Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/BbadLeHsniayAeM5Jp6FXyN1Gmw.roa
File: BbadLeHsniayAeM5Jp6FXyN1Gmw.roa (raw, json)
Hash identifier: os5uGHVFSqzovqHAFxujz3iUYoJ2dB31cm+8YhgVO04=
Subject key identifier: 05:B6:9D:2D:E1:EC:9E:26:B2:01:E3:39:26:9E:85:5F:23:75:1A:6C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C64
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BbadLeHsniayAeM5Jp6FXyN1Gmw.roa
Signing time: Wed 05 Feb 2025 14:25:44 +0000
ROA not before: Wed 05 Feb 2025 14:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3172 (0xc64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 14:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=05B69D2DE1EC9E26B201E339269E855F23751A6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:09:b4:54:a0:0d:f6:18:c6:d2:c5:aa:55:
36:45:34:4a:43:8d:60:56:5b:09:6a:8f:cb:f6:0c:
9f:86:92:2c:a3:67:2d:0a:4e:81:6e:57:c5:b0:ba:
5c:47:f2:fc:41:e2:26:53:16:87:8b:d6:57:e9:c2:
98:6d:67:0b:51:45:f6:79:83:ac:d6:62:02:e7:c5:
c1:dd:a5:0d:33:08:60:d4:45:84:86:7f:24:77:22:
a2:68:06:94:a1:f5:f7:77:50:45:45:50:e6:2d:94:
d5:46:41:1f:85:20:8f:89:2a:07:a9:8a:c1:b5:a0:
1e:ed:7e:31:d5:3d:a5:73:76:89:41:c4:e4:25:85:
99:e1:00:c9:15:3e:ac:29:9f:63:b3:95:6f:95:b6:
e2:fa:8d:f0:71:78:e7:19:68:d3:8f:91:77:3c:65:
f8:1c:cf:5f:75:d0:38:a8:82:0b:45:4d:31:6d:f7:
75:57:ae:e1:80:28:30:ce:d1:56:fc:a3:56:ba:ae:
a5:37:ce:3d:b8:dd:11:e4:eb:74:cd:b1:29:9d:10:
a0:30:30:4a:e9:d7:d8:c9:20:cd:d6:83:58:d4:e0:
2b:b5:da:fc:b6:06:56:b3:e1:13:04:3d:f3:38:65:
37:06:50:f7:ab:74:43:65:9a:37:f5:e2:d4:4d:d4:
74:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B6:9D:2D:E1:EC:9E:26:B2:01:E3:39:26:9E:85:5F:23:75:1A:6C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/BbadLeHsniayAeM5Jp6FXyN1Gmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
87:58:b8:1c:a5:df:bb:d3:d9:37:fa:79:7c:c7:c1:d3:f6:2e:
3e:e4:88:2b:75:fd:b7:a9:b2:a8:ef:81:22:88:41:cc:d0:dd:
9a:37:0f:11:4b:0b:a8:55:0e:95:76:2c:4a:8d:4b:e4:53:81:
6e:59:7a:3b:73:f4:1e:59:a9:f7:26:13:e7:ce:2b:fc:f1:9c:
fb:f8:3a:a6:4b:0f:3e:36:86:25:e4:c4:aa:91:b0:b6:10:55:
5d:f9:c9:ff:12:62:fa:09:01:b9:49:66:de:f7:2d:51:28:a9:
b9:56:53:b1:72:a9:75:62:e7:b0:13:bf:25:54:13:ba:b5:fc:
3b:c6:d9:2b:b3:82:5b:41:fb:13:f3:fb:67:74:6c:d4:58:81:
51:a3:08:2d:27:64:03:39:42:25:a7:14:3e:d4:5e:3b:75:c0:
44:e0:0c:3b:c6:37:3b:4e:97:3d:fc:6e:a2:86:0d:42:32:79:
7b:fb:df:1b:b5:0f:2d:6e:74:01:50:dd:ef:95:da:23:ca:aa:
9f:30:cd:78:3a:96:bc:41:3d:54:18:33:d7:36:ee:19:d2:41:
66:b0:8f:07:d8:f3:db:26:46:e6:da:6b:f7:39:e5:c6:a9:c9:
c1:45:ec:ea:4e:da:bf:d8:10:d5:bd:1e:b7:14:29:0d:0c:23:
b7:a1:fb:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:55 2025 by rpki-client