Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/WxvndCZDPq_mPYo-alpWCDpuey8.roa
File: WxvndCZDPq_mPYo-alpWCDpuey8.roa (raw, json)
Hash identifier: 554nhIKKTg+57uFEXwfsKH8s7xPxZUcVZcPPfq0RJaM=
Subject key identifier: 5B:1B:E7:74:26:43:3E:AF:E6:3D:8A:3E:6A:5A:56:08:3A:6E:7B:2F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0514
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/WxvndCZDPq_mPYo-alpWCDpuey8.roa
Signing time: Fri 17 Jan 2025 02:24:42 +0000
ROA not before: Fri 17 Jan 2025 02:24:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1300 (0x514)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 02:24:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5B1BE77426433EAFE63D8A3E6A5A56083A6E7B2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:05:49:a6:c1:0b:d5:5f:c7:8a:9a:3c:8f:
85:ec:f6:b3:05:d2:8f:96:ab:46:ee:a6:0c:cc:c7:
cb:20:c1:89:47:7c:2d:af:14:69:fb:cc:8e:15:cf:
0c:3e:8a:ae:6d:ec:23:d6:50:95:a8:a2:0b:b0:31:
16:4d:e0:13:ce:44:ad:4d:cb:3e:31:4b:e8:2f:c9:
c0:6e:8b:eb:0b:8c:03:f2:1c:55:16:92:89:10:bf:
c4:ba:3a:88:46:f3:00:8d:cd:6b:82:ea:ae:61:2c:
54:16:f9:0c:2f:19:2d:dc:6e:c3:80:44:d1:29:98:
39:ae:b2:5d:e2:5d:73:d7:29:80:30:2a:69:88:70:
e5:a5:52:a9:92:1b:89:d6:c1:a0:f8:d4:ee:e1:9f:
dc:61:43:52:c0:74:19:10:41:9f:59:0b:77:fa:16:
48:e8:20:97:ed:ee:10:38:b7:9d:e9:f2:1b:33:c2:
d5:a4:c4:45:f2:09:e1:10:ca:93:37:b6:c3:11:3c:
95:d4:ea:bb:41:4f:89:d1:7e:0f:eb:a8:cc:30:8d:
20:fb:94:37:3e:89:44:10:39:23:0b:d7:87:13:e4:
4c:7d:d4:06:48:43:6e:4a:e5:43:d9:62:a5:9d:c1:
09:a3:20:6c:ce:b6:17:47:88:69:71:31:56:23:03:
1c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:E7:74:26:43:3E:AF:E6:3D:8A:3E:6A:5A:56:08:3A:6E:7B:2F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/WxvndCZDPq_mPYo-alpWCDpuey8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
62:0a:06:1e:50:ca:21:44:a8:38:f3:aa:34:39:d8:b9:51:7f:
51:7a:0a:36:28:ac:24:ea:c6:e8:8b:fb:ed:fb:69:62:32:7e:
d3:7d:ac:a8:2f:a6:fb:d5:1d:a7:c8:e5:8c:89:2e:15:e3:09:
e3:5f:48:48:c3:87:dd:7c:77:5f:7b:5f:7c:af:52:69:ca:95:
00:e8:cd:6e:46:76:87:3b:5b:35:23:99:72:52:7c:4d:02:80:
99:79:5e:59:c1:10:8f:f8:4f:7e:38:90:bd:67:67:92:cb:a0:
91:19:7e:2f:ed:6e:e1:76:ab:52:a2:73:c5:e3:2e:6a:0b:eb:
b1:7a:30:5d:e1:61:c3:b1:e5:17:6b:cc:52:34:60:ac:49:93:
0a:21:df:1d:8a:6e:3c:2b:f4:b7:69:ff:91:3b:3d:9b:e1:59:
68:37:2f:3a:40:4e:3a:3f:2a:1f:71:37:f0:88:38:c5:12:48:
bf:fa:23:7f:71:2a:3f:5b:10:59:ae:3e:18:d7:38:89:5f:e6:
09:3c:9c:52:96:24:82:6c:5b:e8:3e:2c:70:62:a4:ae:5a:eb:
97:3c:eb:45:27:81:c0:cf:bf:17:14:9c:39:98:c3:35:61:97:
bc:8c:5e:09:f1:cf:16:df:45:fe:39:10:de:5a:f2:c1:9b:f0:
08:2e:66:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:19 2025 by rpki-client