Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/JyBrHW28iMlEuGTNn7NWnxrAuh0.roa
File: JyBrHW28iMlEuGTNn7NWnxrAuh0.roa (raw, json)
Hash identifier: xlvHxD3isghN5uAaa+4tPGe7eJuupkLqESU0e2lQ32c=
Subject key identifier: 27:20:6B:1D:6D:BC:88:C9:44:B8:64:CD:9F:B3:56:9F:1A:C0:BA:1D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 071C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/JyBrHW28iMlEuGTNn7NWnxrAuh0.roa
Signing time: Wed 22 Jan 2025 12:25:00 +0000
ROA not before: Wed 22 Jan 2025 12:25:00 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1820 (0x71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 12:25:00 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=27206B1D6DBC88C944B864CD9FB3569F1AC0BA1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:ed:61:59:84:85:c9:c8:b1:ad:dd:84:ed:
6e:36:31:08:23:77:c3:0f:56:fa:3b:74:ab:36:13:
e9:87:f7:fd:0d:ed:8a:7a:51:f5:1b:65:25:a0:24:
6f:3a:87:a8:e4:4d:5e:70:b7:22:7f:54:f7:34:4e:
30:1c:f8:fd:1d:7d:e4:c2:98:3d:1d:f4:b1:3f:84:
7c:58:16:9a:32:71:c7:b3:5a:40:1f:d5:6e:76:0d:
26:d3:bd:f2:7b:c8:ec:cf:58:f3:6b:d6:43:d2:29:
5e:df:c0:9f:ca:55:8d:a3:bd:fa:50:06:73:5f:32:
2b:a9:8b:49:84:2f:ed:ff:4b:70:3d:3b:ae:f1:19:
a6:7c:7c:53:ff:ab:e9:47:bd:97:a5:89:1b:6a:47:
d5:5d:d4:80:c3:d1:7d:23:d5:3d:a3:0f:b4:ac:09:
3a:2d:b5:31:10:0c:9b:4d:42:dc:6b:8f:86:98:e2:
d0:7c:c7:f4:31:67:3a:02:6a:6b:9b:9d:af:d6:02:
b4:dd:44:98:90:29:5c:65:01:e1:67:55:3a:49:23:
74:f3:7c:31:6a:5e:32:27:f0:f4:8a:06:f3:90:c4:
2c:51:97:60:24:9f:12:4f:a5:4a:99:06:ce:f4:54:
bb:75:5b:87:82:23:38:34:b3:bd:2c:8c:96:50:c8:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:20:6B:1D:6D:BC:88:C9:44:B8:64:CD:9F:B3:56:9F:1A:C0:BA:1D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/JyBrHW28iMlEuGTNn7NWnxrAuh0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
16:4b:19:2e:b6:74:92:5f:83:20:6d:72:6f:af:d6:dd:51:5b:
fd:d8:62:68:14:d1:9b:be:75:61:01:35:2f:f5:5e:48:e0:b1:
1a:57:65:cf:fb:5c:7d:fc:8a:1a:e7:35:db:c4:5c:2d:41:e6:
fd:ce:cb:6e:15:02:d5:a1:02:a6:98:ab:86:05:f9:d0:39:bc:
37:e3:65:32:78:22:0a:fd:fc:aa:7c:86:e9:27:ac:7a:ce:8b:
b0:4c:0f:95:4f:d2:9e:74:ec:8a:80:7d:40:33:56:89:55:d4:
d9:d4:48:c7:38:ac:83:37:7a:13:a1:12:e9:85:a7:98:80:91:
f6:cb:8c:92:2b:3d:ed:0b:c5:cc:fe:fd:fa:76:12:66:64:68:
27:b3:61:51:7f:4d:cb:9a:0f:3c:88:cd:c3:e2:e3:55:56:15:
2a:cf:41:9d:db:81:71:a4:13:b6:bb:a1:39:92:9f:e2:a0:a7:
1f:d1:63:d2:e4:0b:45:03:f8:83:5a:11:04:f1:ed:6c:84:fd:
d4:7f:da:12:14:79:d9:5e:e2:08:41:b3:99:77:c6:bb:d8:1b:
8c:95:15:fc:cc:75:a6:1e:8a:04:fd:11:00:8c:30:49:c2:4c:
d3:d6:46:2e:1a:1c:31:09:6d:17:f4:86:cd:d5:79:22:d8:7a:
15:75:d9:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:49 2025 by rpki-client