Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/k0Q7iojqm7JXWjqQIjGrmmDL6Ho.roa
File: k0Q7iojqm7JXWjqQIjGrmmDL6Ho.roa (raw, json)
Hash identifier: 9sm33SI+ULi5QORMrOyIy5rAiehUbS8FZBVFy5M+CzA=
Subject key identifier: 93:44:3B:8A:88:EA:9B:B2:57:5A:3A:90:22:31:AB:9A:60:CB:E8:7A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C82
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/k0Q7iojqm7JXWjqQIjGrmmDL6Ho.roa
Signing time: Wed 05 Feb 2025 21:55:44 +0000
ROA not before: Wed 05 Feb 2025 21:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3202 (0xc82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 21:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=93443B8A88EA9BB2575A3A902231AB9A60CBE87A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:3f:46:d1:f2:77:06:5f:17:83:3c:db:a7:
9f:05:62:17:ff:c9:b9:c6:c3:72:96:c6:85:3c:5a:
47:f6:19:0d:31:e9:a9:d1:31:b1:d3:19:77:c2:04:
48:1a:ac:0c:88:15:62:8a:da:2f:58:65:4f:a9:5c:
0e:a9:ee:ed:2d:32:e3:19:45:c0:e4:54:0c:75:34:
00:fc:f8:e1:29:9a:dc:01:bd:41:85:a9:ab:73:7e:
63:e1:45:84:7c:31:a7:32:2a:2c:72:75:65:c6:66:
d4:05:91:70:03:b8:aa:d1:93:cf:e5:90:4e:fb:85:
fa:09:4a:91:3f:b6:8e:c3:67:a2:d9:46:d6:ce:b2:
28:54:d8:0c:28:27:e1:40:91:13:07:5d:f6:8d:23:
62:0d:2a:fb:7f:5b:ab:78:22:59:d9:9f:d0:46:a1:
e9:f9:8f:28:ef:ad:96:5d:b3:5f:71:0c:77:1d:28:
05:72:91:07:f4:e4:b9:93:dd:a6:62:be:47:c9:a6:
69:3a:3f:27:ef:c2:e8:ff:6e:37:db:47:39:40:cb:
dc:13:ea:c1:5b:d5:c7:6b:b1:7c:e3:06:7d:d4:81:
b6:91:a3:fe:5f:79:f9:0f:11:11:ce:d6:66:9c:72:
b0:94:d2:d8:17:28:50:ff:56:23:d4:be:81:a6:24:
aa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:44:3B:8A:88:EA:9B:B2:57:5A:3A:90:22:31:AB:9A:60:CB:E8:7A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/k0Q7iojqm7JXWjqQIjGrmmDL6Ho.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:e9:14:f0:84:3d:aa:0d:77:6b:53:e6:ee:29:96:10:98:df:
8d:6c:db:e9:8b:f1:63:0e:c8:6f:a2:2d:56:01:ed:42:08:53:
6f:23:b2:11:ba:20:ca:cf:56:27:3f:2c:6f:4b:d4:86:e6:d5:
be:fc:42:f1:69:77:21:f3:09:4a:25:fd:14:ad:09:5d:38:78:
2f:87:ff:a9:d2:4f:05:b2:54:8e:86:7c:8e:56:1d:31:4e:ea:
5c:b2:08:c9:4a:6b:a4:de:d5:3b:f6:1e:6d:0b:10:cf:7c:65:
86:ba:10:e8:a4:94:0b:7a:a8:a0:25:98:f4:4f:bc:72:36:1e:
5d:2a:16:40:80:a5:06:cb:43:9d:4b:43:73:59:e5:39:50:08:
c4:24:b5:2d:92:80:d8:56:f5:b8:ce:f5:ca:cb:38:da:bc:a3:
eb:f1:64:d8:ac:3d:97:74:ed:57:b0:a1:1e:b0:d0:9c:78:f0:
95:2c:38:bd:eb:cf:5b:5b:1d:f4:02:18:ba:5a:6b:cb:74:42:
cf:1c:72:fc:25:cb:de:2a:ee:47:8a:8b:86:f1:4f:e7:59:1d:
ba:25:7b:b4:ac:d4:84:8f:30:eb:64:2f:76:41:ac:c9:12:dc:
30:a8:84:af:be:c2:6c:6b:4d:42:2d:32:eb:8b:ef:41:2a:36:
9e:85:73:6f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:19 2025 by rpki-client