Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/oHUkUl_i1Ccw-NtC65wK7LX-nXM.roa
File: oHUkUl_i1Ccw-NtC65wK7LX-nXM.roa (raw, json)
Hash identifier: i3NW1dqti05Fnvu2jzY4SiOuBm5HVhF03A0KiH9VkLQ=
Subject key identifier: A0:75:24:52:5F:E2:D4:27:30:F8:DB:42:EB:9C:0A:EC:B5:FE:9D:73
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C38
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/oHUkUl_i1Ccw-NtC65wK7LX-nXM.roa
Signing time: Wed 05 Feb 2025 03:25:43 +0000
ROA not before: Wed 05 Feb 2025 03:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3128 (0xc38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 03:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A07524525FE2D42730F8DB42EB9C0AECB5FE9D73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:d0:07:ee:ec:ab:e3:d8:55:09:2e:75:22:
e8:ae:e0:03:e6:54:69:1c:ea:e2:db:d3:eb:29:bd:
73:b0:3c:30:49:18:2e:d5:9c:9d:f9:33:62:6a:11:
6c:7a:23:60:87:34:14:0f:26:68:f3:25:cd:c8:86:
22:99:f1:96:aa:92:c7:ff:b8:35:ff:15:88:75:5f:
76:f5:83:44:cb:59:7f:26:8c:8b:0e:d7:1b:79:45:
d9:5a:46:39:5c:c5:59:b7:a4:da:56:9b:5c:13:76:
22:04:66:1b:c9:71:0c:7c:44:80:81:98:61:ef:4b:
c2:a2:a7:26:96:99:07:f6:e0:f5:eb:51:21:4c:79:
1f:21:62:f2:e5:67:46:c6:fb:6e:b5:f1:91:82:df:
fc:f0:89:d7:e4:2f:d5:8f:ad:f3:48:31:69:23:9f:
60:26:32:cd:34:e4:b0:ec:20:0c:b3:a0:ed:71:56:
6d:56:04:2c:c5:0a:a5:1c:9b:52:f7:20:1f:05:82:
0e:53:ec:e0:d3:18:43:c8:e6:dd:e4:d9:29:b4:1a:
69:e2:af:b6:66:7e:b6:fe:5b:02:69:ee:4b:65:0b:
7b:90:72:10:4b:f9:95:8a:29:8f:bc:f7:26:18:75:
6e:0b:43:17:43:56:71:b7:4c:f9:a9:8d:38:c2:3c:
67:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:75:24:52:5F:E2:D4:27:30:F8:DB:42:EB:9C:0A:EC:B5:FE:9D:73
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/oHUkUl_i1Ccw-NtC65wK7LX-nXM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:bb:68:f8:e0:dc:d9:71:59:22:50:8f:c7:b0:fa:74:44:f7:
73:3e:b7:e8:22:3f:c7:8c:7e:ff:af:a6:28:d2:42:bf:b8:3a:
b8:e1:18:25:5c:58:ef:7e:f7:d1:7a:71:37:9c:7c:34:ac:3c:
cb:6f:2d:70:36:a2:e2:e4:9e:2e:bd:80:4f:7b:2d:a5:92:99:
22:66:1d:7d:c1:1e:24:8f:fd:dc:4d:aa:d9:66:84:52:89:3a:
09:f6:7e:00:e4:77:eb:5e:98:86:fc:e0:52:6c:ad:33:6a:49:
90:60:d9:5d:f2:a6:60:63:68:3a:17:01:fe:3e:1d:7f:8a:1e:
93:e2:0f:11:e5:b2:d9:83:49:66:95:e0:9c:c6:83:89:11:d8:
ef:eb:c9:f8:ea:6b:2a:8b:3b:49:fd:19:0d:bf:80:3c:30:d2:
07:00:5c:30:51:90:a8:45:5a:b2:17:ff:01:1d:96:ea:0c:eb:
bd:54:3a:bc:83:72:8c:62:54:a1:34:9d:7e:e2:b9:03:2b:1e:
a5:ac:1c:2a:e9:51:67:69:b1:83:32:e5:1b:e4:55:98:9a:29:
db:16:4b:86:7e:3d:d7:8f:1c:3b:cf:5e:90:12:a7:56:e6:96:
27:b2:74:9c:07:3b:38:16:36:23:ac:45:be:41:9c:39:b8:9a:
17:dc:aa:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:26 2025 by rpki-client