Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Grf2aEe07kU_fIia8qKVE7ibVDQ.roa
File: Grf2aEe07kU_fIia8qKVE7ibVDQ.roa (raw, json)
Hash identifier: /fteaFgpw55hu8mDB/DdOak+acM5e2wqxV3ngn2eu6M=
Subject key identifier: 1A:B7:F6:68:47:B4:EE:45:3F:7C:88:9A:F2:A2:95:13:B8:9B:54:34
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C68
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Grf2aEe07kU_fIia8qKVE7ibVDQ.roa
Signing time: Wed 05 Feb 2025 15:25:46 +0000
ROA not before: Wed 05 Feb 2025 15:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3176 (0xc68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 15:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1AB7F66847B4EE453F7C889AF2A29513B89B5434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:b7:e4:b8:20:fe:c8:d5:45:20:bb:af:54:
31:8d:f4:29:cb:e4:3a:c5:8a:cb:fb:6a:5c:03:d2:
3b:f4:22:00:83:37:9f:0d:dd:8b:34:74:cc:d0:07:
6d:24:91:44:7a:57:41:60:39:ec:f9:f7:3a:3b:08:
b8:70:d4:5b:e8:8a:7a:ab:d7:bf:0f:eb:fc:83:43:
a3:04:39:fb:c9:f7:af:96:6a:c2:8d:57:dd:df:79:
6a:60:99:05:1e:b1:df:6b:54:f6:44:2c:4a:0f:8a:
6d:ea:1f:76:3f:5c:c4:a0:06:de:b4:02:da:da:d0:
36:26:b2:44:6f:0f:17:7d:91:70:84:c9:e9:76:b9:
83:c4:37:43:18:be:41:f0:21:a5:cc:67:25:bb:5d:
b6:44:7e:b1:12:a3:83:d6:23:69:ba:65:f5:ae:03:
c8:dd:e3:6e:8e:01:3f:65:89:b6:17:33:87:c5:a5:
bf:07:2a:e2:cc:a1:f8:6a:6f:cd:07:6e:39:9a:44:
c3:b9:04:1f:ee:c1:a1:a2:1a:68:0f:ea:cc:9c:b7:
28:2e:33:13:da:20:a4:6d:ce:61:79:f8:9b:7e:2c:
2a:0b:a6:e7:07:40:88:46:dd:29:8d:03:9e:e3:09:
f2:b2:4b:ea:50:ab:82:82:20:04:f2:3b:5f:33:86:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:F6:68:47:B4:EE:45:3F:7C:88:9A:F2:A2:95:13:B8:9B:54:34
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Grf2aEe07kU_fIia8qKVE7ibVDQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
98:a7:8e:2b:09:32:d2:de:f3:15:b4:38:ba:d3:0a:20:83:07:
c8:e0:40:0d:19:65:62:d4:d3:f3:73:cb:28:5e:a3:67:b9:6b:
60:3f:fb:6e:7a:13:ff:4e:8b:5d:40:4c:ba:d8:78:3c:c8:53:
75:3d:70:ad:f2:a5:29:91:c4:ae:b7:b1:e9:54:83:2b:f0:29:
3e:47:bd:da:45:e3:cc:bc:6e:4f:34:44:52:fd:4b:57:10:39:
b1:8a:07:ed:96:24:8f:9b:25:6f:65:4d:ba:23:81:fa:17:d6:
b3:eb:84:a9:bd:e3:82:13:d7:51:62:75:fd:c3:39:0a:d5:86:
45:e8:15:6a:fa:28:36:27:8a:f6:d0:d4:44:7f:db:74:2c:ee:
1e:81:05:47:b7:5c:3f:2e:0f:ff:da:86:3f:0c:36:36:56:ef:
0b:1b:73:c4:3e:80:6d:2f:e2:84:da:85:64:c1:f1:19:76:cf:
ac:69:0a:73:d2:62:18:85:88:1b:42:e7:4d:37:f1:78:e1:d8:
fb:6b:6a:d8:43:25:57:df:eb:2d:63:b0:18:dd:cb:e2:43:96:
95:28:e0:fc:8b:a4:ce:71:be:42:6f:1f:62:27:81:cd:8d:a8:
3d:92:13:10:44:82:e0:4f:c8:8f:00:85:3f:d9:9d:4a:51:84:
a2:0d:cb:73
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDGgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDUx
NTI1NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDFBQjdGNjY4NDdCNEVF
NDUzRjdDODg5QUYyQTI5NTEzQjg5QjU0MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIebfkuCD+yNVFILuvVDGN9CnL5DrFisv7alwD0jv0IgCDN58N
3Ys0dMzQB20kkUR6V0FgOez59zo7CLhw1Fvoinqr178P6/yDQ6MEOfvJ96+WasKN
V93feWpgmQUesd9rVPZELEoPim3qH3Y/XMSgBt60Atra0DYmskRvDxd9kXCEyel2
uYPEN0MYvkHwIaXMZyW7XbZEfrESo4PWI2m6ZfWuA8jd426OAT9libYXM4fFpb8H
KuLMofhqb80HbjmaRMO5BB/uwaGiGmgP6syctyguMxPaIKRtzmF5+Jt+LCoLpucH
QIhG3SmNA57jCfKyS+pQq4KCIATyO18zht4hAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUGrf2aEe07kU/fIia8qKVE7ibVDQwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0dyZjJhRWUwN2tVX2ZJ
aWE4cUtWRTdpYlZEUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAJinjisJMtLe8xW0OLrTCiCD
B8jgQA0ZZWLU0/Nzyyheo2e5a2A/+256E/9Oi11ATLrYeDzIU3U9cK3ypSmRxK63
selUgyvwKT5HvdpF48y8bk80RFL9S1cQObGKB+2WJI+bJW9lTbojgfoX1rPrhKm9
44IT11Fidf3DOQrVhkXoFWr6KDYnivbQ1ER/23Qs7h6BBUe3XD8uD//ahj8MNjZW
7wsbc8Q+gG0v4oTahWTB8Rl2z6xpCnPSYhiFiBtC50038Xjh2PtrathDJVff6y1j
sBjdy+JDlpUo4PyLpM5xvkJvH2Ingc2NqD2SExBEguBPyI8AhT/ZnUpRhKINy3M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:52 2025 by rpki-client