Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/w2EizCwomjOnWuhHi-_zwMXbTzU.roa
File: w2EizCwomjOnWuhHi-_zwMXbTzU.roa (raw, json)
Hash identifier: 7JcIGqY1JpkgzZNuWeO5rcia80pyB41v2RmoZIQHFiQ=
Subject key identifier: C3:61:22:CC:2C:28:9A:33:A7:5A:E8:47:8B:EF:F3:C0:C5:DB:4F:35
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C1E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/w2EizCwomjOnWuhHi-_zwMXbTzU.roa
Signing time: Tue 04 Feb 2025 20:56:25 +0000
ROA not before: Tue 04 Feb 2025 20:56:25 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3102 (0xc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 20:56:25 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C36122CC2C289A33A75AE8478BEFF3C0C5DB4F35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4b:a5:24:a2:f9:31:6a:33:e1:7b:18:ea:4f:
08:36:df:22:c1:9b:03:aa:03:2d:dc:f9:5a:c8:44:
57:57:e2:40:51:fa:46:aa:43:19:11:34:dc:21:6d:
aa:1a:9c:3e:d5:9b:c4:e7:91:84:8b:e2:1a:3a:37:
d1:e6:09:68:ea:92:83:ad:c6:99:6b:f9:8e:20:04:
f4:5a:59:fb:79:db:7e:f6:1c:21:5f:86:ad:64:1a:
cb:58:ec:c5:6f:54:48:00:d9:3d:06:dc:d4:b1:c8:
09:1c:24:79:4d:35:fa:c8:f5:a6:1f:79:4e:d8:03:
39:3d:56:27:ae:35:5d:95:fa:10:37:6c:f1:e7:2a:
a9:c6:b0:17:ed:26:d2:0a:f3:31:b8:15:3d:39:7a:
ea:c1:46:75:01:a9:be:04:c0:64:31:4c:9c:de:59:
2b:54:f5:07:d9:d1:05:f4:e2:87:d8:23:88:eb:90:
46:d0:43:db:eb:6e:80:59:af:1e:17:96:76:16:28:
e6:40:6b:36:7c:ad:77:e5:68:f5:bf:ff:ae:9a:e7:
2b:50:62:b6:da:37:43:3f:50:5e:82:f4:60:74:de:
09:0f:4b:cd:00:98:94:9e:84:ea:a8:50:e9:8f:30:
e2:49:e7:32:ea:5a:7c:bb:96:6d:dd:fc:98:b9:3b:
af:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:22:CC:2C:28:9A:33:A7:5A:E8:47:8B:EF:F3:C0:C5:DB:4F:35
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/w2EizCwomjOnWuhHi-_zwMXbTzU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
88:55:9b:45:57:c4:b0:29:b3:15:ba:2d:07:2e:86:ff:a4:2e:
da:88:c7:49:1e:67:3a:1e:6e:b7:2f:3c:6a:09:74:f6:73:0d:
95:60:b3:8d:cf:4c:89:25:a7:ad:de:13:79:ef:a5:03:99:c1:
58:6e:e4:5d:d2:64:4a:26:a2:1c:0d:a0:60:a8:30:57:0e:85:
98:3a:4b:e2:30:fd:26:85:a3:86:e7:b7:4f:d6:19:b2:60:96:
0e:c7:28:2b:a6:21:99:e7:bd:fc:6b:64:5c:c4:85:2d:95:ff:
2d:bf:65:87:58:94:a3:da:90:23:42:65:9f:80:2d:a6:d0:ef:
69:f9:fa:74:cb:0e:ed:ec:80:bf:2b:d6:cf:b1:90:8c:46:c5:
d3:e0:a9:a8:65:ad:f7:1e:c0:3b:ee:19:33:ba:ce:06:cf:af:
25:d4:af:49:6e:d7:49:b5:c8:65:2c:5b:83:ed:84:70:78:df:
a9:2d:80:07:bb:1a:19:9d:36:fc:34:8b:82:88:6a:7e:65:c2:
ab:88:7a:54:95:86:1c:21:89:77:bb:3f:53:53:40:33:d2:28:
12:b7:fa:19:5d:28:e1:63:ea:9a:e7:a8:dd:12:04:5d:2b:76:
af:8b:38:3a:d7:01:8a:3e:f8:7c:67:a9:a6:ec:51:24:c9:83:
ca:b1:07:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:41 2025 by rpki-client