Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/CzQgLypyrpUWZUa4cEFEdUjxKz0.roa
File: CzQgLypyrpUWZUa4cEFEdUjxKz0.roa (raw, json)
Hash identifier: cdgzeJrYU6rGHEbsnzz0Z8vJS08sviY4xUiQYnRWV34=
Subject key identifier: 0B:34:20:2F:2A:72:AE:95:16:65:46:B8:70:41:44:75:48:F1:2B:3D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0618
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CzQgLypyrpUWZUa4cEFEdUjxKz0.roa
Signing time: Sun 19 Jan 2025 19:24:51 +0000
ROA not before: Sun 19 Jan 2025 19:24:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1560 (0x618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 19:24:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0B34202F2A72AE95166546B87041447548F12B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:25:36:e8:94:18:45:d7:c0:6a:e5:aa:e4:
48:8d:0f:b9:97:a3:b6:4a:a7:e9:28:5d:39:57:a0:
01:db:7a:0e:ff:60:9e:c5:2b:bc:6c:64:88:59:1d:
7e:15:53:f2:5c:7f:28:18:1d:da:7a:39:4a:f4:dc:
ab:91:3f:d9:67:82:f2:d4:11:42:72:5e:1b:21:18:
63:e9:ae:30:dc:f5:a9:1e:6f:5a:9a:60:4e:ef:68:
83:f6:11:20:70:f8:e7:5a:3e:c8:c0:1f:a4:be:c1:
3d:e3:ba:c7:76:ba:31:df:2b:70:c7:c9:83:ca:08:
3d:02:43:ef:00:0d:4e:9a:21:a5:9b:f5:d8:7a:0b:
c7:2a:5b:cd:d9:2e:c6:46:d5:93:83:14:2e:c3:25:
c1:c1:2b:cd:00:37:81:ce:f7:e5:5d:4a:84:b8:df:
de:45:7b:32:aa:e5:42:0d:b7:97:09:6b:f9:97:84:
71:40:ff:5b:30:fb:03:a9:8e:97:69:1c:14:74:69:
b0:34:ec:97:2a:41:fe:1e:f8:fc:15:c9:49:71:31:
0a:db:e9:79:38:1e:ec:1e:18:38:96:0c:10:d5:5d:
58:44:b0:82:2b:d3:de:6a:32:ed:b0:37:ae:1e:0b:
d3:83:c3:30:2a:ec:7a:f5:17:1c:20:45:94:30:2e:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:34:20:2F:2A:72:AE:95:16:65:46:B8:70:41:44:75:48:F1:2B:3D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/CzQgLypyrpUWZUa4cEFEdUjxKz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
16:ae:d3:be:f7:59:b7:fb:9a:c8:f5:0a:94:93:96:f0:a9:27:
fc:67:54:b3:e5:96:78:34:37:44:5b:c0:e0:ff:3d:4e:40:e0:
e3:97:8b:7f:76:6f:85:d3:d9:33:42:68:45:f4:73:c0:b5:f0:
22:e0:ec:87:89:8f:56:96:53:20:bf:f1:74:e4:30:e6:da:31:
b2:1a:40:ee:0f:9c:37:b2:90:5a:82:c3:ad:af:51:e3:d0:d5:
78:c9:6f:98:59:01:9b:85:c1:d4:74:cf:01:a2:30:27:e7:49:
16:af:a0:45:62:26:81:fc:27:7d:aa:ea:3e:7d:bf:c4:5d:d0:
95:8a:e5:ea:c8:63:97:23:bc:76:7d:fc:54:23:ab:c7:05:fd:
a2:4d:32:5c:4d:25:d5:5d:6f:8b:4c:c0:00:05:48:56:88:a6:
98:f2:b5:8c:be:41:59:f0:cf:05:f6:e1:92:84:ad:7e:7b:e8:
10:b5:33:6d:6e:54:4b:42:fe:ee:69:5f:93:61:29:d5:12:2f:
09:d0:c3:53:3f:77:5a:99:74:e3:46:8e:d4:69:e8:08:23:cf:
86:3e:e1:9f:28:96:99:41:ed:ae:ca:e5:99:bc:63:48:55:7d:
e0:35:40:42:22:98:83:81:87:e7:c1:c7:8e:9f:35:81:27:f2:
5e:12:08:94
-----BEGIN CERTIFICATE-----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=
Generated at Sun Jan 19 22:47:46 2025 by rpki-client on console.sobornost.net