Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/p-4XT9EV_gfzHv6onVLoWGS2HPs.roa
File: p-4XT9EV_gfzHv6onVLoWGS2HPs.roa (raw, json)
Hash identifier: P2Us+34JjTGkcFg8FZdLEqYav+mP9/LKxgR5+Qtwu4I=
Subject key identifier: A7:EE:17:4F:D1:15:FE:07:F3:1E:FE:A8:9D:52:E8:58:64:B6:1C:FB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CA4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p-4XT9EV_gfzHv6onVLoWGS2HPs.roa
Signing time: Thu 06 Feb 2025 06:26:18 +0000
ROA not before: Thu 06 Feb 2025 06:26:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3236 (0xca4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 06:26:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A7EE174FD115FE07F31EFEA89D52E85864B61CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:11:9d:c3:63:a6:13:72:c7:f0:ce:2a:f2:e7:
b4:14:c7:d0:28:d8:85:9b:f2:fa:af:c8:e1:13:01:
0d:7b:e6:6f:8d:0b:f2:d5:14:2f:21:50:c5:28:1d:
81:1c:ea:55:af:5d:8f:66:57:d8:87:6c:22:c4:66:
ba:fc:69:ef:2f:c4:17:b6:94:26:5c:93:97:c1:23:
57:00:43:f1:25:d8:1f:bd:6b:d4:67:6e:07:49:d0:
01:d7:93:74:6e:cc:a6:d5:cb:fe:9e:42:d3:f8:30:
ec:c5:e1:15:26:e0:d4:05:84:81:c3:07:ff:33:91:
81:7a:b1:b7:e3:e4:3d:6a:b1:6a:6f:df:e0:95:4b:
3e:56:76:a5:b7:0a:e5:92:88:fd:c9:54:84:e0:67:
fd:5a:8e:11:80:40:e6:ad:fc:47:1a:ec:02:41:66:
f7:42:5c:ce:e2:6c:01:cd:c8:c6:67:9c:19:af:a5:
7c:2f:76:dc:6e:e0:fe:cc:7b:69:eb:f2:63:81:5e:
ae:f8:e5:7c:7f:e8:68:45:bc:f0:54:67:64:df:1a:
d4:cb:95:51:59:20:55:14:9c:aa:9d:78:86:22:23:
b0:3e:da:29:b2:c4:a0:a0:06:7a:42:78:e1:6e:ce:
d2:7b:1f:ec:f6:62:fb:3c:fd:a9:75:f2:7a:37:c6:
64:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:17:4F:D1:15:FE:07:F3:1E:FE:A8:9D:52:E8:58:64:B6:1C:FB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p-4XT9EV_gfzHv6onVLoWGS2HPs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
69:bd:c1:e5:7a:c5:d6:f9:e2:81:80:d4:ad:45:03:6e:0b:e2:
ef:56:0a:0c:00:44:9f:7e:af:2d:b2:b6:e8:e1:27:c1:90:f9:
6a:4d:4d:8a:15:9d:dd:5d:fe:35:dc:f5:40:8e:14:2c:21:34:
89:5f:ed:1d:f4:93:9d:bd:f3:66:e2:8b:a8:3b:16:50:92:cf:
29:ef:15:a4:28:8a:ca:88:7f:40:7e:b2:7e:52:6c:6b:5c:a2:
f8:96:24:d8:d9:e5:57:7f:4d:bd:84:15:02:31:6c:9f:b8:50:
74:0a:80:a6:07:27:a0:ed:b1:f8:69:ec:8d:14:30:e6:6c:68:
53:6b:eb:97:ab:ac:3f:4b:5c:14:44:70:7d:1a:50:cd:c4:1a:
35:8a:8e:36:c8:ba:1a:58:eb:da:25:fa:15:e0:d0:be:de:80:
af:28:43:2c:eb:95:4c:13:bc:96:17:df:bc:bb:b4:17:79:f1:
76:12:71:9b:ee:df:b6:80:89:51:f2:26:69:ee:22:e8:92:19:
dc:06:95:d4:5a:2b:78:8e:e9:08:aa:b0:41:fc:7f:55:83:e5:
57:ce:50:b8:6c:5f:e0:af:8b:23:88:e7:1b:60:d3:39:62:a4:
2e:e7:9d:e3:26:f0:35:ba:90:6d:d1:90:40:69:66:06:6b:f8:
6f:49:8f:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:39 2025 by rpki-client