Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/B_J4lMEKV6rrPulnYitu1SHmjl8.roa
File: B_J4lMEKV6rrPulnYitu1SHmjl8.roa (raw, json)
Hash identifier: cAXk9VfUrKeU85CYajYyS2kzWoufsaAQAnw372a24r4=
Subject key identifier: 07:F2:78:94:C1:0A:57:AA:EB:3E:E9:67:62:2B:6E:D5:21:E6:8E:5F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C7A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_J4lMEKV6rrPulnYitu1SHmjl8.roa
Signing time: Wed 05 Feb 2025 19:55:44 +0000
ROA not before: Wed 05 Feb 2025 19:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3194 (0xc7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 19:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=07F27894C10A57AAEB3EE967622B6ED521E68E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9b:fa:ad:23:d8:bb:f8:46:e9:fa:21:dd:1e:
c2:e3:72:fe:01:3e:28:50:a5:23:82:e2:e9:2a:16:
36:bb:a6:ec:8d:42:33:53:d8:06:6b:ef:86:bb:e8:
17:98:3f:31:13:fa:67:2b:1f:f7:16:b7:83:e3:80:
f5:03:83:8e:05:4a:21:11:dd:13:30:28:e5:84:31:
bf:5c:9f:3a:cb:06:41:23:c9:bb:ff:66:1e:64:27:
04:38:f8:e8:44:59:97:0f:da:8f:71:1d:c0:0c:ee:
cd:31:44:38:bd:be:db:8f:a3:7b:ba:13:b4:2f:87:
6a:c8:8e:60:b8:cb:c7:f3:1c:32:28:69:f8:ec:37:
8c:73:9a:97:65:56:a7:95:ef:7e:2a:90:fd:4e:ee:
74:bb:0d:20:35:41:74:5e:b0:82:6b:1b:88:18:4a:
2d:3f:a9:0b:df:32:87:a2:92:d2:48:e1:bc:7f:9d:
af:86:5b:5a:24:21:ff:e4:42:10:ce:07:6b:bb:22:
09:95:a2:30:fd:06:f9:2c:77:b6:43:be:98:c0:ca:
55:8a:56:de:ec:46:c0:f1:db:ee:58:ae:4b:bc:37:
cb:3b:a5:92:ef:e3:23:18:81:eb:a7:d3:ea:f2:8e:
4a:83:83:04:fa:d7:98:3e:10:c2:c8:63:a7:bc:61:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F2:78:94:C1:0A:57:AA:EB:3E:E9:67:62:2B:6E:D5:21:E6:8E:5F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_J4lMEKV6rrPulnYitu1SHmjl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
26:0f:d6:79:a2:ef:98:99:8d:2d:b4:c7:9f:1f:aa:ea:8f:ee:
9b:0f:d1:b6:09:61:a0:27:92:5e:d8:e1:0c:47:6c:70:98:07:
b2:74:da:78:58:ad:0b:d3:65:47:47:94:d3:10:fd:b5:00:e1:
48:26:4f:70:23:02:79:06:22:c2:ac:35:e3:7d:e6:68:9e:0b:
02:d9:d0:4c:fd:05:a9:6c:b7:5b:a4:85:b0:6d:89:b4:87:e2:
28:d4:7e:52:40:28:cb:11:30:b5:05:2e:44:b4:f6:1b:9d:b2:
5b:f9:16:57:b2:1a:71:17:59:82:c9:90:1a:f6:c8:ea:d8:f4:
57:36:6a:1e:0a:d2:6d:10:2e:63:d4:f7:0c:c4:21:6b:24:29:
6a:c3:e7:cd:71:f7:17:25:a1:24:f2:70:64:8e:f7:cc:43:ec:
cd:46:e0:03:d1:8f:8e:fa:75:9d:da:39:a7:d5:4a:af:44:63:
f0:5d:60:dc:9f:67:b2:e0:d3:89:8b:73:34:83:d7:31:78:be:
33:a2:c6:76:db:4b:92:51:be:eb:4c:5a:d3:8c:77:7e:03:e5:
c6:09:15:00:8b:ce:2a:d9:f1:27:57:ca:95:30:df:e0:87:38:
67:9a:c4:e5:49:be:ae:df:f0:ce:57:e1:f2:bf:db:23:6a:1c:
81:44:ee:0f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:27:15 2025 by rpki-client