Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/uspbVsSYEGo7wJ82rCb3GlMN1vw.roa
File: uspbVsSYEGo7wJ82rCb3GlMN1vw.roa (raw, json)
Hash identifier: EnGkVLetHAkntFmDSgmL9R8KJfbDBvbozxjcj7ABkj0=
Subject key identifier: BA:CA:5B:56:C4:98:10:6A:3B:C0:9F:36:AC:26:F7:1A:53:0D:D6:FC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B90
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uspbVsSYEGo7wJ82rCb3GlMN1vw.roa
Signing time: Mon 03 Feb 2025 09:25:35 +0000
ROA not before: Mon 03 Feb 2025 09:25:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2960 (0xb90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 09:25:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BACA5B56C498106A3BC09F36AC26F71A530DD6FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fe:2d:bb:7d:90:30:c1:8e:6d:dc:24:82:da:
9a:0a:d7:5d:e2:5f:bd:85:e3:6d:77:07:45:f2:5a:
0b:cf:0c:ab:b2:bd:e6:ec:fe:6f:47:ea:87:57:49:
5c:9a:e8:f8:97:42:11:33:18:dd:3a:9d:8c:8e:b7:
bc:a5:e9:e8:ce:fd:2c:f7:4d:58:43:8b:56:c6:ad:
d3:f6:82:d5:b3:85:f9:f8:10:8c:8c:22:d3:9e:93:
3b:9d:ff:cd:ad:38:ff:a5:ad:2c:3c:16:f3:6d:c2:
fa:d2:71:f3:56:f5:1a:a8:e5:04:a5:17:db:3f:df:
22:51:4c:96:11:18:06:49:76:3c:e6:e0:2d:f5:a6:
05:d0:ce:8a:8e:74:12:9b:69:1d:12:50:43:ec:2c:
ac:ed:3e:ac:7a:bb:9e:3b:cd:00:b6:61:de:fe:d7:
86:29:0f:bd:d8:e6:0c:2a:5c:07:a2:61:cf:cf:2b:
88:32:e3:0b:46:49:fe:df:5b:4d:75:09:ae:d1:f2:
fa:16:48:b4:7b:84:80:f0:ad:ae:50:49:5e:12:05:
17:e3:7b:0a:2c:5a:51:8b:c4:6c:88:14:fb:8d:8d:
6f:8f:e7:c0:04:81:ba:93:be:bc:6e:cb:f4:4e:a6:
a6:22:55:6e:38:ff:05:c0:73:03:cb:63:7d:7d:22:
91:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CA:5B:56:C4:98:10:6A:3B:C0:9F:36:AC:26:F7:1A:53:0D:D6:FC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uspbVsSYEGo7wJ82rCb3GlMN1vw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
66:66:d6:ba:cd:48:26:ba:b0:01:0a:6b:41:25:17:3f:d5:6d:
54:00:af:ad:c4:ab:10:c1:75:a2:21:b5:dc:ac:a5:c6:f9:f9:
74:e2:5d:db:14:48:23:43:dd:5b:82:f0:51:b2:3e:e2:36:4c:
17:59:eb:75:91:c2:1d:a2:fe:9e:3b:df:9d:9b:df:e7:b0:b9:
c8:dd:12:d7:99:14:6e:d6:d7:09:e0:98:be:ed:41:3c:84:b6:
a5:8e:0d:89:47:2a:cd:66:6e:a3:d0:c8:1f:d1:36:74:10:ea:
63:23:c7:1f:61:78:82:a4:89:37:f4:d0:87:6f:e9:f2:08:fc:
df:86:53:55:29:61:cd:88:a6:18:17:94:d9:d7:17:65:73:ca:
bf:77:5e:0e:6f:0c:7f:97:e4:2f:9e:53:50:5d:34:c0:87:04:
cc:49:57:da:1f:24:e1:1e:59:2b:ec:96:0d:8c:d7:ca:94:69:
47:fa:b4:41:47:f7:dd:4c:ad:6a:9a:e2:3a:08:c0:66:7f:0c:
24:24:db:75:b4:40:ec:37:a9:60:bd:86:44:1e:f5:07:94:92:
09:3d:c7:ad:ac:48:63:cf:0d:46:4f:8d:81:6e:17:65:91:42:
a9:ca:74:b2:3c:63:b8:f6:88:81:b6:d4:5d:62:ac:40:0f:d5:
64:fb:fe:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:57 2025 by rpki-client