Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A4uNfv4308EOodP-gBlRRoGVI74.roa
File: A4uNfv4308EOodP-gBlRRoGVI74.roa (raw, json)
Hash identifier: p0mvmq+F4NzpOecF8aV5qwdfP0HmDkIc2f/mwDFUpoQ=
Subject key identifier: 03:8B:8D:7E:FE:37:D3:C1:0E:A1:D3:FE:80:19:51:46:81:95:23:BE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07D8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A4uNfv4308EOodP-gBlRRoGVI74.roa
Signing time: Fri 24 Jan 2025 11:25:05 +0000
ROA not before: Fri 24 Jan 2025 11:25:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2008 (0x7d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 11:25:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=038B8D7EFE37D3C10EA1D3FE80195146819523BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:7b:cc:20:c5:7a:f7:f2:88:99:97:36:48:
4f:50:1e:83:48:e2:05:a7:2b:04:8f:36:42:cd:35:
14:ab:d3:f9:04:f8:b6:85:81:dc:56:33:ee:7f:b5:
ed:dd:fb:87:9a:29:0b:e6:02:66:ce:1b:5c:4e:db:
f2:4d:03:5f:c1:07:97:2b:fb:9a:39:27:c5:85:15:
11:c7:52:6c:1a:d9:23:48:bc:d7:44:27:e9:1d:0a:
48:85:e3:d4:6b:ea:ab:6f:34:73:dc:6b:1f:1a:88:
5c:8a:03:80:6f:fe:46:db:48:ce:eb:22:45:74:19:
41:21:7b:30:fb:a5:ef:b9:f6:e2:f5:2a:a8:d0:c8:
87:d0:0d:b8:76:21:9f:76:11:f6:d1:a6:9d:bf:01:
51:2a:5d:22:3a:f4:fd:53:02:f6:0c:b4:86:36:aa:
d1:c7:73:38:ca:c2:00:98:40:32:ed:03:d0:b4:eb:
c2:91:2a:b0:ba:5f:91:9d:58:b2:07:f3:01:d3:32:
e3:03:14:de:fd:98:c2:48:0b:b4:f9:fd:a9:f8:67:
09:f6:29:ff:ea:58:29:bb:77:7a:ba:9e:d0:6e:85:
f1:2a:d0:19:2e:b4:c8:ed:66:f9:24:41:a6:d8:7f:
88:5e:5b:57:7a:70:8b:87:b6:e2:df:5b:de:a8:f1:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8B:8D:7E:FE:37:D3:C1:0E:A1:D3:FE:80:19:51:46:81:95:23:BE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A4uNfv4308EOodP-gBlRRoGVI74.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
19:37:42:5b:8e:df:b0:89:16:54:a1:24:2f:b9:b6:a4:d7:f3:
47:98:4f:8b:c0:ee:e4:be:31:4c:31:d8:45:86:59:ff:3a:8e:
a3:eb:e9:3b:87:8b:3f:cb:2c:6a:f7:e8:d4:c4:da:ed:cd:a6:
c7:c9:73:d8:59:82:f4:94:c3:8e:38:4e:46:59:59:69:d5:fe:
b6:73:bb:06:5f:d2:76:6b:b5:40:83:e8:cf:05:09:ed:c6:dc:
21:8e:46:0d:16:d6:17:0d:df:d8:95:65:57:da:69:82:c5:58:
e0:1a:41:73:66:f8:d6:fd:a1:db:73:6e:ae:c1:3a:92:09:bd:
72:49:57:7a:a1:94:55:1a:1c:00:dc:d0:a7:b9:53:78:4d:9b:
43:1e:20:5d:c8:24:d8:26:80:a1:31:e8:e0:b8:91:d9:91:ba:
a7:86:60:a6:5d:c5:96:96:95:02:54:2c:dc:63:46:bb:0f:1b:
30:82:7a:91:98:18:fa:7a:6f:df:53:e0:21:e8:8f:6f:d5:9f:
64:17:c1:0a:7e:b4:0d:77:a5:40:5e:21:62:c5:b8:c5:1b:e4:
7d:37:6b:ef:a4:54:a8:d6:cf:9a:8a:a8:70:82:96:ed:4c:6e:
eb:38:75:57:92:2b:44:b3:61:95:ba:3d:ec:7f:19:bc:d5:ed:
d3:d5:5d:2f
-----BEGIN CERTIFICATE-----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=
Generated at Fri Jan 24 16:03:51 2025 by rpki-client on console.sobornost.net