Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/GSLWUs2nGfI0MsatpZbj4WmIG_U.roa
File: GSLWUs2nGfI0MsatpZbj4WmIG_U.roa (raw, json)
Hash identifier: kA3DzN1Gw97w14SfO0pMlB3+x2LWJpnOzm5ai3PgHpM=
Subject key identifier: 19:22:D6:52:CD:A7:19:F2:34:32:C6:AD:A5:96:E3:E1:69:88:1B:F5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A10
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GSLWUs2nGfI0MsatpZbj4WmIG_U.roa
Signing time: Thu 30 Jan 2025 09:25:29 +0000
ROA not before: Thu 30 Jan 2025 09:25:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2576 (0xa10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 09:25:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1922D652CDA719F23432C6ADA596E3E169881BF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:da:5d:0b:a5:05:cd:ee:b6:79:8e:a5:c0:9a:
31:c8:61:59:df:5d:96:1b:58:0e:a1:c4:76:34:76:
e8:59:9a:c9:0b:2f:69:15:a3:76:50:4e:59:3b:86:
42:cf:94:bf:1e:5e:a5:82:ce:61:a2:31:8e:eb:0c:
40:80:fe:bc:93:33:f1:f1:f2:f1:6a:9a:fc:17:f7:
31:a0:c8:be:fb:f9:d6:6c:54:68:f3:bd:03:ed:7f:
c1:21:5d:ae:59:27:fa:22:26:dd:48:36:a0:18:08:
3d:b1:25:d7:bd:2d:85:d0:79:4d:b5:9f:de:23:96:
48:0c:d5:02:22:f7:a9:b4:82:13:29:69:55:e8:0b:
ab:5e:ae:07:a5:6c:3b:66:b2:21:12:d6:c4:86:d2:
ed:b7:c0:e1:d7:f7:bb:65:ba:5a:43:ef:61:db:d0:
34:58:23:bb:99:38:30:c7:bf:88:fe:b7:cc:9e:0e:
d0:1a:a8:78:c4:35:0d:61:d2:c8:b4:f5:3b:b1:7a:
14:65:79:85:ad:21:89:33:f7:f6:66:28:ad:bd:6b:
78:14:a2:39:8b:be:15:83:b5:4b:5f:ad:6c:97:ac:
b7:03:32:26:7c:20:1d:15:0a:d2:30:57:66:64:9a:
d0:c6:55:c4:39:fd:53:97:49:b2:d7:fc:0d:7a:74:
55:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:22:D6:52:CD:A7:19:F2:34:32:C6:AD:A5:96:E3:E1:69:88:1B:F5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GSLWUs2nGfI0MsatpZbj4WmIG_U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:57:e2:2d:cf:d3:48:c9:36:b8:a0:b4:48:e1:a1:dd:93:f9:
6f:4f:0e:93:5a:6b:d4:38:af:93:3f:1e:7d:44:f6:7c:33:e3:
a8:1e:d6:b2:58:54:30:50:1d:6b:8a:fc:da:fa:df:41:94:f2:
4c:a1:99:c7:1e:3b:39:33:0e:2a:d1:c2:d4:38:89:97:96:98:
49:4b:c0:cc:55:1c:35:4a:c3:0a:6c:a7:b6:a3:52:1d:25:7c:
4f:81:65:36:11:ed:65:e7:8c:55:06:22:3d:7c:6a:cd:26:9a:
19:0a:2e:11:45:07:02:fe:f2:ed:64:82:90:85:f5:fa:70:16:
10:57:27:87:4f:ff:a4:07:76:bf:b8:4f:6c:e7:d3:21:1c:b5:
06:6a:10:46:99:64:1d:1e:7b:e9:39:4d:9a:ca:8d:30:e7:a5:
e4:5b:4a:04:2d:ed:dc:90:1e:30:0f:be:5a:0f:ef:ba:57:1d:
7f:b8:b2:5a:58:cc:24:04:45:26:5e:af:c9:f2:21:de:33:c6:
70:ae:50:6f:27:55:af:a2:98:5f:c0:25:b2:1f:20:af:28:8c:
2d:95:83:b7:24:02:b9:06:5b:21:ca:68:29:17:99:c1:e3:67:
f8:ea:e8:0f:38:78:a3:f1:45:00:c0:6c:e1:ae:3f:3e:72:10:
a6:33:40:86
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICChAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzAw
OTI1MjlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE5MjJENjUyQ0RBNzE5
RjIzNDMyQzZBREE1OTZFM0UxNjk4ODFCRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDU2l0LpQXN7rZ5jqXAmjHIYVnfXZYbWA6hxHY0duhZmskLL2kV
o3ZQTlk7hkLPlL8eXqWCzmGiMY7rDECA/ryTM/Hx8vFqmvwX9zGgyL77+dZsVGjz
vQPtf8EhXa5ZJ/oiJt1INqAYCD2xJde9LYXQeU21n94jlkgM1QIi96m0ghMpaVXo
C6tergelbDtmsiES1sSG0u23wOHX97tlulpD72Hb0DRYI7uZODDHv4j+t8yeDtAa
qHjENQ1h0si09TuxehRleYWtIYkz9/ZmKK29a3gUojmLvhWDtUtfrWyXrLcDMiZ8
IB0VCtIwV2ZkmtDGVcQ5/VOXSbLX/A16dFVHAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUGSLWUs2nGfI0MsatpZbj4WmIG/UwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0dTTFdVczJuR2ZJME1z
YXRwWmJqNFdtSUdfVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALRX4i3P00jJNrigtEjhod2T
+W9PDpNaa9Q4r5M/Hn1E9nwz46ge1rJYVDBQHWuK/Nr630GU8kyhmcceOzkzDirR
wtQ4iZeWmElLwMxVHDVKwwpsp7ajUh0lfE+BZTYR7WXnjFUGIj18as0mmhkKLhFF
BwL+8u1kgpCF9fpwFhBXJ4dP/6QHdr+4T2zn0yEctQZqEEaZZB0ee+k5TZrKjTDn
peRbSgQt7dyQHjAPvloP77pXHX+4slpYzCQERSZer8nyId4zxnCuUG8nVa+imF/A
JbIfIK8ojC2Vg7ckArkGWyHKaCkXmcHjZ/jq6A84eKPxRQDAbOGuPz5yEKYzQIY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:29:37 2025 by rpki-client