Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Zb9qXx-Zhbw-Y0WAIRpbzUZde2Q.roa
File: Zb9qXx-Zhbw-Y0WAIRpbzUZde2Q.roa (raw, json)
Hash identifier: 6V4T8bbyOGjCYcWolcKszHAZxh0W8HAzDoZZIwkQ/5s=
Subject key identifier: 65:BF:6A:5F:1F:99:85:BC:3E:63:45:80:21:1A:5B:CD:46:5D:7B:64
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C94
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Zb9qXx-Zhbw-Y0WAIRpbzUZde2Q.roa
Signing time: Thu 06 Feb 2025 02:25:45 +0000
ROA not before: Thu 06 Feb 2025 02:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3220 (0xc94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 02:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=65BF6A5F1F9985BC3E634580211A5BCD465D7B64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:ba:38:87:b1:72:18:9c:2f:e3:87:26:b9:
62:92:2d:97:04:5a:c2:4f:41:23:eb:94:ff:88:27:
36:91:c2:63:72:5f:69:08:18:63:dc:ae:e8:9f:50:
c3:b1:34:e9:46:73:03:a6:91:5a:80:b0:88:17:dd:
1b:da:08:0a:2c:b6:56:41:52:88:9e:54:b9:2b:36:
fc:8a:11:d8:1e:b1:c5:8f:2a:a1:b8:a6:60:0e:58:
29:6e:2e:d6:47:18:e5:2a:32:2f:ae:09:9c:81:d7:
71:0a:f3:47:ce:03:00:21:12:f1:4c:5a:35:0d:45:
19:bb:6a:29:6f:dd:6d:6f:f6:7e:0d:d5:c6:e9:d0:
f6:43:cb:a8:57:bc:34:3d:d4:53:98:bd:77:ae:9a:
d0:77:29:7d:14:18:c8:07:79:3f:90:43:90:1c:ae:
76:55:61:0d:b7:d2:d0:60:14:0a:19:e4:2d:d4:fc:
15:61:56:12:11:ca:6a:e6:77:8e:e6:87:7b:fe:e2:
7e:4a:56:e7:02:fd:d1:42:44:c4:c0:59:a4:81:c2:
03:96:41:c3:9c:f1:2c:c6:57:21:12:17:cd:ae:3a:
cc:54:48:19:6c:9f:54:d4:31:c9:9e:c4:c8:50:d0:
ea:44:20:3b:c8:fa:37:4b:6b:f9:29:e7:5e:f9:2d:
44:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BF:6A:5F:1F:99:85:BC:3E:63:45:80:21:1A:5B:CD:46:5D:7B:64
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Zb9qXx-Zhbw-Y0WAIRpbzUZde2Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:f9:f7:0f:00:54:d6:33:c4:51:57:ab:65:69:94:bf:ac:54:
aa:2f:75:dc:61:31:3d:d4:82:1c:35:7e:ee:dc:77:bf:ab:2d:
99:d7:65:9b:48:ed:0d:3f:de:c7:23:af:08:5f:14:34:d7:a1:
6c:cc:d4:57:d3:b2:7a:b3:95:de:36:15:ee:28:e4:7d:cf:2b:
07:1f:55:47:19:4d:49:6e:af:d3:26:be:de:9d:fb:cc:95:22:
eb:9e:62:b4:e4:b9:b2:20:59:51:dc:84:c8:16:2f:d5:f5:9a:
05:58:30:42:e2:44:31:1f:71:05:50:55:5b:2d:d5:d2:63:60:
fe:f9:6c:32:17:ed:52:c9:55:c3:41:f2:40:35:30:09:71:fc:
59:b2:40:8a:e8:b9:71:b4:56:d6:4a:f1:4f:57:e1:a3:ae:27:
dc:71:0a:13:26:bb:91:92:d4:06:17:37:9a:be:13:3e:e9:7e:
10:13:44:ad:63:8c:4a:36:25:ae:0c:f3:fa:c6:d5:38:db:01:
c9:a6:a4:20:4e:12:cc:03:6e:27:15:5a:6f:a6:8d:33:69:47:
64:db:df:bf:bc:5d:e9:b3:ad:f7:7b:43:c8:2d:0f:06:91:59:
6b:7c:64:bd:b2:b3:3d:7f:dc:35:85:60:c4:74:81:3c:60:4d:
c0:f4:22:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:44:50 2025 by rpki-client