ed:3e:79:e5:b7:61:19:51:e3:28:6d:09:99:ff:f6:f0:07:42:
8f:ce:40:7c:20:5f:cc:6d:1e:1d:64:a7:c3:2a:60:0d:b5:d9:
a2:0f:f8:da:aa:2d:bc:45:ce:90:a9:66:ae:14:34:2c:d8:4e:
dd:c6:ca:f0:bf:2a:45:eb:05:4f:41:77:59:1f:f6:0f:04:e3:
52:95:ac:94:2f:f0:db:61:95:74:26:25:60:17:ab:6d:54:35:
1c:e7:21:53:3b:ed:3f:37:71:a3:07:62:07:d6:29:85:d7:0c:
02:56:0d:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:15 2025 by rpki-client