Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/uUuhQsToyTnuUnC6XUwYjCf3oEk.roa
File: uUuhQsToyTnuUnC6XUwYjCf3oEk.roa (raw, json)
Hash identifier: h1GX61c7L6AbeRPR+lEEUFTKdqqKJkSLmc8AK4FGwXs=
Subject key identifier: B9:4B:A1:42:C4:E8:C9:39:EE:52:70:BA:5D:4C:18:8C:27:F7:A0:49
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C22
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uUuhQsToyTnuUnC6XUwYjCf3oEk.roa
Signing time: Tue 04 Feb 2025 21:56:58 +0000
ROA not before: Tue 04 Feb 2025 21:56:58 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3106 (0xc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 21:56:58 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B94BA142C4E8C939EE5270BA5D4C188C27F7A049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:26:d7:99:99:9a:c9:4f:22:1f:d3:b5:fe:
03:fb:5b:55:7d:b2:39:33:b5:4a:b2:d3:c5:21:35:
9b:dc:02:08:1a:f6:d7:62:15:6b:70:7d:54:d1:c7:
cc:4a:fb:93:5a:dc:41:94:c8:95:ba:d3:d9:a6:2e:
9c:52:d5:25:4f:e4:ab:b1:e4:62:df:45:2e:4f:41:
81:dd:61:a0:87:8b:c3:c9:f8:f8:b1:dd:cf:31:b9:
58:d9:05:9b:8e:97:ac:f4:be:30:97:22:f3:97:84:
6e:53:a2:f9:47:1e:c4:b5:7a:fe:e7:90:0b:6d:49:
1a:ce:e0:40:7a:e8:85:45:15:37:a0:f1:59:ba:40:
88:a5:88:30:d6:d1:c7:52:1b:4b:e9:55:4d:d9:1c:
f5:9f:d8:18:81:48:17:5b:14:a1:83:1c:7a:49:bd:
ac:d2:68:0b:58:50:d1:d7:cc:9a:be:03:0b:15:d9:
0d:77:65:5f:df:57:ef:88:70:a2:1e:e0:57:59:02:
d4:c2:39:a3:08:b3:af:a3:20:82:c9:bf:40:6c:a6:
28:25:03:8a:1c:b3:d9:06:9b:15:9c:74:a4:96:ec:
39:c1:64:3a:de:2c:67:7b:f0:86:bd:f9:1d:54:79:
b2:e4:72:d9:e9:cd:40:02:94:23:13:0c:b0:ad:49:
57:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:4B:A1:42:C4:E8:C9:39:EE:52:70:BA:5D:4C:18:8C:27:F7:A0:49
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uUuhQsToyTnuUnC6XUwYjCf3oEk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:16:75:e2:9c:a4:9c:e6:d7:6d:46:5f:c2:6f:15:df:d6:b8:
f1:dd:ac:d3:2e:37:ff:d6:81:84:0b:2d:e4:a5:09:d7:04:15:
af:5c:1e:d0:fb:c2:d4:c2:88:1b:28:c6:a9:f3:fa:df:19:dc:
89:6e:6d:22:21:44:4b:f0:d0:43:5c:23:2c:93:f4:fa:40:dd:
2e:72:58:34:84:27:23:ed:c3:ff:ef:ea:f0:75:09:6a:ec:96:
bc:f7:17:93:84:9f:c3:40:5d:d7:e4:23:4f:f9:87:18:71:51:
14:a8:82:75:fb:93:36:c0:7c:18:64:3d:88:26:5a:82:fe:0c:
54:01:f7:1a:d1:27:6a:2d:ea:ed:be:cd:e7:7d:24:49:d2:b4:
f6:78:74:7f:2d:d6:76:28:50:53:35:d6:5f:5e:6b:3a:dc:f0:
c4:86:4e:f0:9d:e7:0e:fe:ec:69:d8:94:f5:ec:ca:b4:b1:c4:
dc:28:8e:ca:81:c3:ec:a5:47:bf:a0:ea:6d:1b:8f:0e:ee:74:
f0:cf:4a:93:7f:05:89:c2:37:8d:27:47:e8:38:39:fa:93:64:
1d:76:a4:43:d8:65:01:cf:8f:b1:b9:11:44:6a:f9:92:d7:ab:
aa:2b:6c:00:54:f5:ef:88:81:ff:ed:e8:8e:34:ca:39:6a:9b:
cf:3b:ab:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 15:05:05 2025 by rpki-client