Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/j7Q5jSKsrMio8p1xHj6oQDNVJAw.roa
File: j7Q5jSKsrMio8p1xHj6oQDNVJAw.roa (raw, json)
Hash identifier: AK3vBDTraENfRldfDpG/H6jOgfrl7nFiuHm5kFgTC8M=
Subject key identifier: 8F:B4:39:8D:22:AC:AC:C8:A8:F2:9D:71:1E:3E:A8:40:33:55:24:0C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0652
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j7Q5jSKsrMio8p1xHj6oQDNVJAw.roa
Signing time: Mon 20 Jan 2025 09:54:54 +0000
ROA not before: Mon 20 Jan 2025 09:54:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1618 (0x652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 09:54:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8FB4398D22ACACC8A8F29D711E3EA8403355240C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:61:a9:71:ca:2b:1b:4b:31:0d:1b:93:a0:4e:
d4:ac:e7:c0:ba:e7:b2:77:5b:94:2f:e7:bd:77:8f:
cb:e6:07:cc:95:68:7f:b9:e0:03:3d:07:a2:36:4d:
de:fe:ce:b0:75:3f:91:ac:50:24:52:ba:9d:18:d1:
77:8d:1a:14:fb:f7:9b:fe:37:ba:6f:45:5e:18:92:
2d:4c:50:ef:7c:85:07:9f:44:51:4c:06:3e:82:bd:
11:aa:a1:92:e8:62:27:da:fa:8a:88:a9:b4:82:e2:
f0:78:b9:59:4b:97:e4:68:7a:9d:85:2c:95:37:7c:
2e:1d:39:2e:c3:58:26:35:83:e1:45:5a:21:7d:4f:
a3:37:76:60:e7:a0:17:5a:aa:2e:8e:1d:2d:17:8e:
f4:49:4d:5e:82:8a:34:2a:57:0a:09:d4:6e:56:66:
e1:1a:08:63:89:4c:4e:94:32:e4:ff:cc:69:8b:bf:
9b:96:d6:b7:7e:0e:fc:db:4e:11:d8:52:26:2f:dc:
78:12:8d:13:2b:44:de:b8:b7:7f:5f:c9:ac:ae:7c:
fe:5a:8a:b8:f3:4e:d6:6f:23:19:4d:02:ad:78:d6:
6e:a2:e8:1a:04:32:72:0f:c7:b1:0b:11:4a:bd:9f:
aa:f0:84:5e:75:08:84:f6:ea:64:04:1a:5d:fe:6e:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B4:39:8D:22:AC:AC:C8:A8:F2:9D:71:1E:3E:A8:40:33:55:24:0C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j7Q5jSKsrMio8p1xHj6oQDNVJAw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:ed:2d:3d:f7:fa:6f:fb:82:0b:83:24:08:ac:a5:13:f5:fd:
16:62:20:55:60:a2:88:08:e4:c0:12:ce:f7:dc:eb:8a:b0:1a:
88:7f:5d:e9:6c:7a:40:78:12:88:e8:ff:60:99:61:a0:a8:05:
a1:20:cf:65:32:a0:10:6f:1e:f1:14:4f:25:17:2f:f0:1f:6c:
c2:29:8c:1b:89:04:d1:fa:86:1a:9a:3b:9a:fa:73:fd:ac:5d:
dd:23:9b:c2:5e:be:ac:f8:f0:49:13:55:79:27:f5:22:c4:06:
62:9b:fc:01:05:1e:3c:b0:8d:13:f1:0b:2a:fb:ad:19:e1:b1:
46:2a:13:30:f3:33:ca:62:01:fc:6d:4b:91:0e:ac:81:f5:a8:
e2:fb:2b:9d:f6:60:f2:06:37:f2:3b:de:47:6b:b3:55:31:b4:
f7:3d:5f:f4:bd:a3:21:6b:28:4f:67:a3:8b:67:fb:d3:ec:16:
a1:5f:a8:bb:65:e9:79:bd:34:61:17:0d:8b:7c:57:6a:15:e9:
6e:6f:66:8f:ad:b8:13:c4:6a:15:9a:0c:1a:4a:9b:d1:46:9e:
16:65:20:76:d3:2c:f0:6f:1e:c6:8f:a3:bb:67:7a:e2:a1:07:
2b:ff:92:d8:3a:17:a7:d5:13:68:81:ce:8b:54:d1:dc:87:9c:
d8:2e:15:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:08 2025 by rpki-client