Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/teiY5gCJGKqU9MWvO231ECZRfCE.roa
File: teiY5gCJGKqU9MWvO231ECZRfCE.roa (raw, json)
Hash identifier: PDQ0YSzusWfhEOUVfOKNs5kGVpujm4FsuHlxzvyCCz0=
Subject key identifier: B5:E8:98:E6:00:89:18:AA:94:F4:C5:AF:3B:6D:F5:10:26:51:7C:21
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A90
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/teiY5gCJGKqU9MWvO231ECZRfCE.roa
Signing time: Fri 31 Jan 2025 17:25:33 +0000
ROA not before: Fri 31 Jan 2025 17:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2704 (0xa90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 17:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B5E898E6008918AA94F4C5AF3B6DF51026517C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:f7:1c:79:d8:65:6f:6c:8b:6d:72:08:c5:
25:0f:44:0c:06:b7:86:c5:b7:90:aa:33:1e:ad:44:
d5:29:35:9d:cc:a1:01:60:c4:b6:3d:07:e2:99:41:
dd:78:b7:0d:e1:94:db:13:13:f0:97:cf:0c:d2:d6:
85:c6:0a:1d:65:b6:4d:a6:42:68:b2:66:d4:e4:ac:
b2:a6:69:da:6f:cd:a4:6f:34:7e:2d:34:c8:d5:d1:
f0:f1:38:13:25:83:15:97:84:7b:10:60:ac:37:ac:
87:15:40:db:62:31:1e:db:7f:dc:2c:8f:10:9c:c0:
b3:f6:88:ba:00:12:41:9d:ca:71:c0:c8:28:cf:9a:
8c:7a:98:b7:25:be:83:66:38:c2:79:e2:62:01:ee:
4d:89:52:13:8f:cb:c4:12:a1:c7:86:75:0f:d3:93:
bb:96:ff:9f:2e:bf:12:4c:1a:93:1a:d8:4f:28:57:
6f:e3:f4:a9:a5:80:f2:00:83:34:2f:64:d4:a0:d7:
24:1b:9c:e7:fb:8a:38:00:0d:2a:c5:6c:4a:63:d3:
bb:67:d6:e7:d6:c9:de:21:0e:ad:c9:30:97:a8:0f:
a0:3e:30:ab:6e:45:b1:de:17:d6:f1:6c:08:63:0e:
22:45:27:31:4a:b1:f9:23:5b:07:16:a1:0e:0d:f6:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E8:98:E6:00:89:18:AA:94:F4:C5:AF:3B:6D:F5:10:26:51:7C:21
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/teiY5gCJGKqU9MWvO231ECZRfCE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
23:28:e0:c9:6d:7e:42:bd:f3:ec:8c:16:0b:2a:2e:09:89:1d:
16:b2:7e:f6:0f:da:40:f1:96:5a:1b:5c:c2:5c:e5:dc:2e:ac:
a5:f5:6f:a6:6a:08:4e:57:f1:eb:87:24:3b:bc:ef:b7:93:b0:
e2:d9:16:05:8d:fe:83:6a:e0:a1:38:04:0e:83:87:1f:7b:f8:
12:e1:93:54:b3:70:8e:20:10:b0:3e:19:d1:c9:6d:72:ca:47:
58:4b:7d:6e:fb:c1:0a:a5:dc:e1:73:12:cd:9a:f8:61:59:ad:
25:7c:4c:72:33:a5:5b:59:6e:88:2f:ca:a1:80:0c:0c:6b:8a:
ea:f2:c4:63:94:bf:5b:65:c5:39:1f:90:56:6d:00:3a:0c:47:
08:09:a9:65:cc:c8:53:93:a4:93:20:07:e7:02:a6:ad:7e:79:
be:48:7a:c4:32:e1:3d:db:22:98:14:f2:a2:8d:9e:34:58:88:
63:a0:6d:68:2d:b2:48:a5:aa:8b:c5:d7:e1:f2:33:ab:f3:2f:
c0:1a:a0:f2:6a:96:3e:f5:19:d4:d8:d2:36:68:58:cc:10:0d:
96:dd:e7:6b:fe:9d:3a:55:7c:d4:b6:11:79:7b:d0:f7:44:09:
64:3e:04:2e:90:c1:16:58:9d:10:69:25:63:68:3b:e5:73:fb:
de:f7:47:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:33 2025 by rpki-client