Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/hFvPpAUNFU1Lrsl88_SZh-w7sGg.roa
File: hFvPpAUNFU1Lrsl88_SZh-w7sGg.roa (raw, json)
Hash identifier: gW1flZWM6G+8YhpYeHofoLSWNJbyRkk1bIHhb8PUbE8=
Subject key identifier: 84:5B:CF:A4:05:0D:15:4D:4B:AE:C9:7C:F3:F4:99:87:EC:3B:B0:68
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0EA5
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hFvPpAUNFU1Lrsl88_SZh-w7sGg.roa
Signing time: Mon 10 Mar 2025 15:36:13 +0000
ROA not before: Mon 10 Mar 2025 15:36:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.80.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3749 (0xea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Mar 10 15:36:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=845BCFA4050D154D4BAEC97CF3F49987EC3BB068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:c8:fd:e9:fa:c1:4b:43:1f:4c:c2:99:b4:
0e:4e:99:72:01:ed:d2:bc:b7:3d:c8:48:1a:c4:1b:
bd:e4:e0:47:a4:05:06:2c:fc:d3:bf:c2:0f:15:45:
56:53:a5:75:75:8f:09:19:19:4c:e0:a2:6a:00:17:
e1:80:c6:5b:67:3f:88:52:63:da:30:c4:65:c2:b6:
4a:cf:ce:bd:d0:e5:80:fe:49:90:98:37:53:40:80:
38:ef:cf:b2:22:cf:12:55:ba:dd:0d:81:d0:08:6a:
3f:5e:d8:ac:be:90:bf:52:d5:90:7b:66:bc:97:48:
fd:f7:98:e9:9d:40:e9:37:b2:05:a1:cd:72:28:2e:
07:81:bf:e2:5a:f5:68:f4:d2:45:59:34:cd:69:f0:
c2:45:d3:9d:57:c9:c1:17:b9:48:11:5b:9a:51:a1:
d3:ef:98:4f:91:d3:d0:fb:7f:f6:c1:dd:51:06:c3:
2d:b5:45:5e:98:3c:a3:f2:5c:5b:a7:e8:d7:19:b2:
64:bc:84:c2:3f:8a:64:a2:d4:88:a6:3c:17:7c:60:
07:da:f2:4b:d9:8f:de:56:2b:bc:27:ff:d8:fc:25:
c3:e1:18:08:d1:df:9b:0b:f6:81:26:6f:13:7b:2c:
7b:5c:1d:dd:b4:e6:3f:dc:aa:4e:24:6d:bf:92:43:
b5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5B:CF:A4:05:0D:15:4D:4B:AE:C9:7C:F3:F4:99:87:EC:3B:B0:68
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/hFvPpAUNFU1Lrsl88_SZh-w7sGg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.80.0/21
Signature Algorithm: sha256WithRSAEncryption
af:62:30:a7:91:9c:09:ed:98:e9:3b:7b:5a:12:fe:0f:0d:bf:
2b:a5:49:4b:59:a2:9e:e5:14:ec:b7:64:ad:5b:ba:fa:c1:9c:
af:4a:ac:96:f6:64:d7:dd:a9:de:34:2b:d6:6e:ed:e2:0f:f6:
e3:26:0c:22:fc:36:2e:2f:95:eb:4f:04:ef:c0:23:a6:49:d6:
d9:bb:a8:9c:da:d5:97:08:86:43:ae:12:16:99:4a:38:ab:6c:
9d:3f:74:1e:5b:8a:e9:2f:3b:ac:da:cb:05:0c:1d:d1:b9:c8:
79:49:6b:38:da:38:85:d3:a4:db:e9:01:e3:e1:39:1c:7d:4a:
d5:bb:bb:f4:f2:15:cc:0d:6c:6a:aa:00:a3:be:b8:51:e5:0e:
2d:5e:02:30:74:97:a9:80:83:80:d5:23:ff:ec:1a:cb:af:1b:
04:44:fa:49:72:1d:a9:a0:5b:24:7b:db:a2:37:40:a1:01:b4:
f4:12:48:35:65:a7:f1:45:cc:a9:b6:d0:93:d6:59:1a:53:33:
20:20:74:89:b7:1e:c7:62:87:68:b7:75:36:48:a1:b2:cc:f8:
10:eb:78:d7:3b:d9:89:14:80:63:e1:37:5b:4f:43:20:64:98:
a6:02:6f:ef:0b:d6:2c:37:5f:e1:9e:36:9a:f5:86:57:8f:06:
24:40:82:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:31 2025 by rpki-client