Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Ii-N-peXJpN94QJbLKnjjPUbdFI.roa
File: Ii-N-peXJpN94QJbLKnjjPUbdFI.roa (raw, json)
Hash identifier: vPTyIphEpMxQMMO11oVx/5eXGeFLqXBQq2x4L1DuZMA=
Subject key identifier: 22:2F:8D:FA:97:97:26:93:7D:E1:02:5B:2C:A9:E3:8C:F5:1B:74:52
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A36
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ii-N-peXJpN94QJbLKnjjPUbdFI.roa
Signing time: Thu 30 Jan 2025 18:55:29 +0000
ROA not before: Thu 30 Jan 2025 18:55:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2614 (0xa36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 18:55:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=222F8DFA979726937DE1025B2CA9E38CF51B7452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:47:c2:2a:a4:c7:4e:93:7a:d1:66:71:6c:fd:
97:e5:11:f9:25:0a:63:e4:09:67:78:f0:4e:95:60:
67:ee:57:c4:87:f6:34:13:4e:76:84:bf:07:83:fc:
4d:84:9d:66:42:e6:24:e5:0f:74:de:b2:51:9c:c5:
0b:94:36:9a:e6:04:d9:fe:84:f6:4b:e4:50:08:6f:
b0:4f:72:b1:67:1a:f1:6c:72:fe:e9:09:38:a5:46:
2e:25:6e:45:32:9c:af:59:bf:08:42:b8:63:6a:70:
29:cc:a0:97:2a:0d:61:44:76:e5:f3:2f:e5:5b:98:
07:12:14:14:c2:40:ac:7d:a3:25:d1:fd:42:f2:3e:
29:35:f2:42:9c:58:ca:dc:1e:2e:3d:a1:87:dd:08:
fd:48:4e:b1:8b:cf:26:e5:47:c9:02:e6:fd:9d:0c:
b1:ea:71:69:9b:16:d4:79:f2:d7:19:2a:9a:11:1c:
81:ef:52:31:d0:a7:94:b7:e0:07:c1:69:84:4b:9c:
2d:c2:1b:42:df:9a:18:59:a7:1c:2e:ea:2b:13:30:
98:3b:05:45:0d:fa:4d:16:76:cf:a9:e5:69:5e:12:
6e:5b:17:84:00:ef:64:72:de:1f:c9:c9:5c:39:43:
54:c5:2f:ec:7f:48:d2:ac:e6:42:72:b3:0c:4e:06:
0c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:8D:FA:97:97:26:93:7D:E1:02:5B:2C:A9:E3:8C:F5:1B:74:52
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Ii-N-peXJpN94QJbLKnjjPUbdFI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
32:19:43:8d:e1:82:c9:c9:3f:79:37:5e:e2:7e:1f:56:08:86:
de:e7:b1:7d:a7:92:ba:f0:f4:47:fc:34:b9:c3:56:37:8a:22:
3e:8a:78:c4:7e:60:0d:6a:6a:d8:4d:0e:5e:fa:2d:00:92:8f:
47:a2:01:a8:57:3e:9c:c7:16:9e:2a:24:16:9e:25:b2:24:1b:
09:b8:94:da:18:54:69:86:3e:c5:91:e9:fc:9f:00:d9:a5:0d:
e2:eb:a9:37:93:92:eb:ff:a3:b0:14:72:fd:da:d8:14:42:5b:
03:ea:86:a8:99:f5:54:89:a6:1e:b6:85:4e:2f:75:c7:75:13:
eb:ec:86:13:ba:f0:69:fc:56:65:7a:5e:90:8f:48:fe:4f:8e:
85:54:7b:01:a6:6b:98:2e:78:b2:0f:f6:35:09:9e:35:66:3c:
e0:94:22:b1:56:28:07:97:bd:4b:58:a2:fe:05:e3:ef:e3:d4:
38:d0:25:e7:8d:fe:73:63:43:6d:6c:98:b1:6c:d0:73:bc:58:
2a:fe:4b:26:67:9e:88:e7:ec:48:95:4a:50:32:67:5d:34:08:
bb:04:bb:9d:19:b8:08:4a:e2:ec:29:ae:20:84:d5:c8:8d:84:
57:8e:75:77:86:0f:d7:98:ab:81:c6:db:88:47:54:23:6f:0c:
ab:e4:f7:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:21 2025 by rpki-client