Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yG6ANImIRfFRqavHGNZe2MBazvM.roa
File: yG6ANImIRfFRqavHGNZe2MBazvM.roa (raw, json)
Hash identifier: ADstjW0rm+bNXeMkIPpCc/W+xZZ+iRmfEBrmTqWtw1Y=
Subject key identifier: C8:6E:80:34:89:88:45:F1:51:A9:AB:C7:18:D6:5E:D8:C0:5A:CE:F3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DC6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yG6ANImIRfFRqavHGNZe2MBazvM.roa
Signing time: Sun 09 Feb 2025 06:57:53 +0000
ROA not before: Sun 09 Feb 2025 06:57:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3526 (0xdc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 06:57:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C86E8034898845F151A9ABC718D65ED8C05ACEF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:eb:25:91:57:3c:89:05:94:d8:c8:68:bb:bf:
d8:7a:0a:4d:35:1b:df:bc:37:a1:c3:50:f9:9a:df:
96:ef:08:13:c8:69:94:0d:0e:94:50:1d:25:4c:68:
3a:d7:f2:6e:36:df:1b:8f:2c:8f:ee:2a:2e:1d:28:
a9:0b:f3:4f:d3:60:c9:7a:4e:e4:55:b9:d1:d2:c4:
d2:08:a6:95:37:86:84:21:f4:44:3b:87:ee:6e:2f:
e7:64:b7:af:1f:fc:93:df:28:79:2a:89:f9:44:59:
2a:dd:28:ed:a8:12:b9:eb:ef:94:2e:eb:09:77:79:
ae:d0:5a:03:61:9c:31:91:d2:b1:d6:23:c1:46:0b:
c6:7b:f7:fe:96:94:81:11:d0:35:9c:47:06:5f:55:
94:80:ce:fe:80:64:bf:f4:20:41:48:a2:22:d3:a3:
d0:98:12:ae:c7:08:79:f1:cd:0d:2e:eb:4f:f9:c9:
85:51:4f:c9:05:bf:ad:27:d1:cd:2b:46:b0:51:8e:
6b:09:4a:8a:07:39:57:d1:83:e5:5a:15:30:91:c4:
0f:aa:f4:91:52:a7:dd:fe:4e:14:36:66:7e:ef:3b:
8f:d8:75:ed:7e:b8:51:bc:5b:bc:c4:6b:7e:85:53:
73:db:66:11:70:cb:ec:af:08:93:74:5a:9b:04:56:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6E:80:34:89:88:45:F1:51:A9:AB:C7:18:D6:5E:D8:C0:5A:CE:F3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yG6ANImIRfFRqavHGNZe2MBazvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
95:55:34:9a:36:bf:06:69:69:6d:47:cd:f0:e7:58:53:7c:7c:
42:63:0a:8e:ef:b9:33:4e:16:10:a2:ba:35:4e:0b:d2:06:38:
2f:71:01:12:5e:00:c2:e3:05:bd:cd:be:fa:43:80:95:a6:60:
37:88:74:3f:07:5a:a6:bd:40:bc:af:f4:2c:53:a5:de:3e:7c:
ca:13:27:d3:0e:c9:6d:c1:a6:a8:d7:c9:c5:43:8c:0f:c9:4b:
d5:b4:c9:a0:c3:f8:cc:5f:52:22:21:4d:57:ab:cd:fd:55:1f:
bc:d0:52:23:5b:25:24:f6:58:5c:e9:30:aa:30:3e:a5:92:54:
de:31:a1:5a:cc:81:9e:d8:f6:3b:c1:e4:51:e4:24:ed:e3:b7:
e3:37:ff:37:49:c1:7e:3e:8b:b3:30:78:52:19:bc:a1:ef:f8:
c6:31:9b:71:9d:1c:f3:8b:c0:ad:bc:fc:85:4d:81:77:80:83:
d3:13:a5:9f:26:7e:5f:07:c0:bc:0d:ea:0d:e9:59:46:0f:82:
68:da:31:d2:f8:d1:6c:57:13:99:d1:66:c5:a5:69:27:e5:b5:
8f:fd:1c:83:a7:6e:67:27:36:d4:35:ae:6a:bf:a9:f0:77:3b:
c7:7e:13:68:e4:ad:8b:82:2a:2f:c1:2a:7f:17:c7:f4:af:87:
16:2b:46:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:58 2025 by rpki-client