Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/sCzP-tYHIh7kHmUfg6Hb5vmqL_w.roa
File: sCzP-tYHIh7kHmUfg6Hb5vmqL_w.roa (raw, json)
Hash identifier: ILa/wl90MB6NbB+kuP68CaS7NpwJjjxT+IbDJGiMlbE=
Subject key identifier: B0:2C:CF:FA:D6:07:22:1E:E4:1E:65:1F:83:A1:DB:E6:F9:AA:2F:FC
Certificate issuer: /CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Certificate serial: 0EE0
Authority key identifier: DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sCzP-tYHIh7kHmUfg6Hb5vmqL_w.roa
Signing time: Fri 21 Mar 2025 03:28:55 +0000
ROA not before: Fri 21 Mar 2025 03:28:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3808 (0xee0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEB86EAADEE1C17ECE2A7FF6388526F7A9260D47
Validity
Not Before: Mar 21 03:28:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B02CCFFAD607221EE41E651F83A1DBE6F9AA2FFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d7:49:48:00:81:de:fc:92:a3:82:af:e6:04:
63:cd:7c:eb:84:5a:57:f5:98:2c:58:fd:12:88:93:
c0:e8:e9:b7:97:07:09:b0:44:28:61:7b:86:b5:5c:
4d:8e:a3:96:2d:88:6f:10:aa:9d:2d:32:23:31:78:
0e:39:76:66:4b:9b:18:d5:af:69:cb:65:a4:db:7a:
21:03:db:3f:e0:84:3e:60:d1:23:3c:d1:8c:93:ca:
37:31:2c:c3:a8:22:14:94:43:01:2e:4a:61:da:23:
8a:32:75:7a:2b:db:89:ca:f3:b0:1c:56:da:07:56:
ed:79:31:d4:aa:03:d9:de:c4:e0:c1:e5:8b:43:74:
a6:0b:7c:87:07:c5:04:c1:8e:6a:a6:1e:f8:f2:4a:
c7:cc:64:d0:1b:f8:8e:16:07:4e:5f:5a:38:52:29:
67:d0:9d:a4:d7:02:d9:75:83:93:3e:42:44:56:f3:
cd:2f:fc:b2:57:e5:c4:c6:c1:3a:79:e1:5d:93:f2:
25:4c:74:ce:c7:c3:95:c8:3b:24:cf:8c:95:32:a2:
cb:5e:44:dd:52:3f:9c:80:2f:6c:d4:4b:bb:5b:64:
67:34:b1:d1:3a:df:c9:be:36:3b:7c:46:52:34:c0:
71:20:a4:6c:60:46:ff:01:01:89:b1:8d:22:a8:31:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:CF:FA:D6:07:22:1E:E4:1E:65:1F:83:A1:DB:E6:F9:AA:2F:FC
X509v3 Authority Key Identifier:
keyid:DE:B8:6E:AA:DE:E1:C1:7E:CE:2A:7F:F6:38:85:26:F7:A9:26:0D:47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3rhuqt7hwX7OKn_2OIUm96kmDUc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3rhuqt7hwX7OKn_2OIUm96kmDUc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sCzP-tYHIh7kHmUfg6Hb5vmqL_w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
Signature Algorithm: sha256WithRSAEncryption
63:07:b0:46:4a:94:07:95:18:94:cd:e3:f8:89:ce:b1:24:b6:
72:95:cf:aa:02:bf:56:ac:00:36:a0:2f:90:96:50:c2:b2:23:
9d:9d:ed:12:98:ae:86:e2:d6:99:3f:66:75:b2:06:22:97:b8:
d6:06:1e:cb:be:51:61:0e:46:cf:1f:7a:b1:00:5b:11:9b:e6:
46:20:f2:ae:82:f9:b2:8e:43:bc:62:a5:4e:c6:a6:2d:a1:8b:
92:9f:8d:50:4e:3f:9c:20:c6:62:98:53:86:ff:ca:8f:10:5b:
b5:75:7f:bf:1a:d1:f3:09:ca:3c:ff:79:8a:de:9d:51:5f:eb:
e2:35:10:89:4c:81:c9:aa:c7:b8:2d:d7:a0:77:b5:45:fe:53:
f4:12:c8:98:3f:4b:80:5f:52:43:a7:71:e1:66:2f:16:93:b5:
a0:0b:3f:82:5f:24:f6:d6:ee:56:6b:2d:01:aa:bc:a9:96:3d:
26:c1:0e:4d:6c:75:c8:53:18:3c:72:33:bd:b8:1a:a9:b2:97:
24:7e:e0:65:f8:74:4f:8c:a3:8b:e0:ef:97:c0:89:03:58:d0:
53:d4:c4:4e:b6:ea:66:df:d2:d4:a3:86:4f:0b:8b:03:59:b6:
64:2e:77:1d:f1:48:fc:3a:eb:8f:88:b7:10:8a:49:cc:b6:fc:
09:05:ea:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:40:02 2025 by rpki-client