Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NZF0CXuTsz7q1glNTdND0e5eRbE.roa
File: NZF0CXuTsz7q1glNTdND0e5eRbE.roa (raw, json)
Hash identifier: BQj/WQp4egQaM/kWxyc2sNXdVOCrOW+TcIGVT2CK6Bs=
Subject key identifier: 35:91:74:09:7B:93:B3:3E:EA:D6:09:4D:4D:D3:43:D1:EE:5E:45:B1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BF4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NZF0CXuTsz7q1glNTdND0e5eRbE.roa
Signing time: Tue 04 Feb 2025 10:25:41 +0000
ROA not before: Tue 04 Feb 2025 10:25:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3060 (0xbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 10:25:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=359174097B93B33EEAD6094D4DD343D1EE5E45B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:70:6f:d0:66:a7:03:6a:84:2f:8d:22:7b:2c:
74:bc:d7:4f:00:2c:e0:54:67:c4:90:e2:08:1a:33:
40:8e:19:c9:8b:4e:55:e1:6e:41:62:9a:18:cc:c5:
6a:d4:f6:89:01:49:87:2b:72:2b:e1:14:ee:28:35:
26:0f:5a:ff:89:8e:b2:7a:21:ae:25:f7:46:c8:f3:
5c:a8:61:0f:97:fd:7b:91:d3:8c:c1:7a:0e:69:0c:
25:f4:d7:20:f0:72:7e:2d:f6:e5:b7:cd:27:a8:57:
d2:d3:f5:48:30:bf:75:58:ea:cf:79:12:74:b9:87:
67:8c:cd:da:c4:20:52:59:59:db:4b:2a:1c:c0:ab:
06:26:74:7a:05:b7:fd:9e:51:b4:82:48:c1:27:7f:
30:27:cd:dc:91:66:94:0b:b5:52:54:6d:4a:77:e3:
20:46:a7:be:d9:dc:23:27:e4:f2:a2:81:3c:7b:53:
db:ba:1d:59:57:53:d6:81:f1:89:33:3b:e1:ad:1c:
57:c5:cf:61:0b:18:cd:e1:da:fc:af:d1:77:ba:c4:
af:dd:dc:c6:db:2b:3b:27:15:2f:52:64:29:0c:60:
35:bf:6f:12:2d:e7:43:45:ce:ac:bc:24:e6:4b:10:
9a:d9:43:17:39:85:b2:d2:92:f4:2e:18:e2:25:ef:
2d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:74:09:7B:93:B3:3E:EA:D6:09:4D:4D:D3:43:D1:EE:5E:45:B1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NZF0CXuTsz7q1glNTdND0e5eRbE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:30:b3:46:99:4a:c3:d0:51:ea:ea:54:95:48:c5:d8:eb:c3:
a3:84:3b:7d:7e:33:de:58:2c:98:df:2b:a9:70:55:92:31:6e:
73:69:0f:48:85:31:c1:cd:66:35:13:80:0e:4f:a3:0b:7d:08:
ce:fc:f7:6f:f7:1f:34:f2:34:8a:c2:c8:45:81:cc:68:e1:16:
0e:1d:c7:70:ed:53:cf:61:82:b0:b0:e1:10:b8:92:00:6f:b8:
fa:08:b4:97:64:1f:ed:63:2a:37:41:2c:7e:89:be:5e:89:be:
e9:f9:1d:9c:2c:28:16:10:3d:63:17:64:97:8d:24:9a:d1:16:
ca:3c:28:a5:33:78:02:51:1e:4a:76:8a:c0:ce:88:b1:ee:28:
fb:02:45:71:e3:dd:ff:04:ca:17:37:cc:3c:f7:37:50:70:84:
4d:f3:6d:84:65:35:48:55:64:9b:01:62:ce:0c:8b:e1:70:30:
87:9f:52:62:e8:e2:f8:cc:38:32:3d:22:15:e5:34:60:a1:18:
72:63:ff:66:25:d8:35:3b:0f:03:f4:ba:90:09:16:6a:5f:be:
3c:ce:6c:35:70:9b:5c:34:0e:43:6a:d9:43:3c:b3:6c:2e:93:
24:47:98:c6:31:be:3f:c1:7e:c7:3b:d2:cb:0b:91:be:56:60:
8b:64:a6:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:26 2025 by rpki-client