Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Gbo_erBiaqPrTHauQi4iHfPvmK4.roa
File: Gbo_erBiaqPrTHauQi4iHfPvmK4.roa (raw, json)
Hash identifier: jHx0Vxj7CUw741zAmVvUhx0vq/oqDzPJZg0AVsKLX3I=
Subject key identifier: 19:BA:3F:7A:B0:62:6A:A3:EB:4C:76:AE:42:2E:22:1D:F3:EF:98:AE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05A2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Gbo_erBiaqPrTHauQi4iHfPvmK4.roa
Signing time: Sat 18 Jan 2025 13:54:44 +0000
ROA not before: Sat 18 Jan 2025 13:54:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1442 (0x5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 13:54:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=19BA3F7AB0626AA3EB4C76AE422E221DF3EF98AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:54:e3:71:5a:49:a8:7c:ed:70:3c:49:c0:a4:
2d:d5:13:8b:7e:24:10:b8:b3:62:38:f9:4f:ad:7e:
66:20:34:e5:5a:cd:a4:ec:2d:9b:91:37:7f:e7:9e:
3b:9e:73:6f:b7:16:a1:db:53:25:ed:4f:95:ea:22:
dc:ac:56:08:2d:7f:0e:2c:b7:bd:fa:dd:62:62:4f:
94:25:08:2d:52:03:a1:98:8d:61:ad:65:51:05:d7:
25:60:4b:92:e1:96:33:01:74:5b:c9:4f:b9:fb:32:
f7:dc:4a:ca:4f:4d:07:f8:09:7c:40:f2:1e:99:55:
89:9f:39:80:c0:e2:47:72:2b:58:7e:34:bf:3a:71:
39:55:78:98:a9:b7:61:0a:5b:fd:7d:b4:60:a9:73:
82:8a:c0:32:21:bf:0f:cd:86:97:ae:93:83:00:ed:
2b:18:9f:57:13:2c:72:0c:ff:31:fb:66:f5:0e:94:
b0:eb:af:9f:5e:81:1d:65:bf:fb:a6:27:a3:7c:4e:
52:1d:7d:39:34:fa:17:25:1a:cf:a1:63:c0:b9:b4:
47:af:2a:83:28:86:4a:c5:21:18:ea:07:3d:eb:86:
ef:49:3b:5f:8a:fe:27:cc:c6:68:a6:28:95:cd:0f:
f9:c4:46:a9:d8:16:ea:c9:7c:36:3c:48:2b:73:15:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BA:3F:7A:B0:62:6A:A3:EB:4C:76:AE:42:2E:22:1D:F3:EF:98:AE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Gbo_erBiaqPrTHauQi4iHfPvmK4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4d:6a:98:72:be:86:1d:71:ae:a9:c2:74:f0:43:41:7d:f7:dd:
a8:d7:b3:72:5a:df:da:e0:ff:50:60:13:15:1d:5e:f5:c4:5c:
53:37:0f:fb:2c:aa:79:74:1f:e8:6f:d8:f9:ba:ab:c2:7a:89:
e1:a2:4c:e4:80:f2:c3:46:3f:5f:72:06:be:af:6f:0c:c0:3e:
6a:f3:e1:6c:0b:93:c2:1f:4f:a6:c8:2e:6a:8f:f6:37:1a:06:
c0:4a:20:75:5a:96:dd:71:a4:90:90:e9:fd:0e:11:32:57:5a:
3c:19:bf:2e:18:32:05:49:9d:c9:f1:fe:d3:84:96:bd:a9:7c:
1f:1e:ca:9b:97:5b:3e:92:7b:55:15:91:92:aa:a0:00:7c:a3:
fc:30:ef:81:b6:d1:83:37:18:65:7c:29:c3:f9:a1:a8:9d:49:
58:06:ca:6b:a9:f0:aa:ca:68:d4:6a:4f:d1:e0:5a:b2:3c:31:
b3:d0:49:76:ac:7e:42:13:05:8c:44:0a:35:9c:b2:35:e2:5c:
71:2f:b1:87:8f:e1:cf:14:0c:db:50:70:b6:db:43:b2:e2:e9:
85:40:f5:68:31:b1:d9:09:b1:fa:16:e0:f6:0d:9a:97:d2:20:
fa:4f:c8:43:5e:5a:1e:5e:74:ac:e6:a7:78:65:83:b4:ae:98:
f8:d3:f8:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:39 2025 by rpki-client