Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NC6cp5FlNuhMxl98NbnVGKmgfsA.roa
File: NC6cp5FlNuhMxl98NbnVGKmgfsA.roa (raw, json)
Hash identifier: sQpFELIc53aO8QrEclutIfv5DqrtG/MCyZtMGVNkFsg=
Subject key identifier: 34:2E:9C:A7:91:65:36:E8:4C:C6:5F:7C:35:B9:D5:18:A9:A0:7E:C0
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A94
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NC6cp5FlNuhMxl98NbnVGKmgfsA.roa
Signing time: Fri 31 Jan 2025 18:25:34 +0000
ROA not before: Fri 31 Jan 2025 18:25:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2708 (0xa94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 18:25:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=342E9CA7916536E84CC65F7C35B9D518A9A07EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:04:a4:66:c1:91:56:6a:9a:1e:41:22:27:d3:
21:06:99:f0:d4:c0:16:0f:bd:07:f5:ac:e7:4c:7b:
35:f3:b3:f3:b1:de:e9:49:5f:e5:cf:52:b8:b4:fa:
19:47:7a:d8:d0:50:fc:57:03:64:34:b0:4b:10:ae:
5a:1e:a1:43:61:a2:9b:e2:76:f8:37:df:62:be:ea:
eb:50:9b:21:cf:ed:52:1e:40:96:af:2f:48:63:c6:
2a:47:06:48:ba:52:3d:e6:83:65:18:4b:8d:6e:dd:
5b:c0:8c:4d:ad:04:e4:5d:f2:03:89:ce:6c:ed:26:
13:a4:f3:10:3d:35:94:8e:32:69:b4:e2:8a:30:63:
53:b6:6c:ec:ac:aa:d9:53:3a:c4:3c:3d:9f:8c:bb:
12:68:0b:59:c1:04:2a:f3:dd:f1:6d:8f:44:c2:8d:
f0:57:a8:88:0f:30:fd:2f:ee:7b:50:15:dd:6c:11:
81:01:87:b8:3a:89:13:14:a8:fd:df:00:af:0a:9b:
49:1d:f0:80:46:46:b9:7e:57:e0:0f:fb:51:42:1b:
e7:bf:54:6d:8d:02:3b:84:d3:8a:05:25:6a:ec:dc:
1e:49:1d:71:56:e5:c0:21:ad:2e:3c:13:0c:ea:2b:
38:10:b8:15:92:68:42:d3:95:ec:11:a7:82:9c:fa:
35:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2E:9C:A7:91:65:36:E8:4C:C6:5F:7C:35:B9:D5:18:A9:A0:7E:C0
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NC6cp5FlNuhMxl98NbnVGKmgfsA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:55:d5:11:27:dc:18:ab:f3:3b:f2:7b:72:f9:1f:f7:3f:6e:
9e:bb:70:56:24:b7:4e:a4:da:fd:04:12:ed:5e:2a:06:4c:b3:
59:44:81:b4:5a:f5:fa:9f:81:56:e8:99:82:a1:75:18:c2:26:
a3:6c:ca:8f:59:aa:44:5b:bb:ab:12:75:43:df:d2:c2:c3:58:
1e:f9:81:14:32:4c:79:af:66:54:26:f0:b7:36:20:d7:a2:9c:
e3:d8:32:bb:2e:f0:a4:97:17:15:eb:11:c8:a7:ce:97:db:d3:
e3:96:21:31:43:10:e5:1b:c8:52:f0:2f:bb:24:5d:74:47:8f:
41:24:c6:2c:41:f8:f9:69:6e:36:c9:df:cc:5c:ae:3b:5d:fd:
6c:78:23:f2:b9:fa:57:de:fa:7a:b9:84:f8:48:24:6e:b4:f0:
cd:7a:be:77:52:d1:76:47:59:24:cc:0b:24:3b:6b:37:7e:11:
28:4a:25:73:03:92:32:68:40:ae:bf:eb:c3:21:9a:39:ef:ce:
65:bd:f1:fb:0c:fb:8f:89:d8:ff:83:40:51:8a:d0:2c:b7:e4:
96:06:f7:d9:0e:f0:14:14:f6:6b:e0:73:a1:a0:dd:6a:68:0a:
a9:c5:13:07:a9:cf:68:8d:e8:4d:a5:61:86:16:4d:8e:97:c2:
eb:4d:9d:3f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:35:40 2025 by rpki-client