Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7XiruxZAWaWsBUxnQ4NqtIY7sLo.roa
File: 7XiruxZAWaWsBUxnQ4NqtIY7sLo.roa (raw, json)
Hash identifier: tIHHthy0b3ZYJcJhegoxXulnZzJz5CZeq7YpaE+r9HA=
Subject key identifier: ED:78:AB:BB:16:40:59:A5:AC:05:4C:67:43:83:6A:B4:86:3B:B0:BA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 057E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7XiruxZAWaWsBUxnQ4NqtIY7sLo.roa
Signing time: Sat 18 Jan 2025 04:54:48 +0000
ROA not before: Sat 18 Jan 2025 04:54:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1406 (0x57e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 04:54:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED78ABBB164059A5AC054C6743836AB4863BB0BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:b0:4d:30:bf:d8:d4:ae:c5:b5:a3:25:95:
eb:e7:69:36:06:78:09:04:0c:e4:2e:3b:d9:95:f7:
0b:5a:6f:d5:7b:9a:df:77:17:ac:e1:31:26:65:51:
b9:e9:61:f7:cf:ea:3a:5a:3b:cf:02:4b:fe:e1:e2:
0a:c1:ce:32:fd:2a:10:ed:64:89:6e:41:93:64:72:
20:5a:9d:ff:03:34:96:5f:8f:7e:58:ed:9f:cb:04:
47:a6:49:e4:61:4c:4a:88:cb:6c:f5:a7:de:04:52:
95:92:69:d5:c2:f6:ed:28:5f:e0:fe:71:f5:f0:34:
a4:19:1d:86:b3:d6:1b:06:50:1e:31:30:57:7e:61:
f1:dd:e8:55:84:1c:8b:c9:dd:50:d4:46:6c:9a:a2:
76:30:28:9c:9f:1d:22:06:1f:ff:9a:dd:f1:8d:fa:
36:d5:ce:79:78:95:7a:37:b0:ca:cf:16:d7:a5:c6:
94:fb:73:43:7e:8e:b7:4a:e3:7c:66:99:6b:02:7e:
1d:ce:4a:62:20:62:90:12:4d:9d:73:b5:f5:5b:33:
de:6f:a8:51:82:2f:73:75:94:5f:71:25:0f:9b:ff:
8c:70:bb:3e:cf:97:ec:dd:7d:04:2b:c3:cb:71:5a:
06:2e:1f:5f:0d:7d:36:c2:f2:01:fd:f6:1a:87:4e:
e8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:78:AB:BB:16:40:59:A5:AC:05:4C:67:43:83:6A:B4:86:3B:B0:BA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7XiruxZAWaWsBUxnQ4NqtIY7sLo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
86:ea:57:74:2e:8f:a9:07:01:cd:93:35:ad:ad:c0:0e:31:cd:
56:cf:4d:e2:83:96:56:84:41:b0:9a:ed:15:c1:aa:f6:c1:20:
90:0b:b5:68:d3:dc:3a:7b:2b:b1:cf:35:77:05:bc:d2:fe:f7:
64:fd:21:ea:e8:a8:11:a8:d6:3f:21:84:c4:c2:f8:c8:43:56:
66:84:d5:48:f3:1f:c6:99:1c:b3:6f:53:5a:5a:3d:9a:54:f9:
01:e7:70:41:ce:ca:00:05:fe:2d:98:a6:69:89:ce:60:40:05:
36:7a:37:02:e4:ef:af:e1:7c:af:77:12:95:7a:b3:0c:51:20:
7f:c0:83:56:11:45:85:2e:a5:7b:12:f0:f4:97:b5:07:c2:6e:
f8:a5:3d:cc:65:93:8e:06:50:f2:21:22:51:4e:46:33:64:c2:
35:1d:3e:24:46:75:62:08:44:b2:33:b5:f0:f9:71:c7:2b:b1:
99:98:64:99:bf:4a:9e:ba:34:a7:41:56:35:5e:0b:5a:6e:f3:
14:e5:69:b9:f2:f8:05:aa:71:72:01:2f:91:e6:c8:5a:a0:3a:
59:0d:0d:f4:44:9c:2e:87:c0:89:b8:8d:bb:ac:6b:49:96:5f:
85:7b:f8:3f:aa:98:d2:d7:db:40:28:1a:8c:c9:b0:d3:18:28:
5e:16:66:4d
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTgw
NDU0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVENzhBQkJCMTY0MDU5
QTVBQzA1NEM2NzQzODM2QUI0ODYzQkIwQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+ZbBNML/Y1K7FtaMllevnaTYGeAkEDOQuO9mV9wtab9V7mt93
F6zhMSZlUbnpYffP6jpaO88CS/7h4grBzjL9KhDtZIluQZNkciBanf8DNJZfj35Y
7Z/LBEemSeRhTEqIy2z1p94EUpWSadXC9u0oX+D+cfXwNKQZHYaz1hsGUB4xMFd+
YfHd6FWEHIvJ3VDURmyaonYwKJyfHSIGH/+a3fGN+jbVznl4lXo3sMrPFtelxpT7
c0N+jrdK43xmmWsCfh3OSmIgYpASTZ1ztfVbM95vqFGCL3N1lF9xJQ+b/4xwuz7P
l+zdfQQrw8txWgYuH18NfTbC8gH99hqHTugvAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU7XiruxZAWaWsBUxnQ4NqtIY7sLowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzdYaXJ1eFpBV2FXc0JV
eG5RNE5xdElZN3NMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIbqV3Quj6kHAc2TNa2twA4x
zVbPTeKDllaEQbCa7RXBqvbBIJALtWjT3Dp7K7HPNXcFvNL+92T9IeroqBGo1j8h
hMTC+MhDVmaE1UjzH8aZHLNvU1paPZpU+QHncEHOygAF/i2YpmmJzmBABTZ6NwLk
76/hfK93EpV6swxRIH/Ag1YRRYUupXsS8PSXtQfCbvilPcxlk44GUPIhIlFORjNk
wjUdPiRGdWIIRLIztfD5cccrsZmYZJm/Sp66NKdBVjVeC1pu8xTlabny+AWqcXIB
L5HmyFqgOlkNDfREnC6HwIm4jbusa0mWX4V7+D+qmNLX20AoGozJsNMYKF4WZk0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:45 2025 by rpki-client