Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/1hvP6VnNhckBRePU9KBnP8bZXw0.roa
File: 1hvP6VnNhckBRePU9KBnP8bZXw0.roa (raw, json)
Hash identifier: PbPaskbWFCUTJYV7JyLaCffe7R2+HifMkKUxkCYrpCI=
Subject key identifier: D6:1B:CF:E9:59:CD:85:C9:01:45:E3:D4:F4:A0:67:3F:C6:D9:5F:0D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0EA2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1hvP6VnNhckBRePU9KBnP8bZXw0.roa
Signing time: Mon 10 Mar 2025 15:09:36 +0000
ROA not before: Mon 10 Mar 2025 15:09:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.0.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3746 (0xea2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Mar 10 15:09:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D61BCFE959CD85C90145E3D4F4A0673FC6D95F0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0b:08:0f:29:09:70:13:3f:e1:c0:a6:47:7f:
19:d2:1d:d1:ab:d3:8a:4f:0b:6f:a0:19:9b:e5:30:
c7:aa:f9:59:15:fe:42:9e:d0:11:01:36:68:25:12:
d2:af:dc:2e:98:de:ec:a1:4d:4f:16:f9:cc:f4:26:
fa:16:5c:21:ee:cd:6e:5c:7d:aa:cd:b7:66:c7:8e:
06:d6:b5:b4:9e:0f:ab:3b:a8:66:6d:37:45:1b:bb:
6e:17:46:bc:d6:e0:c2:87:b3:56:ea:b4:32:14:ab:
6d:5a:3f:ce:52:32:01:4f:fe:f9:dc:7e:9a:a9:ea:
4e:70:38:df:0a:b4:e0:00:e0:49:77:3d:1d:64:08:
d2:7f:da:91:e5:c8:5e:51:7e:9f:2b:a5:37:4e:7c:
be:f9:34:71:17:db:de:86:ef:da:d3:88:82:2f:34:
04:bf:b2:cf:c3:9e:76:f7:fe:6c:d6:9b:53:65:5e:
2e:7b:75:39:20:4f:f8:9c:72:07:51:3e:0a:07:ed:
c0:37:c5:cf:2f:31:dc:64:8c:2b:8e:23:98:78:97:
25:26:5e:21:ff:70:cd:6b:9b:67:df:dd:b5:71:df:
06:2f:f2:ca:ab:b5:f5:ea:19:5c:b3:b2:35:fd:47:
b1:ea:09:ca:2a:84:36:3f:19:31:c5:67:7a:6a:9a:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1B:CF:E9:59:CD:85:C9:01:45:E3:D4:F4:A0:67:3F:C6:D9:5F:0D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1hvP6VnNhckBRePU9KBnP8bZXw0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.0.0/18
Signature Algorithm: sha256WithRSAEncryption
26:1a:d8:bc:c3:90:8f:bf:f2:14:66:92:db:44:fa:48:bb:cd:
5e:d7:f9:e9:00:be:6f:c5:c7:65:76:78:58:25:51:84:59:c2:
75:bf:10:52:aa:76:19:4e:b9:8e:90:76:d4:73:0a:72:8b:48:
58:3d:9c:a3:ad:ed:7d:5f:e6:96:aa:e3:c2:85:39:bc:6d:68:
ef:6b:c7:d0:63:f3:11:47:f8:70:49:cd:3a:f7:e9:73:0e:1d:
28:06:b1:d5:26:c8:e1:b9:2b:46:7b:3b:37:1f:2f:ad:28:0a:
32:65:7d:c8:b1:0b:a1:f8:71:10:d4:da:7d:0d:e7:5d:4b:a6:
b0:fc:b2:30:9c:41:4f:a9:ec:f2:fa:3d:cf:6e:8b:56:d1:4d:
f2:f2:31:2e:56:70:5a:38:bb:1a:05:ae:63:3f:80:68:66:58:
98:c2:29:d2:74:80:d4:e4:03:28:19:2f:f1:28:37:77:da:a5:
a7:9a:e8:5f:17:e9:51:8c:1d:6c:e4:3a:94:05:33:73:55:80:
fb:d6:97:d8:25:63:ee:fc:89:96:9f:ae:7a:b6:f6:d6:a1:50:
d5:52:7d:be:94:81:19:8f:a7:31:4d:c8:24:4b:ce:e9:78:28:
63:97:43:36:f5:d2:e4:d5:15:b6:51:ac:12:bc:4d:75:53:75:
f2:90:74:30
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDqIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAzMTAx
NTA5MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ2MUJDRkU5NTlDRDg1
QzkwMTQ1RTNENEY0QTA2NzNGQzZEOTVGMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpCwgPKQlwEz/hwKZHfxnSHdGr04pPC2+gGZvlMMeq+VkV/kKe
0BEBNmglEtKv3C6Y3uyhTU8W+cz0JvoWXCHuzW5cfarNt2bHjgbWtbSeD6s7qGZt
N0Ubu24XRrzW4MKHs1bqtDIUq21aP85SMgFP/vncfpqp6k5wON8KtOAA4El3PR1k
CNJ/2pHlyF5Rfp8rpTdOfL75NHEX296G79rTiIIvNAS/ss/Dnnb3/mzWm1NlXi57
dTkgT/iccgdRPgoH7cA3xc8vMdxkjCuOI5h4lyUmXiH/cM1rm2ff3bVx3wYv8sqr
tfXqGVyzsjX9R7HqCcoqhDY/GTHFZ3pqmvltAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQU1hvP6VnNhckBRePU9KBnP8bZXw0wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzFodlA2Vm5OaGNrQlJl
UFU5S0JuUDhiWlh3MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZxHwAwDQYJKoZIhvcNAQELBQADggEBACYa2LzDkI+/8hRmkttE+ki7zV7X+ekA
vm/Fx2V2eFglUYRZwnW/EFKqdhlOuY6QdtRzCnKLSFg9nKOt7X1f5paq48KFObxt
aO9rx9Bj8xFH+HBJzTr36XMOHSgGsdUmyOG5K0Z7OzcfL60oCjJlfcixC6H4cRDU
2n0N511LprD8sjCcQU+p7PL6Pc9ui1bRTfLyMS5WcFo4uxoFrmM/gGhmWJjCKdJ0
gNTkAygZL/EoN3fapaea6F8X6VGMHWzkOpQFM3NVgPvWl9glY+78iZafrnq29tah
UNVSfb6UgRmPpzFNyCRLzul4KGOXQzb10uTVFbZRrBK8TXVTdfKQdDA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:46 2025 by rpki-client