Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/tmdzuGN1PR6yEaesC74D35FDY5w.roa
File: tmdzuGN1PR6yEaesC74D35FDY5w.roa (raw, json)
Hash identifier: I4o3B1UwO9R67gPjnRgcp4il9dftB6exnR57BgJDEro=
Subject key identifier: B6:67:73:B8:63:75:3D:1E:B2:11:A7:AC:0B:BE:03:DF:91:43:63:9C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06D4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/tmdzuGN1PR6yEaesC74D35FDY5w.roa
Signing time: Tue 21 Jan 2025 18:26:18 +0000
ROA not before: Tue 21 Jan 2025 18:26:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1748 (0x6d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 18:26:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B66773B863753D1EB211A7AC0BBE03DF9143639C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:19:c1:88:97:4b:33:a2:2c:1d:6d:c1:b0:
6b:8b:20:29:10:95:c7:e3:6d:d9:05:60:94:d4:26:
a5:5d:04:62:a2:d3:e5:e4:2d:06:db:d7:79:40:fa:
fb:3f:e7:fa:5f:a4:a6:a7:9b:f4:b0:e7:6a:99:f1:
54:f9:41:1e:e1:12:e9:a2:db:52:03:cc:3b:bd:2e:
b5:84:3d:5b:0c:d2:1e:bf:a0:4a:52:46:c7:82:cb:
38:87:55:49:3c:ca:b5:79:c5:12:c2:98:19:bb:9d:
d4:de:35:30:08:da:64:bb:ae:b9:e6:95:60:b7:4c:
a1:96:54:5b:35:d5:f9:09:c0:75:f2:e4:32:cf:8b:
1a:15:07:79:9d:f9:23:fb:87:ed:9d:08:80:52:5c:
39:5e:8b:37:24:9d:7c:cb:f4:9c:9b:91:df:41:64:
b3:61:55:7d:ad:c9:cc:0e:b1:10:f6:55:e3:9e:44:
5b:f4:4c:79:eb:5f:ce:3a:11:e0:ad:63:d4:29:ea:
53:2a:05:86:7f:d2:4c:45:51:a5:0c:fc:b2:9c:31:
74:68:b7:71:f4:9d:b5:4c:f8:30:f5:ff:b2:37:2a:
74:f7:80:40:5e:1d:d7:7a:cd:11:30:fd:27:3c:29:
ae:6e:14:2d:d7:18:e0:eb:9d:3a:2c:78:bd:49:0d:
23:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:67:73:B8:63:75:3D:1E:B2:11:A7:AC:0B:BE:03:DF:91:43:63:9C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/tmdzuGN1PR6yEaesC74D35FDY5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
14:d5:5a:dc:e4:9c:77:3a:50:39:64:cb:f8:5b:f2:01:e8:2e:
50:f6:03:bc:9e:a5:e1:90:2f:b9:2c:01:ee:c8:72:58:24:db:
cf:e5:d6:45:fe:11:92:a3:ba:91:5d:7e:34:2f:eb:a4:2f:37:
21:f0:6f:2f:9e:c1:fe:1a:de:f4:15:05:d9:62:d9:4f:fd:85:
21:41:64:0c:6b:70:38:95:b7:94:4e:7a:b8:25:a7:57:7d:bc:
4e:1e:b8:fa:6a:ec:dc:b6:84:c6:68:7d:ec:e2:80:6b:26:58:
69:1c:be:c4:c8:4c:de:ce:a3:19:ae:50:30:de:c5:94:fc:e9:
7f:1c:44:81:ec:7d:c8:6f:2f:d8:ad:71:df:10:42:94:59:5e:
12:8f:ae:e9:be:67:e1:46:e3:75:53:f9:fe:01:74:ad:a9:20:
6f:15:b3:56:2d:7e:0f:47:8c:2c:31:4f:b6:f7:8c:54:9e:85:
f4:21:7f:df:32:eb:44:28:b2:db:f6:24:98:f8:c4:3c:d4:dc:
ef:99:36:37:56:32:6f:79:0d:ec:65:20:11:9c:94:2e:62:6d:
1e:c1:2d:3b:af:ab:06:fa:47:dc:52:7a:65:c3:cf:32:c1:9b:
9b:7b:68:e7:dd:c6:b2:2f:23:4c:7e:68:ba:05:d9:20:35:d7:
db:06:35:4e
-----BEGIN CERTIFICATE-----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=
Generated at Tue Jan 21 23:32:12 2025 by rpki-client on console.sobornost.net