Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/wSDpWF1WVpnn-WIEZFt10vpT-08.roa
File: wSDpWF1WVpnn-WIEZFt10vpT-08.roa (raw, json)
Hash identifier: fuCxU+TpsxlC4EGNycAEwsOXh0a3ed/Zk8JDYJAIQVY=
Subject key identifier: C1:20:E9:58:5D:56:56:99:E7:F9:62:04:64:5B:75:D2:FA:53:FB:4F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DBE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wSDpWF1WVpnn-WIEZFt10vpT-08.roa
Signing time: Sun 09 Feb 2025 04:55:55 +0000
ROA not before: Sun 09 Feb 2025 04:55:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3518 (0xdbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 04:55:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C120E9585D565699E7F96204645B75D2FA53FB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:ef:60:95:02:a0:f4:e3:0c:45:30:b2:41:
55:d4:2a:2c:8b:de:e9:81:f9:5a:ab:94:13:47:ea:
9c:3d:ba:b5:49:ab:36:2a:2d:e8:25:bf:9c:ca:d8:
92:a2:55:a2:e1:a1:ab:2c:63:12:9f:7f:65:28:26:
6c:76:8e:6e:dc:df:b0:30:a4:8e:1d:ff:0d:8f:09:
3a:58:ba:b8:6f:e7:ec:6b:aa:0f:ee:ae:9b:e9:b6:
1a:fb:45:f7:93:2d:20:75:f5:c1:37:2b:e7:d6:01:
e5:e1:ba:1e:92:a3:62:62:d5:93:bb:02:b5:c5:05:
84:21:ad:ac:4b:3d:b3:01:22:6d:8e:09:fb:6f:60:
f8:84:54:e2:6e:59:52:47:f9:72:a8:61:1f:9e:00:
8d:22:50:69:1a:7c:a4:c7:af:79:ac:97:b9:de:5d:
53:b6:e3:20:f6:f8:f9:fe:09:87:1c:cf:54:94:12:
43:9d:39:22:8b:2f:62:45:c4:a8:cc:d8:5b:f5:9f:
1e:bd:9b:5e:f7:de:14:8a:f4:7a:68:a8:5d:ea:b8:
2e:4f:56:ec:99:a3:57:3a:f8:b2:7f:8a:32:4c:de:
64:48:8a:7b:66:8a:af:f7:18:ce:46:84:25:03:6b:
05:ca:d6:1f:d7:12:24:bc:f0:46:04:64:9b:1a:76:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:E9:58:5D:56:56:99:E7:F9:62:04:64:5B:75:D2:FA:53:FB:4F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wSDpWF1WVpnn-WIEZFt10vpT-08.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:fa:1b:20:45:99:cc:c2:12:bd:28:b3:5b:a2:21:a6:d2:18:
19:ec:da:cf:ea:c6:28:cf:20:e8:ad:04:10:e7:cc:dc:b8:a6:
0a:49:4d:f8:15:ec:4f:5a:04:d0:57:6a:69:d0:d2:0b:e8:f5:
51:e4:a1:e5:20:50:fa:66:c2:69:dd:cb:d4:cf:73:7d:ce:91:
a1:4f:d2:b4:43:90:6b:ae:ac:41:9a:75:33:7c:0f:d9:ed:c3:
b3:e8:3e:60:1d:9b:68:d2:a9:68:b8:38:da:e2:90:5d:c1:92:
a5:76:0a:0d:12:f7:5b:70:99:a9:2d:c9:91:f6:9e:2d:e0:44:
bf:34:85:78:b3:61:b8:9e:ad:f9:49:c9:e3:c4:3e:9b:b1:ed:
57:2b:86:ef:0e:0c:74:65:7d:a1:b8:cf:5c:08:81:96:5b:fd:
9f:16:db:dc:58:22:fe:3c:d5:da:35:9b:6e:c6:49:dd:a0:fb:
a8:6a:3f:94:b7:ea:c7:fd:a3:27:52:7f:da:02:8e:2e:76:5f:
b6:67:2d:2e:f6:40:74:c8:9e:20:b3:c1:f7:aa:dc:9e:55:cd:
14:aa:d5:1f:fe:65:c8:6a:c8:a5:6b:20:e3:fe:4e:f9:0d:6b:
d9:7a:fe:f8:c2:67:bb:b7:76:af:37:b5:91:b4:8b:cf:84:be:
a9:14:38:bb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:47 2025 by rpki-client