Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ajj4B0rGZzyxAVM0vGiQhtMokJw.roa
File: ajj4B0rGZzyxAVM0vGiQhtMokJw.roa (raw, json)
Hash identifier: XuRGPkqEUZWSHIqv+Cn5AYWXGER2EBmW7IwUwQE8jDs=
Subject key identifier: 6A:38:F8:07:4A:C6:67:3C:B1:01:53:34:BC:68:90:86:D3:28:90:9C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 080E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ajj4B0rGZzyxAVM0vGiQhtMokJw.roa
Signing time: Sat 25 Jan 2025 00:55:07 +0000
ROA not before: Sat 25 Jan 2025 00:55:07 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2062 (0x80e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 00:55:07 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6A38F8074AC6673CB1015334BC689086D328909C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:bf:9e:02:c1:d9:39:9e:ee:1b:58:3c:fd:
7b:ac:b3:1e:ef:13:fd:3f:d7:46:2a:74:c5:b2:ad:
0b:e6:c6:b4:3e:e6:c8:50:dd:64:eb:ef:48:f9:61:
2b:c4:66:d9:dc:58:f9:c3:a2:30:34:81:eb:3e:bf:
bc:5e:55:9d:53:01:4e:30:9e:33:61:a4:17:00:f5:
6e:78:84:bc:55:c1:57:63:80:33:0f:d7:a0:5a:b5:
4d:22:d6:c9:5a:31:db:c1:d6:da:d3:04:91:8c:72:
75:98:e0:45:64:b0:7d:2d:fb:6e:2a:e0:1a:b3:36:
b5:2f:c4:3b:99:5a:ff:2f:74:a7:b3:b4:44:68:53:
e4:a2:77:5e:ac:c8:9c:cb:80:cf:98:d2:5c:ef:e7:
39:a0:e0:de:8c:d1:f4:9a:dc:91:92:b3:29:4d:1e:
b7:bd:44:60:ff:40:2b:57:ec:ae:2f:00:09:d7:0d:
20:f4:0b:a1:f1:52:4d:5f:17:66:5a:2f:55:d2:ca:
5b:17:e2:74:76:7d:ac:c3:13:a9:fd:6f:10:85:73:
f0:e0:01:b3:f6:aa:65:18:bd:35:8b:1c:8f:90:b5:
04:25:06:54:63:59:e4:18:15:80:f7:5f:96:59:80:
a8:d6:d2:7e:82:a9:6f:db:b7:43:5e:b6:93:e9:7f:
d6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:38:F8:07:4A:C6:67:3C:B1:01:53:34:BC:68:90:86:D3:28:90:9C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ajj4B0rGZzyxAVM0vGiQhtMokJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
54:ee:21:d4:07:de:93:88:b0:e4:5e:2e:1f:b8:87:3d:f0:a9:
80:b5:7a:db:52:69:36:14:48:b4:4d:d4:50:4e:d3:ba:b2:18:
e7:b3:0b:cc:40:5a:a7:48:7e:e5:d7:b4:85:ee:c0:77:7a:b5:
95:fc:6d:c5:b0:ab:2d:8e:ad:38:e8:19:d6:8c:82:70:81:b0:
d2:58:6d:73:2b:ab:1a:0f:09:b7:c7:2e:21:c1:1a:23:7d:ef:
f2:f2:06:db:52:5e:d0:13:9b:eb:d4:5a:94:09:d8:e5:97:c3:
fe:63:32:ea:40:fd:1a:c0:6e:1a:15:7a:8d:32:87:eb:04:b0:
3b:6a:bf:ea:4f:66:b0:35:7d:22:00:22:e6:d6:c9:a3:48:bb:
cf:4f:d0:25:da:33:f6:bc:e6:05:ae:59:01:6c:d6:7b:35:e8:
a6:94:b1:34:61:09:3d:48:e7:a8:eb:53:37:15:2b:f9:dc:8b:
d9:86:fb:e3:d3:42:77:e1:72:66:a4:e2:e0:a0:28:6f:4a:c6:
d5:a5:68:f8:ca:f2:5e:3e:47:30:8c:a6:bc:3e:d9:73:c3:98:
b1:df:9f:51:0d:16:4c:d3:18:8d:6b:69:c4:a4:e1:34:18:d2:
61:ca:e3:5e:b8:9d:6b:a4:a3:fd:3f:ae:7b:1f:5a:90:3c:30:
ae:23:55:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:09:37 2025 by rpki-client