Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Z-MNjlc9x7Q7J6ACvazxb7Rs4nw.roa
File: Z-MNjlc9x7Q7J6ACvazxb7Rs4nw.roa (raw, json)
Hash identifier: 06aJvhSavcsRndXzadNhryay99n4HjJ7ru5iyMZIqCc=
Subject key identifier: 67:E3:0D:8E:57:3D:C7:B4:3B:27:A0:02:BD:AC:F1:6F:B4:6C:E2:7C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C6C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Z-MNjlc9x7Q7J6ACvazxb7Rs4nw.roa
Signing time: Wed 05 Feb 2025 16:26:29 +0000
ROA not before: Wed 05 Feb 2025 16:26:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3180 (0xc6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 16:26:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=67E30D8E573DC7B43B27A002BDACF16FB46CE27C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:6f:49:fe:84:4a:7b:88:28:bd:8c:65:6a:
58:74:26:45:71:c9:65:49:a9:9d:fc:8e:af:f4:d9:
0c:0d:d2:c2:9e:ca:c5:09:c4:f5:64:87:0f:a7:79:
39:82:3c:c0:c6:f7:ce:0f:b2:3b:45:88:b4:6f:bc:
9e:4e:73:5b:82:94:dc:86:23:87:ae:e8:8d:06:a7:
f3:a2:d9:fc:fc:47:f9:c9:6f:af:b9:06:36:ac:78:
8b:07:97:b5:56:8d:7c:bf:8d:6a:39:79:f3:94:c1:
86:0a:9a:16:cc:3e:1d:6d:2e:e1:7a:ed:0f:5a:13:
01:4a:94:0c:3f:ba:7e:ce:22:2a:2f:e8:22:d5:01:
22:06:79:d4:f3:de:0e:cc:9e:c1:5b:ba:59:bf:20:
35:1a:0e:53:59:4c:d2:e0:e1:53:0a:b7:82:73:e2:
76:5a:47:c1:f4:e3:90:0b:fc:6e:96:36:e3:09:b1:
ce:ca:8e:bf:fd:a1:60:36:54:a4:5a:2b:d3:c4:79:
2a:9c:af:f4:2a:24:1f:cb:66:e7:2f:c3:b3:90:4c:
01:97:ce:ee:d8:47:29:7d:ac:c9:a9:75:38:40:a0:
b8:ef:e7:63:a8:21:79:fe:b8:5c:24:89:a8:8c:0f:
2c:f5:25:fa:d8:11:34:79:9d:6a:c5:7d:d6:de:6e:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:0D:8E:57:3D:C7:B4:3B:27:A0:02:BD:AC:F1:6F:B4:6C:E2:7C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Z-MNjlc9x7Q7J6ACvazxb7Rs4nw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
27:ce:fc:b0:55:60:98:94:ba:83:10:91:90:ad:a5:8d:ed:04:
df:54:cc:f7:e2:a4:3e:a6:95:0b:0b:0d:7f:dd:29:52:39:f6:
a9:29:18:b3:71:7c:18:3a:ea:13:cb:41:09:cb:33:a2:64:cd:
78:ff:91:1f:cf:40:5e:83:25:8d:ed:41:8b:fa:af:09:f6:e1:
76:f3:7a:23:d4:ec:40:10:e7:e4:7e:f8:cd:81:b9:5a:27:8a:
01:77:5e:a5:56:b0:1d:14:88:9b:73:4e:62:79:0b:a5:f5:4d:
0a:42:ca:4b:b2:28:e8:45:2f:21:18:ec:40:86:22:95:53:9b:
16:80:c5:ff:64:88:55:11:71:2e:c1:da:46:aa:1b:7f:b2:15:
d2:86:18:d8:28:33:2a:c1:4b:f1:0b:33:63:c0:0a:f9:cf:5f:
9a:74:af:da:28:98:af:f4:1f:d9:11:82:4c:e9:70:d2:d5:38:
30:26:97:4a:00:19:b2:6c:6e:bc:4c:a0:46:4c:bc:ca:05:7d:
b0:41:59:87:97:01:50:b4:1a:a5:fd:bd:32:e2:e2:7f:01:c4:
46:f5:c6:cd:95:ba:41:73:20:d3:49:68:89:b2:a4:08:ee:38:
99:1e:32:61:a8:74:af:82:2f:e6:52:7f:b1:ee:5a:f6:e6:0c:
79:01:8d:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:14 2025 by rpki-client