Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/u7b_TRPZ-G3BLcEywEaUEjtxils.roa
File: u7b_TRPZ-G3BLcEywEaUEjtxils.roa (raw, json)
Hash identifier: ApUGMKIFrsDr2bO3UO3bdCJwo80yEKPGfRgAoXQb440=
Subject key identifier: BB:B6:FF:4D:13:D9:F8:6D:C1:2D:C1:32:C0:46:94:12:3B:71:8A:5B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BF0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/u7b_TRPZ-G3BLcEywEaUEjtxils.roa
Signing time: Tue 04 Feb 2025 09:25:40 +0000
ROA not before: Tue 04 Feb 2025 09:25:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3056 (0xbf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 09:25:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BBB6FF4D13D9F86DC12DC132C04694123B718A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:c4:24:15:a5:20:c5:68:53:2d:b9:a4:ed:
6b:dd:8f:a4:50:8d:13:d0:d8:3b:93:d2:ac:e6:41:
f3:e4:d9:8a:d4:07:9c:e6:15:26:5f:3c:3c:02:12:
89:3e:ea:d7:7f:62:6d:c7:4b:f4:83:19:4d:32:c6:
0e:fc:70:7c:e6:51:cf:48:55:fe:2a:dc:7d:04:61:
a8:85:e7:17:d5:9b:3f:d2:b8:49:f8:c0:3b:13:af:
77:67:5b:0c:42:3e:2d:29:4b:7a:8e:f2:80:68:27:
e0:d6:7b:cb:2b:59:48:bb:a4:36:29:16:7e:70:a2:
ac:41:e5:2a:56:e5:06:bb:a5:9a:f8:0f:87:9b:52:
ed:7f:aa:cd:8e:5c:e7:3f:5d:74:90:05:e9:92:e6:
7e:cc:b5:d6:a4:04:37:00:82:fc:05:2b:6e:fd:02:
4c:4f:53:37:05:7b:c7:9d:c6:a3:0e:1d:30:de:87:
47:97:e9:27:da:f8:e9:7e:da:2a:64:a2:10:f2:ee:
03:d9:46:0d:2f:92:aa:1d:ac:57:c7:c0:7a:1e:a4:
ad:76:48:3f:4c:f6:20:e4:f6:5c:bf:b4:8b:51:36:
d4:14:3a:2b:62:44:4e:95:64:30:44:d2:e3:38:f7:
61:08:8e:4d:03:32:d2:32:e6:77:19:50:a5:30:d0:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:FF:4D:13:D9:F8:6D:C1:2D:C1:32:C0:46:94:12:3B:71:8A:5B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/u7b_TRPZ-G3BLcEywEaUEjtxils.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
06:51:fd:c6:ca:fe:4d:7d:2f:2e:d1:aa:78:11:cd:bb:36:b6:
2a:32:4d:a7:10:d6:cc:a2:e5:07:31:da:19:18:49:65:f1:d2:
b5:6d:0b:e2:c4:a0:8b:08:3e:37:b5:96:96:3d:43:a8:47:4d:
17:01:ae:f0:0f:57:4b:77:7e:4a:7b:55:ab:7b:bf:41:07:90:
23:1b:a7:d0:84:c7:1b:bc:76:4d:ef:3d:85:74:1d:c1:93:a1:
de:89:ba:e6:ca:f1:44:6b:82:53:16:1c:6e:26:8e:50:4e:cf:
bd:97:44:98:42:03:45:21:fc:44:15:3a:b7:47:ca:1a:17:83:
79:f8:ab:8e:e8:4c:8d:ce:f5:3e:d0:6f:72:d1:ed:4f:31:2c:
15:0f:50:c1:d1:f8:d7:c4:cf:75:d2:47:e7:b7:19:44:9a:1b:
61:0d:93:28:b6:f6:df:3b:fb:55:29:7e:a3:48:29:75:df:2b:
b6:cd:69:95:77:a2:b1:ac:66:ea:a0:9f:e4:b7:cc:aa:6b:72:
38:0d:36:92:1d:96:f7:61:97:95:20:ab:ae:cd:55:d3:4c:7e:
ca:54:36:3b:7c:a2:03:72:af:8f:ab:31:c2:d8:bf:31:98:d2:
3a:aa:6e:c7:3b:fc:4d:bc:da:58:c9:74:5c:21:ce:4c:b9:8f:
11:b6:61:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:24 2025 by rpki-client