Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/vDLQIql6n8ctoxXBdX02Eo7-zJA.roa
File: vDLQIql6n8ctoxXBdX02Eo7-zJA.roa (raw, json)
Hash identifier: LREhiA6GT8euXAU2rwyclb4GzI5PjvfEH6CEBHCjkLo=
Subject key identifier: BC:32:D0:22:A9:7A:9F:C7:2D:A3:15:C1:75:7D:36:12:8E:FE:CC:90
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B8C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vDLQIql6n8ctoxXBdX02Eo7-zJA.roa
Signing time: Mon 03 Feb 2025 08:25:39 +0000
ROA not before: Mon 03 Feb 2025 08:25:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2956 (0xb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 08:25:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BC32D022A97A9FC72DA315C1757D36128EFECC90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:1e:ff:75:b3:b2:1c:e4:e5:2c:ba:78:08:
0f:33:02:92:11:4b:a6:c0:00:13:4c:dc:07:f1:e9:
11:8f:cb:7b:e1:f0:d9:e1:57:b9:c8:a8:f3:ff:6e:
aa:7d:8b:51:4c:99:54:71:4a:eb:3e:3c:de:99:bc:
92:cc:ed:c8:47:4f:8f:c4:9f:f7:73:e7:b3:46:ab:
cb:a8:a8:6a:77:10:e6:db:70:50:2b:45:cb:c2:23:
78:b6:fb:28:31:51:0f:ea:aa:2b:61:df:28:6f:f0:
67:ff:37:53:12:74:1f:95:0c:50:6f:58:18:ff:64:
6f:d8:b0:e4:3d:f7:01:50:44:93:6f:52:92:d7:da:
a3:bd:9d:d6:53:3b:e7:14:e7:05:4b:20:58:be:6c:
4c:02:7b:93:a1:61:f6:56:bf:91:38:4c:f7:5d:1e:
f8:db:5d:e7:c1:ac:48:5c:6f:dd:2b:ad:77:f6:88:
d6:2b:c2:a9:43:27:e0:97:35:82:b9:c2:68:06:b9:
bf:22:20:bc:7c:52:1a:13:04:89:8c:50:13:1a:ea:
b6:4d:a3:f2:54:3f:4b:41:23:3a:1f:f9:b2:01:26:
f4:7a:11:44:b8:31:da:44:c3:b5:91:13:fc:8a:24:
f7:79:44:08:9e:b7:27:b0:a0:06:d4:79:a6:28:1b:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:32:D0:22:A9:7A:9F:C7:2D:A3:15:C1:75:7D:36:12:8E:FE:CC:90
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vDLQIql6n8ctoxXBdX02Eo7-zJA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:ad:29:bd:16:3b:9c:3e:00:e1:1b:5f:c7:7c:1e:e5:65:42:
36:d1:b0:26:ff:43:f4:a4:d5:f8:fc:29:75:d3:44:08:2d:e7:
55:a1:a6:fc:a9:25:47:e0:80:cd:b4:4d:d4:f1:92:3b:d0:ba:
51:ff:d2:34:a9:e9:79:65:5b:e7:42:a2:b4:f6:a0:f1:0a:95:
30:ba:f7:e1:99:83:70:a0:93:75:10:77:e7:43:5a:9f:63:d0:
2b:cd:41:15:e7:a9:bd:4a:4c:28:db:bd:2e:7d:0e:a2:db:50:
a5:2d:dd:e3:b0:52:93:b6:e6:69:f0:4e:71:94:1d:f6:ce:8a:
c5:a7:f7:0c:d0:e2:16:eb:39:22:ae:15:89:f7:3c:05:e9:50:
4f:be:98:cc:91:59:2f:84:28:69:aa:1a:7b:94:0d:c9:df:c5:
c8:e6:c6:0a:86:f3:f4:80:c0:b5:e4:2b:7d:20:a1:69:5c:cb:
47:4a:38:a0:20:23:92:65:13:9c:ae:33:4e:19:eb:53:fc:39:
74:7e:1f:ae:ff:26:07:4a:67:83:10:7d:20:81:62:91:55:9f:
ca:85:bd:a3:e4:c7:17:4c:d3:6a:08:48:3a:fd:d2:1a:db:9a:
a3:e8:78:53:fc:05:e5:fd:88:c4:ed:32:66:e1:f8:d6:5c:8e:
02:09:d2:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:16 2025 by rpki-client