Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/eYgAfhbERjMToYfpsSgDqf5fuDI.roa
File: eYgAfhbERjMToYfpsSgDqf5fuDI.roa (raw, json)
Hash identifier: KQR34nOL3gV2dCYPnlDvAgpHkgsfrC5OSkYf3bVyLz0=
Subject key identifier: 79:88:00:7E:16:C4:46:33:13:A1:87:E9:B1:28:03:A9:FE:5F:B8:32
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 04DA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eYgAfhbERjMToYfpsSgDqf5fuDI.roa
Signing time: Thu 16 Jan 2025 11:54:41 +0000
ROA not before: Thu 16 Jan 2025 11:54:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1242 (0x4da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 16 11:54:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7988007E16C4463313A187E9B12803A9FE5FB832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:35:08:1a:2e:01:7e:59:1f:11:76:5b:83:75:
7f:7c:8a:62:32:97:14:16:92:33:f9:36:64:8e:28:
92:46:d4:11:64:23:55:2c:11:83:bc:ff:7d:ec:a4:
18:fc:1f:c1:dc:49:94:2e:76:60:b7:e7:93:04:88:
82:4b:1d:c0:8d:b4:1e:5d:ae:e4:de:ff:85:29:f9:
50:72:aa:31:65:ac:e2:09:36:35:56:49:e1:6e:d0:
a2:91:28:31:b4:d6:eb:b2:c6:38:78:68:d5:9d:17:
03:e7:72:e0:29:99:3a:f1:5e:90:5c:b2:3c:6c:8c:
03:27:89:b4:33:0a:45:e1:53:e8:3e:8c:28:59:4f:
36:f9:f9:20:5a:00:07:3b:0d:e0:98:4c:cb:2b:86:
05:12:22:bf:4e:40:2a:09:eb:35:6f:a6:42:fc:fc:
00:1d:2c:39:0c:c4:18:1f:23:de:e0:1d:64:ad:55:
57:7e:88:f9:e0:09:20:1f:cd:81:55:a0:a1:b2:dd:
7c:8e:ec:d0:4f:81:30:24:a2:08:f6:d2:a9:63:f4:
e3:47:2a:60:08:2f:04:27:51:57:5d:e5:be:61:21:
1e:a6:78:19:e6:4f:5a:5e:89:38:f3:e9:9a:10:09:
bb:57:02:76:d3:32:9b:65:cf:31:8c:df:69:86:77:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:00:7E:16:C4:46:33:13:A1:87:E9:B1:28:03:A9:FE:5F:B8:32
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eYgAfhbERjMToYfpsSgDqf5fuDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
06:c0:44:90:e9:37:e6:cc:4e:bc:f7:c6:33:bd:76:93:94:62:
53:d6:c7:59:70:8e:88:f5:e0:5b:45:df:ea:0a:6d:86:17:b2:
82:13:90:3f:2f:1a:b8:5b:fd:d6:f4:85:32:68:d2:9e:52:2c:
70:67:20:1a:70:e1:c8:7c:6c:87:5b:ff:96:7a:b8:67:cd:9a:
50:fb:e2:cb:73:61:da:3f:9f:16:4c:f8:8c:aa:9f:71:e5:d4:
88:07:dc:74:5a:9d:03:20:20:95:26:65:fc:a3:d1:43:62:46:
eb:5f:0c:de:dd:08:8e:a7:86:9d:19:e0:2a:09:f7:aa:d8:fb:
6f:e7:b2:78:93:89:31:45:ea:c0:71:24:3b:61:78:b1:cf:1c:
fb:f1:dc:6d:7a:23:2c:9f:ad:89:2f:db:39:4c:e9:40:52:f6:
95:bf:1c:25:83:ba:60:72:68:fa:1a:3b:91:ff:92:40:39:55:
e6:b9:c1:b2:c5:4f:36:86:41:81:bb:04:ba:0a:fe:ff:d2:b9:
5e:0b:da:f6:80:be:0c:38:67:3f:7d:08:6c:35:2b:b6:24:f0:
f6:41:7b:10:95:89:fa:5b:66:f0:ab:86:3e:cc:c2:33:ff:fc:
59:0f:39:fb:fa:35:dd:66:ce:3a:b8:66:03:04:dd:26:c9:b7:
f1:5e:85:8e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:54 2025 by rpki-client