Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/N4VPYrpqvcsfqtMYmyjj4Rhgepw.roa
File: N4VPYrpqvcsfqtMYmyjj4Rhgepw.roa (raw, json)
Hash identifier: 6EFY+SRkzNBa37I8xEpTQZ3x9PACqar5IBNT1BKrd3I=
Subject key identifier: 37:85:4F:62:BA:6A:BD:CB:1F:AA:D3:18:9B:28:E3:E1:18:60:7A:9C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CB6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/N4VPYrpqvcsfqtMYmyjj4Rhgepw.roa
Signing time: Thu 06 Feb 2025 10:55:47 +0000
ROA not before: Thu 06 Feb 2025 10:55:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3254 (0xcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 10:55:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=37854F62BA6ABDCB1FAAD3189B28E3E118607A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:b8:6e:e9:41:e4:33:f7:9b:2f:4d:9d:64:
c6:57:b1:70:77:4f:82:cf:07:99:a1:f3:89:44:9a:
a0:09:00:3c:2d:c9:24:00:0b:9e:c0:68:72:a2:f5:
43:c2:7d:01:70:46:d0:9a:e5:b4:7e:bf:bd:ee:69:
e2:59:22:85:0a:05:0d:7b:f8:81:07:8f:96:98:2f:
59:97:4e:90:f5:ab:02:35:7d:fa:4a:e2:1f:f4:10:
0e:ec:01:1e:9e:42:4c:dd:79:fc:1a:3d:8b:53:0e:
07:5b:56:a5:c4:f9:c0:31:26:4c:68:0f:08:a0:e6:
92:75:8a:57:32:b7:4b:7f:4f:43:1c:55:c0:06:d9:
26:aa:41:ea:a5:f5:e9:a0:9a:a5:5d:56:a6:14:74:
56:83:46:bc:82:00:08:d3:8b:02:48:b8:25:52:6a:
9f:32:6e:37:8f:35:08:3e:e4:c8:2a:a3:38:0f:3e:
29:68:cd:ab:60:7e:e1:a8:97:e5:e3:a8:3a:05:65:
b7:1d:29:0a:06:0f:0f:87:00:24:3b:78:d5:9a:fe:
32:23:b9:88:84:be:c7:22:48:23:aa:cc:ea:c1:f5:
10:88:7e:6a:3c:9f:e2:9b:14:4c:f2:8c:1a:94:41:
c2:dc:6f:a4:06:54:66:26:65:6a:04:b0:a9:6a:7d:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:85:4F:62:BA:6A:BD:CB:1F:AA:D3:18:9B:28:E3:E1:18:60:7A:9C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/N4VPYrpqvcsfqtMYmyjj4Rhgepw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:b9:52:6d:c9:10:5c:25:01:2b:ca:7e:5a:e7:bc:20:06:a5:
29:b9:e4:a1:4b:91:d8:82:55:bc:2c:20:71:63:65:e7:ff:6a:
4c:81:88:a7:a0:ec:63:68:74:0a:45:df:5b:5b:6e:81:98:93:
bb:50:21:d9:fa:d4:55:74:7d:ce:08:19:5a:0b:f4:10:55:82:
e6:de:9f:2a:41:58:69:01:a3:bf:25:50:ee:a7:04:c8:98:1b:
d3:43:a3:be:32:5c:b0:fc:0a:03:8d:7d:32:cc:57:29:33:c9:
dc:ff:df:89:bd:1f:b1:2a:f8:55:60:69:f5:f1:53:e3:29:49:
80:e7:98:da:49:6e:2e:2e:81:d9:8e:15:e4:2e:ce:41:96:78:
91:95:e8:f3:0d:40:4b:19:8e:bd:6c:41:39:78:9f:9e:eb:ed:
48:e5:03:01:07:a1:05:ec:08:b4:71:50:d0:13:3e:d1:4d:df:
50:04:c9:50:5a:9a:95:b3:bb:d1:54:6c:e8:56:3a:15:40:86:
90:6c:77:e5:1e:86:fd:98:19:38:53:48:41:da:68:67:46:ce:
26:0d:b9:d1:4c:be:bc:ac:b3:4e:75:e0:66:07:9e:ea:42:48:
3d:9b:5f:d5:d6:35:a3:b9:e7:89:33:02:b8:2e:2a:7f:95:3f:
00:11:58:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:55 2025 by rpki-client