Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/IJ8GFVb0HrUzpgtBl82J2HtOAlE.roa
File: IJ8GFVb0HrUzpgtBl82J2HtOAlE.roa (raw, json)
Hash identifier: HJvf1Te2RAyZETnpT0TDoiDvZDZ/AWyvxuqnxUVnusw=
Subject key identifier: 20:9F:06:15:56:F4:1E:B5:33:A6:0B:41:97:CD:89:D8:7B:4E:02:51
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D3A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IJ8GFVb0HrUzpgtBl82J2HtOAlE.roa
Signing time: Fri 07 Feb 2025 19:55:52 +0000
ROA not before: Fri 07 Feb 2025 19:55:52 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3386 (0xd3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 19:55:52 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=209F061556F41EB533A60B4197CD89D87B4E0251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:95:90:76:da:ef:43:85:78:41:20:5e:fd:
f1:8c:b5:98:eb:63:23:09:d6:d0:0f:39:c8:b4:5d:
c0:fe:20:eb:fb:04:39:e8:4a:d8:00:25:c1:21:a2:
0c:51:6b:68:fa:34:9b:64:2b:75:f6:dd:7b:5f:16:
44:b8:a2:f9:53:60:cb:33:d9:fa:96:19:04:1b:e3:
1c:ca:20:f5:bd:6a:ad:8b:30:a5:c1:30:58:05:f1:
ee:41:95:6d:9b:9d:7c:23:63:d1:ac:67:77:98:37:
ff:04:d3:6b:67:5b:c5:75:2f:72:93:9b:22:02:34:
96:84:d5:32:16:8a:73:e1:ba:ad:f6:e2:33:53:69:
bb:a9:7e:d8:ea:15:16:b5:c4:78:d1:ac:25:9a:0e:
1e:c9:94:ac:b9:c8:1f:cb:d3:40:e0:c5:35:26:8f:
2f:ed:e4:b7:0a:d8:5e:7b:4c:a3:b2:60:21:37:be:
d3:d8:3e:8c:b4:79:34:d4:a2:89:45:81:65:86:87:
7f:21:31:b6:91:e7:21:89:a9:68:49:79:84:37:46:
59:59:42:09:e9:26:20:b9:57:d5:80:b8:b7:6c:4a:
a4:12:a1:49:f4:8d:db:57:64:75:a2:f3:d0:5a:fe:
76:2d:38:ef:90:50:ed:2b:41:43:1c:0b:be:57:80:
74:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9F:06:15:56:F4:1E:B5:33:A6:0B:41:97:CD:89:D8:7B:4E:02:51
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IJ8GFVb0HrUzpgtBl82J2HtOAlE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
01:b4:e0:7f:b8:e0:67:9a:c3:40:bd:64:94:1c:19:35:bf:55:
af:58:ad:2e:e3:09:73:e1:69:20:e2:68:d1:ed:3e:3f:82:5b:
b2:fb:b9:3c:42:d4:e3:2a:e5:dc:84:81:f8:3b:27:bc:09:aa:
7a:36:a4:6e:ff:d6:f7:f8:d1:f1:3b:10:30:81:e4:df:dc:cd:
77:86:b6:5e:b1:84:0b:11:34:94:5b:77:d8:ed:db:55:1a:02:
eb:dd:ef:d8:1f:1d:7f:a0:6c:77:c9:7a:ee:25:77:31:7d:19:
a3:77:9b:36:09:56:3b:62:88:7d:b1:5e:b3:38:fe:96:21:46:
d8:52:40:4c:2c:3a:33:d4:ae:2c:06:63:15:27:72:05:4e:ac:
84:85:c9:1f:f5:b1:db:aa:89:ae:14:1c:16:dd:c5:33:2a:b5:
2a:d6:95:67:bd:f9:88:d3:42:af:7b:36:19:48:7b:57:94:c4:
0a:a8:41:6d:10:6c:6b:ae:07:fa:6d:01:2d:8d:ec:ac:73:83:
84:79:d3:1f:6b:85:3f:29:7b:86:25:99:1c:7a:12:d2:36:73:
04:ee:3b:e5:ff:80:d3:d9:44:59:ea:c5:7c:2d:76:da:16:b4:
dd:f1:7a:04:41:9c:16:65:be:90:ff:99:cf:ce:15:62:60:60:
cb:60:f4:73
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:34 2025 by rpki-client