Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/bVOUeySuF2H7dlPnxyiBwSUwPiQ.roa
File: bVOUeySuF2H7dlPnxyiBwSUwPiQ.roa (raw, json)
Hash identifier: aVju4sH5VSBF3atlqzdu5dB5uKhSK3BmS6VDZtFfaUw=
Subject key identifier: 6D:53:94:7B:24:AE:17:61:FB:76:53:E7:C7:28:81:C1:25:30:3E:24
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 04CE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bVOUeySuF2H7dlPnxyiBwSUwPiQ.roa
Signing time: Thu 16 Jan 2025 08:54:39 +0000
ROA not before: Thu 16 Jan 2025 08:54:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1230 (0x4ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 16 08:54:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6D53947B24AE1761FB7653E7C72881C125303E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:3d:f9:e4:d7:6b:c2:d6:51:3c:07:ef:a6:
42:25:98:19:f2:2c:b9:86:22:11:97:4d:2d:cc:fa:
2a:4e:72:cb:1d:f6:6e:79:51:44:45:7c:ee:63:76:
b9:f1:44:07:43:a3:d7:f2:ba:95:7c:83:fd:8b:9e:
19:f3:1a:4a:07:3a:ed:95:ac:b3:d3:23:0b:0f:23:
3f:c8:31:8a:c5:fa:65:ad:25:8a:14:59:ef:f6:d4:
f8:63:21:64:c1:af:f5:73:79:2a:96:50:a4:66:02:
98:4d:8a:a7:47:2b:f9:b7:5a:15:08:68:92:16:f0:
40:30:e0:eb:5a:eb:74:11:9d:74:19:1e:25:7b:1d:
c0:bf:b2:7f:53:60:23:f0:f9:a2:bc:42:ad:ed:3c:
cc:ce:23:7c:a5:9d:ef:14:64:9e:2b:94:44:68:43:
d1:58:c2:ad:ab:8f:37:ca:e4:38:d8:71:8f:8f:cc:
ae:b4:58:50:30:fe:1a:a8:b2:2a:b0:79:60:9d:9c:
be:b1:0f:7e:ec:75:84:9d:06:44:eb:ae:76:c8:ae:
ef:a6:fe:ed:35:eb:cf:93:6e:e0:b8:96:2b:96:0d:
18:bb:d3:22:4b:ee:6b:b3:76:0c:69:e0:7d:7d:e2:
fb:c3:53:55:b4:25:73:aa:87:03:78:c2:c5:74:88:
20:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:94:7B:24:AE:17:61:FB:76:53:E7:C7:28:81:C1:25:30:3E:24
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bVOUeySuF2H7dlPnxyiBwSUwPiQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
30:68:26:1b:11:e7:5e:48:53:c2:4f:56:65:df:d8:ff:e5:db:
01:6b:69:b2:f9:5a:30:88:22:f2:4d:3b:25:d7:56:0e:89:68:
3a:a0:b3:d4:7f:35:c1:e1:c6:22:12:5d:f6:e0:94:36:d3:ac:
35:f3:2d:0d:a4:d5:b3:77:d5:4a:ce:fe:2a:a6:f8:eb:2b:2e:
d8:c8:88:c3:37:41:5f:b7:6d:c7:35:46:97:a7:05:e3:ae:11:
8e:72:df:e2:36:46:0f:1b:9a:2b:64:58:f0:b9:ae:05:f7:32:
46:31:ce:f7:ec:23:c2:dc:0e:40:d0:3e:7f:76:15:6d:73:c5:
08:1a:a1:8f:3a:68:b2:0a:e1:5d:e0:8e:9a:1c:6f:84:42:28:
80:69:a3:38:1b:81:7d:5b:f2:37:c7:5c:66:a2:1e:8f:e1:a0:
f8:ac:91:2c:e9:0a:41:c8:bb:c2:99:f3:64:c0:27:74:2b:cd:
f8:31:38:33:4d:be:73:58:64:84:ec:19:0b:a6:d1:b4:5e:18:
ff:9b:fd:53:0e:da:c3:9e:c0:56:27:da:f6:4d:21:12:bc:ed:
01:6a:e9:ee:b5:c5:4f:02:e4:d4:ed:e4:51:37:c8:f7:39:f9:
83:cc:c8:16:7f:5a:44:e1:75:b2:d3:c6:d7:d7:d3:40:ce:f1:
81:16:e3:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:34 2025 by rpki-client