Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/EmdYy-3IigCLaKNtYm7pKJzbpRY.roa
File: EmdYy-3IigCLaKNtYm7pKJzbpRY.roa (raw, json)
Hash identifier: bFOZo5Duqkccd8FxYPdyb/i1HX3Ec9518xHJUdYR4OQ=
Subject key identifier: 12:67:58:CB:ED:C8:8A:00:8B:68:A3:6D:62:6E:E9:28:9C:DB:A5:16
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05AC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/EmdYy-3IigCLaKNtYm7pKJzbpRY.roa
Signing time: Sat 18 Jan 2025 16:25:20 +0000
ROA not before: Sat 18 Jan 2025 16:25:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 16:25:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=126758CBEDC88A008B68A36D626EE9289CDBA516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:13:9e:ab:d5:56:8b:17:a5:18:7d:c6:f8:89:
56:d4:21:aa:c5:ff:86:59:00:cd:c7:14:42:7d:d0:
d3:ce:45:fb:16:9f:61:cb:ae:04:0d:02:51:85:d6:
70:c0:45:ff:28:c6:2b:41:c0:00:79:37:89:c5:45:
70:67:2f:bc:8f:5a:ae:d8:d8:f6:44:9b:0d:cc:ce:
9f:78:a4:3c:05:50:d7:4f:17:c3:3a:dc:fd:6f:bf:
18:b6:3b:46:e6:5a:b8:1c:58:95:44:82:5c:74:49:
1f:8f:44:21:9b:fe:be:f4:91:c3:98:f2:20:d9:5d:
94:97:59:02:b5:21:ef:53:f3:8c:e7:87:32:3b:66:
92:73:5c:3b:43:4f:74:1e:fa:db:53:47:70:92:d8:
bc:f1:58:44:5a:9f:2f:45:0d:68:73:31:2b:fd:83:
55:d1:ff:36:8b:35:21:47:d1:93:0a:55:5a:c9:7e:
c4:bc:34:b0:4e:68:1a:09:e9:d1:e5:05:e7:1d:39:
25:f7:ef:ba:18:fe:51:53:7f:a2:d5:96:ff:e2:e2:
5b:21:3b:23:be:c7:cd:d6:92:46:9a:17:c7:4a:59:
62:36:bb:6f:fc:6b:60:c8:5d:c9:74:c7:61:5d:7b:
7a:dd:b5:ee:a4:c6:8c:4c:93:3e:0a:c6:0a:e7:ff:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:58:CB:ED:C8:8A:00:8B:68:A3:6D:62:6E:E9:28:9C:DB:A5:16
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/EmdYy-3IigCLaKNtYm7pKJzbpRY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:00:64:5f:bd:35:54:be:75:e0:16:3e:60:ec:d1:ec:2d:0f:
21:c6:9b:d6:6c:53:b3:2a:60:b9:d6:bf:45:cd:26:7b:cb:d4:
18:00:fe:b0:52:9c:33:9b:55:c3:ac:fa:f2:f6:2f:ba:17:1a:
6c:a5:31:cc:29:b2:96:92:7d:4b:16:30:c9:7c:ef:2d:ac:c6:
70:f0:8a:91:0a:23:65:a5:57:3d:ec:44:70:08:12:77:7b:54:
6c:39:f4:c4:12:db:4c:eb:4d:d0:0e:0c:02:65:5d:12:51:23:
0e:39:04:84:60:5d:02:7a:3b:b2:42:82:66:69:fa:d3:7c:59:
be:a6:7b:d5:ef:74:69:bf:b5:d1:ba:8f:f0:4d:d2:66:55:c1:
ab:d1:8d:bd:44:4f:b0:5d:b1:aa:fc:bb:9a:95:3d:a3:77:42:
9c:73:b0:6c:1f:d3:4a:b6:88:de:7a:59:7f:22:bd:58:a8:11:
d7:80:61:a6:a7:ac:44:b5:96:dc:0b:01:0c:b5:38:66:3a:a4:
83:46:20:5d:e3:dd:22:e4:ed:f0:70:50:6e:0b:4f:7a:48:2c:
e7:52:12:1d:f3:b2:87:d4:25:b1:d4:bf:e9:4b:63:4b:f8:6f:
d6:54:d1:17:49:7c:ac:e8:13:cd:7e:4c:09:51:a7:85:21:ad:
ad:59:c7:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:24 2025 by rpki-client