Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/nRJ5leKxMDaUMzRh3fz4O08VnqI.roa
File: nRJ5leKxMDaUMzRh3fz4O08VnqI.roa (raw, json)
Hash identifier: vXpwDl8jNlEo84K2MqxNUekg2yh/wubPu7a21VEPKQI=
Subject key identifier: 9D:12:79:95:E2:B1:30:36:94:33:34:61:DD:FC:F8:3B:4F:15:9E:A2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 070E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/nRJ5leKxMDaUMzRh3fz4O08VnqI.roa
Signing time: Wed 22 Jan 2025 08:56:24 +0000
ROA not before: Wed 22 Jan 2025 08:56:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1806 (0x70e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 08:56:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9D127995E2B1303694333461DDFCF83B4F159EA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:5c:e6:1d:48:31:7f:2a:d8:d6:8f:2b:4d:
0a:e6:2b:dc:b5:e3:34:ba:af:ec:dc:bd:12:57:fd:
56:40:dd:7c:59:fa:cc:5a:d5:58:97:cd:d8:46:e1:
b2:15:4d:ce:f5:60:d5:0b:fc:a4:a1:b3:98:58:9c:
99:62:ae:bb:4a:b6:46:82:ef:54:72:d7:41:1b:13:
51:20:36:9f:df:f5:bb:86:30:82:5f:c9:61:d8:6d:
f4:1c:a6:b0:c6:19:ce:e4:b3:29:2d:9f:88:00:52:
a9:3f:bc:2e:3c:99:ac:95:85:e5:5e:21:f5:90:26:
ca:7d:ec:1e:9a:1e:ae:53:49:51:97:5c:6c:31:37:
be:dc:f1:9d:db:d3:fb:53:0f:f3:2e:fc:bb:8a:fc:
cd:c0:23:67:20:86:de:aa:16:b1:35:63:b7:d5:a4:
b6:35:27:34:69:44:85:c9:d9:1e:2b:d3:ff:61:3c:
83:83:a0:e5:2e:de:ca:06:84:f6:c5:e4:26:77:9d:
ad:4c:97:db:f9:96:d4:aa:a1:03:14:0c:90:cd:e3:
fc:69:c7:d3:a4:3b:15:3b:f8:e4:e4:2f:35:9c:c9:
f2:e2:b2:0f:a4:42:d2:b3:57:f5:dc:71:af:50:5f:
4c:4a:05:df:5d:15:5f:78:75:55:c5:3e:6c:46:6b:
2a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:79:95:E2:B1:30:36:94:33:34:61:DD:FC:F8:3B:4F:15:9E:A2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/nRJ5leKxMDaUMzRh3fz4O08VnqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
85:51:bb:a8:f9:41:13:c1:38:94:a2:2b:da:f1:01:a0:c1:13:
c8:4d:d5:6e:f3:ce:f9:32:a0:b9:ea:0b:f0:2f:ec:6e:d5:67:
6a:ab:96:8a:9f:38:44:38:98:47:f8:b3:2d:3a:3a:d0:ab:be:
0d:cb:5b:bc:2b:60:cc:c7:65:5f:64:ac:ec:2f:4f:f9:82:2d:
bd:30:25:7e:3f:3d:9d:c9:d6:14:7f:b2:5f:97:bb:b0:82:64:
09:4b:66:9d:83:5f:90:4d:61:59:c4:00:40:eb:19:b6:fa:4a:
28:de:08:2b:c7:46:86:04:6a:1f:ac:55:0c:04:a0:e8:af:94:
85:64:99:58:dd:df:a2:7b:7d:1f:70:63:71:e5:b0:0f:eb:1c:
10:82:f7:e4:58:fd:30:90:d6:f6:fb:81:3c:c5:7f:b9:d6:57:
12:3d:57:79:18:98:c6:d7:e9:39:e9:f1:bc:b4:06:ae:45:c0:
1a:a7:71:ca:0e:7d:c2:51:53:78:f7:f4:75:42:f0:34:ef:1c:
53:73:39:47:bd:e3:c6:eb:0f:dd:b8:68:44:c3:66:bf:87:10:
56:4b:94:20:b6:3b:77:3d:86:b7:5f:ad:93:0b:7c:74:ad:8b:
09:ae:f8:58:0b:ec:87:01:b1:62:3b:6a:74:28:1f:8a:80:99:
f6:9f:17:52
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:45 2025 by rpki-client