Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/shezhCJQCLN9FdrlHWoJmg4hV7Y.roa
File: shezhCJQCLN9FdrlHWoJmg4hV7Y.roa (raw, json)
Hash identifier: KOUgUFWQzjMN0R+OFUMrLCLtXCpLmu0CzgPRiwK2KKs=
Subject key identifier: B2:17:B3:84:22:50:08:B3:7D:15:DA:E5:1D:6A:09:9A:0E:21:57:B6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08BC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/shezhCJQCLN9FdrlHWoJmg4hV7Y.roa
Signing time: Sun 26 Jan 2025 20:25:14 +0000
ROA not before: Sun 26 Jan 2025 20:25:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 20:25:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B217B384225008B37D15DAE51D6A099A0E2157B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:76:3b:47:e7:5c:a2:ff:d7:fe:23:d4:0b:ea:
cd:6b:2c:da:8e:5a:dc:35:f4:bd:78:e5:10:68:03:
c0:d9:35:3e:2e:d7:b9:b3:f8:ac:b0:e7:46:28:25:
dd:25:11:dc:02:7d:56:b4:b1:56:b2:45:b9:0a:fe:
e1:52:7c:9a:a6:11:a4:1e:8a:0e:99:c6:e6:ba:bd:
14:f6:11:16:a8:2c:83:50:c1:f2:73:f4:f5:21:d4:
f8:6b:29:49:7d:f0:96:a8:6a:3e:cf:dd:8f:75:93:
9b:a2:fe:17:ec:b2:08:89:87:7b:82:9d:17:43:89:
74:61:95:c5:30:61:ed:2c:1b:67:a8:a9:1c:72:b9:
e6:a0:af:ad:51:f3:df:bb:3c:83:45:77:53:79:8c:
e5:7e:ce:78:30:dc:c3:77:2b:56:da:6a:b5:6c:4a:
70:47:05:e3:f5:df:ff:63:74:da:aa:91:5d:ef:c2:
11:b9:67:c2:03:94:11:18:02:71:4a:f6:6a:6a:54:
77:14:29:93:e0:13:ff:95:77:0f:f5:58:27:57:cc:
0c:cc:46:7c:19:38:e1:44:3d:41:45:04:c3:6f:04:
d4:bd:a0:01:42:ee:46:6d:1b:bf:90:f2:2d:b1:79:
05:16:c1:79:12:a6:d2:0e:9e:0e:db:e2:b1:43:0a:
2d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:17:B3:84:22:50:08:B3:7D:15:DA:E5:1D:6A:09:9A:0E:21:57:B6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/shezhCJQCLN9FdrlHWoJmg4hV7Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
28:42:76:15:83:26:82:53:0c:53:d5:34:55:27:fe:fa:67:ce:
8c:2b:d1:b5:a6:e9:93:4e:3f:8e:d8:3e:5a:5e:3a:90:67:b1:
cd:92:7c:9d:32:2a:3c:25:08:fc:7a:56:69:3b:34:5f:e5:c8:
0e:f7:a9:2e:9b:4d:14:f3:be:44:4d:5d:4c:89:d6:58:bd:eb:
3e:98:9f:33:28:ae:0e:f8:91:13:f9:b6:2c:7f:82:7c:88:9c:
dd:96:78:2c:4a:72:80:0b:21:8a:3e:6c:6b:5e:47:53:f9:a1:
f1:eb:8d:a6:3e:87:49:2a:a2:d5:ac:b9:4a:8f:52:65:b3:87:
ec:78:6e:a4:43:d0:de:5b:23:fe:8e:8b:1f:a8:ca:86:b3:c2:
58:9f:e9:4c:47:03:ee:8e:3c:f8:0a:4c:ca:98:11:d7:44:fd:
c8:bd:06:37:c8:de:61:d7:ba:48:5a:b8:e6:f5:89:b0:81:c4:
82:f3:f8:cc:5e:13:b6:d2:3d:2a:dc:28:ed:9c:1b:96:21:2d:
ae:31:35:90:b4:de:da:d1:08:88:af:4b:15:d1:25:63:fb:f2:
2f:17:ee:ff:9b:33:6e:d4:ae:d1:6c:5f:71:96:8d:6a:dc:5a:
a1:f3:30:d8:e8:b7:06:38:0b:6f:8e:e9:21:e8:39:1d:d4:fa:
48:ef:b1:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:19 2025 by rpki-client