Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/cWzE5cmSKwOdL3p7-gJgm08qZvs.roa
File: cWzE5cmSKwOdL3p7-gJgm08qZvs.roa (raw, json)
Hash identifier: LCF+JG/dvmfnKNlsZCUadn5kidy17k8TVK4LFwXZiFQ=
Subject key identifier: 71:6C:C4:E5:C9:92:2B:03:9D:2F:7A:7B:FA:02:60:9B:4F:2A:66:FB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A04
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cWzE5cmSKwOdL3p7-gJgm08qZvs.roa
Signing time: Thu 30 Jan 2025 06:25:29 +0000
ROA not before: Thu 30 Jan 2025 06:25:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2564 (0xa04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 06:25:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=716CC4E5C9922B039D2F7A7BFA02609B4F2A66FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:d6:2d:13:42:4d:97:3c:aa:4f:0d:2b:a3:
67:0f:d1:43:d8:bf:67:bb:61:d6:6e:54:23:4a:46:
8a:58:54:5b:7a:6e:c6:8d:08:19:ea:cb:96:4f:ab:
e5:da:f2:12:fe:b4:03:83:79:82:bb:5a:68:cb:45:
76:77:be:be:51:0b:bb:5e:4e:f3:0c:0d:72:f7:08:
e7:73:41:9d:42:eb:4f:86:98:10:38:cc:7c:22:f3:
ca:dd:f3:23:7f:32:d4:e3:ec:90:a8:92:e4:ce:0a:
9d:c7:12:ff:25:53:af:9e:b9:f0:f7:c7:9b:b7:f7:
1a:03:2d:0f:98:ea:b8:d6:9e:f2:ab:b2:58:ac:7b:
04:26:8b:16:fd:37:3e:08:e1:8c:14:96:47:9d:5b:
67:7b:01:41:f2:79:f9:a7:50:66:fd:3b:1c:e6:97:
a6:ad:02:b7:f1:e1:68:03:d1:45:47:e9:bc:46:2a:
8b:16:1d:62:a3:46:99:57:f0:82:0d:1f:2c:38:78:
d9:3f:00:f4:a1:4f:01:f0:de:7e:7f:5b:d0:5d:41:
a3:ce:ce:28:95:28:b4:4c:ba:b7:cf:6d:86:47:09:
9f:06:25:34:ca:96:e4:60:bf:c9:07:f7:81:5f:0c:
2b:ef:8d:24:31:e6:ea:c4:84:66:03:ff:20:ed:67:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:6C:C4:E5:C9:92:2B:03:9D:2F:7A:7B:FA:02:60:9B:4F:2A:66:FB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cWzE5cmSKwOdL3p7-gJgm08qZvs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:0a:47:a1:c8:37:fe:33:da:f9:a9:22:08:83:3f:01:01:5b:
af:b4:34:14:fb:0d:9c:f7:c5:62:7d:94:26:40:dd:00:29:de:
ea:6f:74:61:1c:b4:05:ba:86:4d:19:53:fb:7c:50:2b:5e:51:
92:83:3b:81:21:97:30:7b:96:6b:ca:ca:e9:8b:ee:95:9e:ca:
f6:0b:28:78:01:31:71:e7:4c:d6:33:8f:2d:10:f0:0d:74:6d:
5a:9f:41:ad:b4:24:3e:42:b3:04:1c:4a:96:5d:34:8f:ad:52:
96:39:5f:09:b4:90:e2:e3:f7:0b:96:22:77:99:15:27:c0:2e:
1d:a4:3f:f4:1c:06:27:5f:b4:09:d9:8a:70:dc:77:52:e1:5c:
66:a9:43:8c:db:1a:3a:bc:38:e3:6d:2c:c6:87:03:9f:58:43:
23:d9:3c:b4:b7:e1:da:00:44:c3:28:2c:83:35:02:c5:e5:a6:
fa:d4:28:07:8a:e4:c8:e5:dd:1a:17:a0:e2:23:56:89:dc:d3:
89:57:6e:d5:70:45:bd:c1:17:d9:f0:2a:18:04:6c:87:d5:22:
19:77:87:32:21:92:65:d1:58:ed:66:e7:c1:b6:c6:fb:83:38:
1c:e8:bf:54:f9:ac:32:56:6f:48:fe:ca:c1:8c:9c:8a:4c:ad:
77:03:81:a3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:08 2025 by rpki-client