Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/_LXNNN1z_MLEqNZrHbnTE3mvRtc.roa
File: _LXNNN1z_MLEqNZrHbnTE3mvRtc.roa (raw, json)
Hash identifier: D7/IPQNnqoHHTJC7hGKkPpeiHleMDX5tK+KZEvPiPgQ=
Subject key identifier: FC:B5:CD:34:DD:73:FC:C2:C4:A8:D6:6B:1D:B9:D3:13:79:AF:46:D7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AFE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_LXNNN1z_MLEqNZrHbnTE3mvRtc.roa
Signing time: Sat 01 Feb 2025 20:57:16 +0000
ROA not before: Sat 01 Feb 2025 20:57:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2814 (0xafe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 20:57:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FCB5CD34DD73FCC2C4A8D66B1DB9D31379AF46D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:ab:dd:b5:26:40:e3:74:00:03:f6:41:cf:
84:26:0e:bb:31:98:b6:3a:dd:42:c0:bd:2a:a0:df:
3f:f3:da:d3:7c:eb:f3:b8:3a:5f:7b:49:4f:47:8e:
15:dd:39:b7:4c:53:f5:ef:8a:ad:e0:1d:2c:c6:d7:
8f:fe:22:70:2d:04:9a:0e:59:cc:78:01:02:83:78:
27:3b:6b:47:db:ed:af:90:77:0c:7e:b4:c1:5e:97:
8c:ff:d1:45:ea:f6:3a:a5:90:c7:23:45:6b:83:9c:
22:bd:b2:f9:78:9b:43:89:0c:a4:9f:6e:cc:ca:c9:
19:1a:64:38:63:8e:d5:45:49:cb:af:9d:6f:c9:40:
77:8d:30:7a:72:7c:fa:77:f3:ae:78:70:47:31:cf:
b5:ea:4e:a4:ec:1c:0f:ad:4d:1f:4c:33:00:da:99:
69:88:59:da:7f:2d:d6:e3:ec:8f:99:1b:05:d8:75:
fa:40:75:34:22:cb:71:2e:49:40:8c:06:21:e2:f8:
8a:01:73:34:e7:ed:e1:fb:8e:13:9c:22:c2:30:d1:
8a:39:3f:c1:d1:74:0c:5a:2c:c0:cb:bb:79:0e:c8:
a5:21:6b:a4:49:9d:13:07:1a:68:8a:8b:3c:fc:d9:
7e:94:da:38:f1:f8:6b:7d:1b:05:49:d6:e1:45:d3:
32:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:CD:34:DD:73:FC:C2:C4:A8:D6:6B:1D:B9:D3:13:79:AF:46:D7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_LXNNN1z_MLEqNZrHbnTE3mvRtc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5a:81:54:d3:e8:c9:dc:9b:ba:a7:f5:bb:81:67:27:c4:d2:15:
44:1b:97:16:d7:4a:d0:54:9d:54:2e:2a:9f:80:6f:18:32:a9:
85:88:15:8e:ad:65:66:0a:0e:1d:97:bc:69:8c:14:fa:b9:d9:
5d:5c:a7:76:b3:80:e6:81:7e:a4:92:c3:26:f0:95:2b:cf:ce:
89:b6:0c:af:e2:1a:ca:eb:08:22:23:f1:55:5b:43:27:9e:c8:
e5:dc:97:0e:94:69:d3:d8:3f:0d:49:1a:8f:56:c5:be:a0:6f:
3d:9b:08:57:a7:e8:8e:60:26:66:c5:c1:8a:85:99:f7:81:44:
d1:6a:87:75:39:67:48:79:98:34:8c:51:82:54:d2:c6:25:ac:
bc:90:70:26:df:a6:b0:39:11:19:9c:f7:55:e4:03:10:66:a8:
b1:36:21:9f:c3:17:b0:53:5b:19:d3:22:3b:92:f5:41:6b:d5:
ec:39:0f:64:76:58:ed:b7:41:ae:4e:33:35:b1:3d:64:37:a7:
89:df:7c:a1:b1:d9:08:53:67:73:b2:8d:5d:7e:81:88:3a:b5:
e6:5f:7e:28:ae:d7:d7:79:f2:3c:8a:dd:68:92:5a:14:3d:f8:
96:77:a2:f0:3a:69:f4:04:87:d7:f4:92:9b:55:5b:6b:b4:37:
bd:61:96:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:16:27 2025 by rpki-client