Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/jXxuwRnDfsM8umQ-_xfXtVykOz8.roa
File: jXxuwRnDfsM8umQ-_xfXtVykOz8.roa (raw, json)
Hash identifier: MenPzTBkE56RZQDDkurCOFCB9sJUsirVh5n67ooWd1Y=
Subject key identifier: 8D:7C:6E:C1:19:C3:7E:C3:3C:BA:64:3E:FF:17:D7:B5:5C:A4:3B:3F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 057A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jXxuwRnDfsM8umQ-_xfXtVykOz8.roa
Signing time: Sat 18 Jan 2025 03:54:46 +0000
ROA not before: Sat 18 Jan 2025 03:54:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1402 (0x57a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 03:54:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8D7C6EC119C37EC33CBA643EFF17D7B55CA43B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:0e:4e:a3:7e:50:c4:96:6d:0c:51:dc:a1:
e9:8a:bf:a9:29:05:a6:50:93:a3:85:35:89:bf:3a:
f8:d4:4e:0e:63:4e:31:06:99:e3:cc:67:83:fd:82:
92:c2:25:b8:e8:32:ad:74:e6:2a:fa:96:8c:0c:c7:
2c:d9:0d:14:cb:2b:24:fc:04:80:6d:26:cc:e0:5e:
e2:4e:cf:f5:26:63:cd:1f:96:8f:3d:42:e5:5c:71:
0a:36:b6:79:23:22:85:05:e1:73:4f:4d:b3:d7:64:
1f:16:62:6a:58:ab:09:17:76:8a:e6:cb:7a:91:4f:
fd:bf:18:16:87:96:81:18:76:fe:1f:a8:7c:5f:d7:
6a:e7:d0:f6:22:c6:7e:75:52:da:23:7a:d4:36:69:
e2:da:d8:66:2f:c0:b4:0a:5c:85:b7:1c:9b:5d:fd:
34:30:bf:9c:1f:57:b5:d9:13:83:20:75:28:56:1e:
61:07:c4:b6:26:a4:94:32:c0:e3:ab:4b:20:3f:5e:
a2:1c:26:9f:9b:1e:2c:02:b3:f1:93:ac:3a:5f:95:
4f:8a:ba:e6:96:fa:e6:c2:bb:19:82:93:91:e2:ba:
a9:03:b9:32:36:c5:12:26:8e:52:4e:73:6e:c7:12:
54:3e:48:24:d2:e4:9a:e8:31:40:57:b2:33:30:29:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7C:6E:C1:19:C3:7E:C3:3C:BA:64:3E:FF:17:D7:B5:5C:A4:3B:3F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jXxuwRnDfsM8umQ-_xfXtVykOz8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:93:6e:e8:68:16:b1:70:c7:a1:c8:4c:b1:48:e7:6e:8f:52:
0f:0d:d5:d7:db:9b:97:c6:ed:59:b4:51:00:97:2c:df:e1:96:
7f:4e:79:75:97:59:3e:2d:18:61:5f:ae:75:c2:9d:0a:0f:5b:
bf:d6:f1:95:12:39:77:ba:fc:d8:81:b1:97:01:34:14:ac:f7:
fd:ef:6a:8b:8a:12:f6:76:62:f2:c2:db:9b:47:3e:9a:24:b9:
f0:cd:9f:44:60:48:72:af:bb:90:70:07:70:4e:ed:ed:a0:38:
f1:ce:66:7f:21:42:16:e9:f4:d1:69:eb:c0:7a:32:3e:22:c2:
2f:2b:80:42:9a:10:9c:e8:30:8b:81:c0:6d:b6:90:ca:15:d4:
7e:bc:72:49:b5:1b:ce:c5:cf:3d:2e:4a:74:8a:44:b8:a8:96:
79:87:e2:93:3b:15:08:0c:be:a4:ee:b5:ad:bc:94:03:45:f7:
59:59:a9:fa:ee:8c:00:34:6e:86:b2:02:8d:5f:64:1e:3a:9c:
af:a5:7c:a0:8a:83:82:09:c1:dd:a5:45:35:d3:15:ed:8f:31:
f9:b4:a7:f9:23:68:2a:28:4b:07:a3:25:64:1f:65:68:d1:a2:
e6:dc:b7:19:a8:e4:7e:31:5a:48:fe:17:44:5e:d9:b2:9d:f4:
85:91:d9:50
-----BEGIN CERTIFICATE-----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=
Generated at Sat Jan 18 09:42:18 2025 by rpki-client on console.sobornost.net