Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/FFZqiWF1mgeJ4-FnxKvTiTR_5gM.roa
File: FFZqiWF1mgeJ4-FnxKvTiTR_5gM.roa (raw, json)
Hash identifier: K/RVa6DwMUjkugnNy6sJJyI1wgqvWLdAJ/a1Q/iY2ug=
Subject key identifier: 14:56:6A:89:61:75:9A:07:89:E3:E1:67:C4:AB:D3:89:34:7F:E6:03
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 076E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FFZqiWF1mgeJ4-FnxKvTiTR_5gM.roa
Signing time: Thu 23 Jan 2025 08:55:53 +0000
ROA not before: Thu 23 Jan 2025 08:55:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1902 (0x76e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 08:55:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=14566A8961759A0789E3E167C4ABD389347FE603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:73:d5:f2:2f:f1:22:50:bb:52:4e:85:ca:45:
19:f7:df:ac:d0:e6:d7:14:65:34:b5:64:dc:70:63:
11:21:82:92:0d:e0:6a:5e:a6:52:04:10:de:a1:d2:
3b:0b:c3:b4:0f:6e:fb:13:85:68:35:a5:01:76:82:
09:d8:34:e8:b8:21:d1:cf:26:df:e5:bf:7a:f7:a5:
29:0f:16:93:4f:3e:51:d2:57:0f:7e:4c:2d:cf:5f:
76:8c:a0:48:7a:46:df:71:7c:5b:20:68:b0:ac:46:
c5:e1:67:bc:e0:2a:4e:20:dc:d6:32:40:73:35:72:
8a:64:3d:1e:5d:8e:9f:9f:e6:4e:4c:0a:64:71:6a:
05:e8:60:6a:2f:39:9f:e6:61:ea:d4:f2:5b:70:32:
b2:0c:61:eb:52:2f:ec:b8:64:cc:a3:be:da:41:d0:
22:3f:57:3e:bb:df:4f:43:96:71:d5:44:a2:0a:21:
62:36:46:af:33:c0:53:7f:fc:00:30:e8:74:b2:8b:
b8:40:eb:68:26:e5:f3:11:a9:55:90:52:eb:ea:a2:
a3:23:4e:51:20:fc:dd:77:5e:45:07:88:38:2d:c5:
18:a0:24:d7:d1:90:71:7d:2c:46:16:87:28:33:1b:
dd:ee:72:05:17:ef:71:f7:60:8e:8f:34:6e:30:33:
ec:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:6A:89:61:75:9A:07:89:E3:E1:67:C4:AB:D3:89:34:7F:E6:03
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FFZqiWF1mgeJ4-FnxKvTiTR_5gM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
af:cb:31:93:67:aa:52:71:16:39:01:7f:c0:41:c8:b9:2f:9b:
b9:31:3c:43:3a:e2:63:47:e1:31:0c:d9:14:b2:6e:cb:ce:55:
c1:55:ca:b0:03:59:26:2e:1f:e1:65:4f:18:14:9f:d9:22:9e:
71:52:df:f6:29:c9:62:8a:1c:ee:bb:2c:cf:c0:3f:71:ce:83:
dd:1c:9b:51:a0:ef:0e:23:16:06:5d:58:38:a9:2e:69:6b:25:
79:37:65:f8:45:3d:f2:8c:42:f1:10:95:1d:f1:76:d1:a3:e4:
b8:80:bb:fc:65:41:57:a7:5e:5e:d4:ef:f5:d3:d3:de:db:f4:
42:84:6d:ef:fb:8b:0d:38:cc:84:51:0f:08:1d:bc:e0:20:90:
ed:4e:03:e2:4f:ea:b6:27:14:10:c3:37:48:90:dd:27:45:3a:
2c:a2:f8:9c:1c:bb:9c:f3:de:ed:cf:6e:f8:d3:e2:a3:f7:fa:
49:fb:b6:67:4e:a8:94:3f:79:6c:a6:aa:86:f3:3d:e6:f7:62:
62:32:95:73:78:49:94:30:99:c6:8b:0a:8f:09:b5:ab:5d:e3:
a9:2f:9f:e8:d5:74:1b:52:98:c1:7f:e9:09:0d:56:3e:a0:aa:
05:30:eb:a6:1b:ab:b0:69:10:66:de:d8:3d:c6:cb:5e:1f:cf:
ad:d9:24:51
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:15 2025 by rpki-client