Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/wwV_0WLDs3UaVHXEaIsuCfILlSw.roa
File: wwV_0WLDs3UaVHXEaIsuCfILlSw.roa (raw, json)
Hash identifier: 0PRv3ByYITgAc+xuaVGLqzlZX4dC8XhiotBw6HiZ/JI=
Subject key identifier: C3:05:7F:D1:62:C3:B3:75:1A:54:75:C4:68:8B:2E:09:F2:0B:95:2C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CDC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wwV_0WLDs3UaVHXEaIsuCfILlSw.roa
Signing time: Thu 06 Feb 2025 20:25:48 +0000
ROA not before: Thu 06 Feb 2025 20:25:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3292 (0xcdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 20:25:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C3057FD162C3B3751A5475C4688B2E09F20B952C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8f:79:7e:e6:b4:17:d1:04:d3:69:70:2d:86:
7a:1e:08:80:8a:4c:dc:5f:e7:ca:d7:7c:1e:ca:98:
e7:7a:80:4a:90:c9:41:e1:23:d5:a0:3c:26:d7:b5:
92:5a:01:1a:9d:57:2d:bc:55:56:4c:99:f6:00:af:
ba:c0:07:9e:60:b4:29:0c:ba:3e:2b:30:27:46:ae:
f6:a6:fc:4d:f0:5d:08:ad:2e:20:94:72:de:60:cc:
3a:30:87:97:4c:f9:b0:58:67:28:5b:5a:1a:0b:00:
34:46:74:87:97:81:50:4d:16:d8:b2:36:e6:54:bd:
aa:49:19:fc:1a:42:6c:b9:71:2a:dd:ab:f7:a9:b4:
fa:59:96:28:15:f2:60:c4:23:7e:40:0d:af:79:5d:
67:8c:41:35:72:9b:51:c9:ce:7a:15:a7:d3:b3:e6:
50:aa:b6:29:0a:43:f9:28:57:a7:8c:c2:02:38:3c:
1f:b7:d0:2d:54:9b:15:5c:51:42:68:12:ea:91:80:
52:50:c5:69:26:91:a4:cf:b2:b8:af:7e:33:b4:47:
ea:d3:55:19:a4:13:f1:7d:77:bd:ff:52:6b:01:53:
ed:be:2a:5b:ed:4f:6c:43:f0:00:41:7c:61:76:14:
fe:32:e0:e1:83:c7:62:cf:2a:df:41:91:97:e0:f1:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:7F:D1:62:C3:B3:75:1A:54:75:C4:68:8B:2E:09:F2:0B:95:2C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wwV_0WLDs3UaVHXEaIsuCfILlSw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:d3:89:49:6a:47:c2:a6:e3:b0:aa:7e:51:74:29:2a:52:2f:
45:c7:7a:a2:ce:e8:75:00:95:69:32:9a:dc:75:04:4b:64:a6:
d4:6c:84:1b:70:e6:6e:dd:fa:a6:9e:14:c9:49:c0:c7:ab:c1:
20:1e:b1:76:dd:20:02:68:65:92:1b:2d:20:4b:03:20:84:d1:
60:f2:75:35:2f:e3:ee:56:8b:90:dc:4b:22:53:b1:a0:6d:e7:
f7:66:86:21:58:c9:fa:bb:01:a5:63:44:6d:90:5c:8a:75:51:
ca:ab:eb:bf:ae:d6:b4:9b:b8:df:58:21:95:4c:c8:c2:bc:95:
1c:ac:00:2d:d7:ae:a6:ee:bc:c6:3b:32:28:8b:77:f5:92:66:
13:9e:c0:ea:b4:0a:94:d9:0f:cf:1e:7e:d9:99:ab:ac:5c:d8:
55:9d:fb:f6:db:79:e1:f1:13:87:6d:dd:45:69:11:82:48:f5:
d9:51:27:a2:50:c0:9f:d8:a6:94:29:89:e8:fa:b8:37:11:7f:
db:31:20:c1:27:af:a5:26:81:8f:95:3b:2b:62:16:f0:1d:cb:
9d:ae:a4:b8:3a:8f:d0:f1:a8:36:9d:cf:f0:e1:69:ee:cf:61:
d6:28:4e:b9:95:6e:f5:56:c6:df:f5:2f:a8:ba:d0:62:6b:85:
d9:67:fa:70
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:55 2025 by rpki-client