Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/l4aBoWpnq6lRQbSPb8QNrG15j4k.roa
File: l4aBoWpnq6lRQbSPb8QNrG15j4k.roa (raw, json)
Hash identifier: Skp0ItgD/ig7/jwM0poPQ3/TSE0NkYhtylHZXJx3yKA=
Subject key identifier: 97:86:81:A1:6A:67:AB:A9:51:41:B4:8F:6F:C4:0D:AC:6D:79:8F:89
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BEC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/l4aBoWpnq6lRQbSPb8QNrG15j4k.roa
Signing time: Tue 04 Feb 2025 08:25:43 +0000
ROA not before: Tue 04 Feb 2025 08:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3052 (0xbec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 08:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=978681A16A67ABA95141B48F6FC40DAC6D798F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:a2:cf:86:3d:81:f9:ed:fe:02:bd:6f:11:
fb:9b:da:61:5b:b8:82:62:4e:a2:06:b5:29:bf:38:
4e:9c:bb:5f:76:b6:51:93:24:1f:ef:86:9b:df:7f:
87:c6:4f:55:15:54:b2:bd:41:c0:dc:44:bb:38:82:
cc:db:27:95:4e:1f:5a:6e:9e:39:e1:06:d8:31:a9:
02:87:40:68:41:93:d2:77:55:35:27:60:44:09:80:
d0:81:c0:fe:c7:be:2d:39:af:b9:3e:76:ab:fe:ee:
96:f6:f4:88:b7:b5:5d:00:ae:c8:b3:b8:4a:5f:bd:
64:56:a8:47:b5:c6:9c:e0:95:09:a9:25:3b:0c:8c:
0d:a0:d0:c0:29:e1:0c:d3:bd:2f:cb:5d:3b:8d:05:
ce:6c:6c:f4:1d:7a:39:4b:b8:1c:83:1c:5d:9c:37:
9d:94:95:6d:72:0e:71:b6:cd:1c:74:73:06:e5:c7:
8d:72:99:68:04:53:59:6a:06:d4:ba:c6:0d:ed:22:
ac:6f:62:b1:54:9d:34:cb:18:29:12:75:a7:2f:12:
17:b8:04:09:d3:39:c3:74:fe:1a:52:5c:94:76:f0:
91:a3:24:11:dd:3f:cf:86:56:e1:3f:08:35:2c:2a:
c2:c4:07:3f:2b:db:0c:dc:8a:a4:d4:fb:42:f1:f7:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:81:A1:6A:67:AB:A9:51:41:B4:8F:6F:C4:0D:AC:6D:79:8F:89
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/l4aBoWpnq6lRQbSPb8QNrG15j4k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
59:2b:23:7c:d3:a7:31:f8:42:8c:b7:74:f2:dc:2b:23:a6:f1:
3d:3a:ba:6c:98:f8:eb:ba:6d:ee:80:37:7c:13:da:5f:b8:f2:
e0:06:22:6e:ee:39:8f:aa:fe:78:fb:81:f4:9a:cf:7b:4c:41:
93:97:3f:24:52:4a:97:2e:77:67:88:79:19:3b:06:96:27:f4:
4e:ad:25:19:bd:3b:1e:5d:d0:4d:7f:0f:cd:28:dd:01:82:da:
ee:85:17:5d:c4:e5:9b:c2:e5:eb:44:f6:71:06:95:d5:f9:46:
be:90:2d:2b:9d:11:8e:1c:26:06:cb:23:cb:68:80:0e:5d:10:
60:65:a3:5f:20:ae:65:6e:8f:d4:b4:c3:cd:d1:0c:64:51:1b:
ee:9c:8f:46:8b:75:e8:54:70:01:c6:93:22:02:6f:2f:04:f9:
ce:c6:d0:a8:cd:2e:67:ad:75:78:c3:79:c7:0a:72:fc:87:41:
bd:8f:2b:04:f3:4a:c9:27:d8:09:d1:2c:25:ac:66:21:71:55:
48:66:b1:33:44:9c:96:bf:5d:1d:ea:0c:54:7c:ee:91:54:40:
05:21:4c:e7:cf:47:2b:05:37:f6:dd:61:dd:5e:47:4e:a3:b6:
cd:b9:e4:2d:10:d3:a3:4b:f6:41:fc:eb:d2:45:77:2d:28:36:
df:85:49:ee
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:41:57 2025 by rpki-client