Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/eUJfHV-mRyMtKUQFsFeXeLGnKq8.roa
File: eUJfHV-mRyMtKUQFsFeXeLGnKq8.roa (raw, json)
Hash identifier: mmjs2J96SvRrDWi4RnDAUU2M6tHry6e3JuQQgvdlR4E=
Subject key identifier: 79:42:5F:1D:5F:A6:47:23:2D:29:44:05:B0:57:97:78:B1:A7:2A:AF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08C4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eUJfHV-mRyMtKUQFsFeXeLGnKq8.roa
Signing time: Sun 26 Jan 2025 22:25:17 +0000
ROA not before: Sun 26 Jan 2025 22:25:17 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2244 (0x8c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 22:25:17 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=79425F1D5FA647232D294405B0579778B1A72AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:04:95:16:f6:2d:7f:69:78:30:d1:d6:5a:db:
6f:83:8e:35:9e:91:b4:26:53:4a:59:dd:5a:c6:99:
f6:c7:62:c5:c3:1d:c4:ef:3e:35:fc:ce:e9:73:9f:
03:30:37:91:f2:7f:6f:cb:7a:57:5d:27:a8:9a:0e:
31:91:31:48:d6:0d:59:2a:a0:b3:ad:a4:99:e1:d1:
a0:98:00:27:66:67:99:0c:cf:25:49:5b:c8:4f:1d:
b6:df:eb:60:43:0c:a9:e8:bf:77:01:9c:a2:b2:c6:
d8:fa:66:4b:b0:6b:fa:0a:ff:49:a4:85:99:d7:0d:
0c:88:39:c4:e0:a3:c3:f5:68:1c:d5:84:2c:bb:93:
6a:d7:3a:d6:00:af:98:cb:c0:24:28:c7:4f:3a:34:
aa:58:22:c8:26:e4:b0:61:b8:a2:89:e0:55:11:7f:
2c:78:23:82:2e:0b:3b:ab:1e:4b:11:50:23:01:0d:
22:24:55:4e:3f:5e:47:d4:15:b3:5f:6a:2f:2d:f8:
88:45:d7:f9:70:6f:d0:21:c7:62:b1:31:de:b6:22:
e7:f6:22:34:79:b1:13:1e:54:f0:4d:4f:0d:07:fb:
7e:fe:6e:34:90:68:98:96:41:c9:47:63:cd:01:95:
4f:4d:e3:7e:6d:2c:7b:39:77:ca:f6:ed:b9:f9:f9:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:5F:1D:5F:A6:47:23:2D:29:44:05:B0:57:97:78:B1:A7:2A:AF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eUJfHV-mRyMtKUQFsFeXeLGnKq8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
02:fd:cb:2a:74:50:2d:76:90:18:17:e6:1e:26:dc:69:5d:24:
77:84:23:74:0c:3e:65:d7:2e:93:ea:2a:6e:22:96:ad:6c:ec:
c5:d9:0c:32:75:7f:b0:c4:09:89:55:69:89:c6:b6:44:87:7e:
64:4b:36:ff:99:03:e2:d8:d7:e0:8b:db:0d:79:d9:61:a6:81:
56:20:b0:82:c1:d2:9c:c9:e9:5f:14:6e:5e:93:dd:85:6f:9a:
71:bd:bb:6d:de:2d:2d:69:bf:43:81:f2:63:a5:80:b7:14:e1:
2d:12:7e:fb:29:89:0f:91:e4:68:b0:89:78:51:5f:28:02:eb:
63:43:5a:b4:16:f6:be:de:44:7e:24:44:aa:d2:f5:f4:2d:62:
ec:94:b2:19:45:09:38:67:85:a1:42:2d:5d:21:f1:fb:c4:94:
67:27:50:8b:5a:dd:a1:2c:e1:79:3e:13:12:5c:2f:50:d4:61:
87:52:f4:65:b8:77:07:fd:23:9e:ea:66:2f:57:af:49:b3:56:
18:e1:54:dd:7c:84:01:cc:dc:d0:e1:6f:72:84:f8:7c:1c:c6:
83:c6:ca:a9:3f:09:41:2f:d5:7e:58:dd:77:df:a5:08:e8:a1:
20:bf:a5:23:1e:0c:de:86:25:cb:7e:e9:65:5a:77:1d:c6:8e:
05:d0:47:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:08 2025 by rpki-client