Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/_DY2WrPvE3qX9wzd-0ZfeqUVXt0.roa
File: _DY2WrPvE3qX9wzd-0ZfeqUVXt0.roa (raw, json)
Hash identifier: Wvjd+LWQ29HgvS9sl2SPtmQeS22uM3S2GcivZOX+XAg=
Subject key identifier: FC:36:36:5A:B3:EF:13:7A:97:F7:0C:DD:FB:46:5F:7A:A5:15:5E:DD
Certificate issuer: /CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Certificate serial: 0EE2
Authority key identifier: DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_DY2WrPvE3qX9wzd-0ZfeqUVXt0.roa
Signing time: Fri 21 Mar 2025 03:28:56 +0000
ROA not before: Fri 21 Mar 2025 03:28:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3810 (0xee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Validity
Not Before: Mar 21 03:28:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FC36365AB3EF137A97F70CDDFB465F7AA5155EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:72:6d:d8:20:bb:80:1f:e5:75:a3:3e:16:
ba:a7:eb:e7:77:bc:2a:f8:a0:57:fd:ba:5f:23:6a:
63:01:66:d7:41:8b:32:20:52:35:da:be:ea:76:1d:
ad:27:fe:a0:79:de:2a:8d:ef:01:30:a5:e4:83:72:
92:1e:80:15:0e:db:41:9b:b3:c5:d2:f1:b1:c0:f7:
3e:e5:06:86:23:03:84:4a:f5:ed:bc:f8:2b:ff:ee:
d6:80:bf:55:da:07:df:f1:66:a8:49:59:fa:62:1c:
2d:0c:74:a9:1f:e9:c3:95:b5:1d:67:25:29:af:b8:
f4:f1:fa:d7:bf:34:22:0c:0c:70:88:ab:de:39:63:
c3:db:af:da:31:7d:88:3e:ba:ca:de:57:93:c5:6b:
9f:02:96:c8:00:ab:56:2d:d7:42:a1:94:ff:29:5f:
ac:9a:8b:0f:84:f9:4c:a9:a9:54:36:49:80:ef:e2:
53:b7:97:50:da:60:d5:13:19:43:3d:e7:de:f2:28:
0d:af:f7:9e:60:cf:38:05:72:a1:c0:3b:26:4c:c0:
2c:fe:e4:77:48:2a:ae:58:29:0e:24:34:d2:0f:57:
6a:38:69:e3:0c:d2:8b:6e:b2:a5:4a:f9:f2:32:be:
82:5c:73:d7:1f:32:c1:7a:72:50:d6:fb:57:33:5b:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:36:36:5A:B3:EF:13:7A:97:F7:0C:DD:FB:46:5F:7A:A5:15:5E:DD
X509v3 Authority Key Identifier:
keyid:DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_DY2WrPvE3qX9wzd-0ZfeqUVXt0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0/18
Signature Algorithm: sha256WithRSAEncryption
55:05:d1:a2:35:52:8a:9b:42:dd:9d:94:e0:81:1e:dd:5a:d5:
3c:43:0b:32:ce:1c:ac:4b:fb:c4:fe:a8:9f:cb:8a:03:e1:25:
e9:d1:12:14:93:bc:a2:77:a9:6d:bf:13:48:c5:05:19:f4:ad:
05:cc:c1:80:f3:60:1e:1b:fd:98:2d:0e:4d:c6:7b:da:39:60:
56:7c:fe:69:77:80:74:4c:4e:cc:c0:78:49:53:53:f7:e3:d5:
3d:c7:fe:dd:33:3e:45:39:cf:95:a0:cb:7d:e4:f8:a0:4f:9e:
a4:ca:af:ba:db:30:74:07:1d:ff:6c:82:36:ea:bd:6b:35:36:
06:c6:aa:9a:ad:8c:0f:be:df:0a:87:09:bf:46:b6:b4:9a:41:
6d:40:33:15:b8:59:af:9d:1f:35:e6:92:3b:8b:31:90:94:3e:
15:29:7e:4a:cb:56:f6:82:7e:23:0c:a5:41:63:99:ad:aa:f6:
17:20:8f:13:95:0d:46:26:f1:be:42:63:3f:df:c9:39:83:f2:
74:6f:83:ce:13:24:f9:11:75:6e:41:3f:e9:d1:74:e1:df:41:
41:26:94:5c:ca:73:19:90:2c:bc:12:a6:14:d9:16:26:74:a6:
ca:17:aa:0e:30:25:57:2e:b6:b1:e1:66:18:9f:41:7f:9f:bb:
8f:45:6f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:45 2025 by rpki-client