Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ONI39PrnJDUCYwBEwF-eYNPrEBU.roa
File: ONI39PrnJDUCYwBEwF-eYNPrEBU.roa (raw, json)
Hash identifier: JJ1phHXnbAjAaB9zKwFMSHQAzDODv/MR7EvkMnJAm+E=
Subject key identifier: 38:D2:37:F4:FA:E7:24:35:02:63:00:44:C0:5F:9E:60:D3:EB:10:15
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D02
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ONI39PrnJDUCYwBEwF-eYNPrEBU.roa
Signing time: Fri 07 Feb 2025 05:56:53 +0000
ROA not before: Fri 07 Feb 2025 05:56:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3330 (0xd02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 05:56:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=38D237F4FAE7243502630044C05F9E60D3EB1015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:fe:96:da:32:84:29:cd:f6:f1:a1:a3:4a:
8f:af:11:cc:af:72:f9:ad:4e:7e:11:93:ed:89:8f:
57:18:5f:04:82:d5:17:53:18:6a:16:9e:dc:93:38:
d6:89:28:ad:e8:a9:7c:a1:f9:f2:db:1e:7d:aa:bc:
99:8c:73:86:b5:44:f0:4a:8c:68:14:56:7a:78:78:
39:97:15:1f:46:46:68:61:b4:e3:d0:bf:2f:04:b2:
0f:94:1d:6a:d2:a9:95:43:42:40:e3:87:8e:8d:06:
b3:94:25:ab:d5:6d:c8:5f:0a:a7:5e:4c:53:64:e0:
17:27:3f:cc:52:e3:0e:68:91:72:14:0b:54:a4:78:
94:08:c8:32:e2:9a:bc:0c:15:e0:2d:4a:2a:79:b1:
23:05:2c:7e:07:89:35:04:0b:0e:8c:4a:fe:1d:0f:
4a:a6:3b:e1:93:19:3e:3c:cf:ce:d1:a7:a7:cb:91:
dc:ff:d6:0a:8b:91:ee:32:38:19:6b:02:05:80:68:
c0:a3:d6:51:b0:4c:5d:ed:81:8e:29:46:a7:fb:3d:
c4:6d:d0:98:ae:4a:b8:a1:e7:1d:cd:1f:52:19:ee:
99:e0:39:14:f4:12:a7:64:d6:35:d8:fd:a7:c4:89:
01:93:a2:f0:0e:9d:59:92:42:8e:5a:7f:87:24:67:
25:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D2:37:F4:FA:E7:24:35:02:63:00:44:C0:5F:9E:60:D3:EB:10:15
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ONI39PrnJDUCYwBEwF-eYNPrEBU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
66:79:6c:ea:78:82:bc:64:ea:df:32:d2:f0:a7:ff:b0:d4:50:
62:23:03:70:4d:f9:4d:a3:55:bc:f6:10:1e:68:90:47:dc:18:
2c:26:20:57:d3:d2:7c:9c:39:fc:ea:dd:49:fb:82:65:c9:e1:
6c:3a:80:19:43:5a:ed:82:90:e0:44:6d:ab:13:43:31:f2:32:
80:16:ed:79:e6:01:75:e9:bf:eb:fb:4d:7a:3b:67:4e:b9:34:
9b:fd:1a:74:d1:ab:26:05:3c:74:f2:54:e8:79:38:ef:25:fb:
c6:6c:42:db:9b:d7:21:26:46:6d:93:bd:4b:08:35:b2:f2:c4:
03:fa:78:4b:59:47:d0:87:c0:97:d1:34:a2:9c:9b:f0:22:5c:
40:0a:f1:fe:09:d6:d4:1c:a4:b5:33:8c:77:ea:f6:f5:99:04:
2a:4c:b8:9c:c9:14:54:75:10:4c:b4:ff:dd:0a:58:69:41:eb:
35:4a:32:7c:bb:3c:d1:92:fc:86:8c:ac:ab:b5:7f:7f:93:6d:
26:9f:1a:6c:fa:11:d6:f1:f2:5c:db:2f:dd:5e:4d:b3:6f:5e:
60:de:51:af:70:eb:98:7c:a1:6b:47:5d:e3:0e:a2:e0:58:dd:
37:ee:4b:0f:9a:09:00:2d:30:f5:8c:f9:2c:3b:1a:b9:d4:c5:
41:dd:a9:58
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDQIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDcw
NTU2NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM4RDIzN0Y0RkFFNzI0
MzUwMjYzMDA0NEMwNUY5RTYwRDNFQjEwMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDB8P6W2jKEKc328aGjSo+vEcyvcvmtTn4Rk+2Jj1cYXwSC1RdT
GGoWntyTONaJKK3oqXyh+fLbHn2qvJmMc4a1RPBKjGgUVnp4eDmXFR9GRmhhtOPQ
vy8Esg+UHWrSqZVDQkDjh46NBrOUJavVbchfCqdeTFNk4BcnP8xS4w5okXIUC1Sk
eJQIyDLimrwMFeAtSip5sSMFLH4HiTUECw6MSv4dD0qmO+GTGT48z87Rp6fLkdz/
1gqLke4yOBlrAgWAaMCj1lGwTF3tgY4pRqf7PcRt0JiuSrih5x3NH1IZ7pngORT0
Eqdk1jXY/afEiQGTovAOnVmSQo5af4ckZyXLAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUONI39PrnJDUCYwBEwF+eYNPrEBUwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL09OSTM5UHJuSkRVQ1l3
QkV3Ri1lWU5QckVCVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAGZ5bOp4grxk6t8y0vCn/7DU
UGIjA3BN+U2jVbz2EB5okEfcGCwmIFfT0nycOfzq3Un7gmXJ4Ww6gBlDWu2CkOBE
basTQzHyMoAW7XnmAXXpv+v7TXo7Z065NJv9GnTRqyYFPHTyVOh5OO8l+8ZsQtub
1yEmRm2TvUsINbLyxAP6eEtZR9CHwJfRNKKcm/AiXEAK8f4J1tQcpLUzjHfq9vWZ
BCpMuJzJFFR1EEy0/90KWGlB6zVKMny7PNGS/IaMrKu1f3+TbSafGmz6Edbx8lzb
L91eTbNvXmDeUa9w65h8oWtHXeMOouBY3TfuSw+aCQAtMPWM+Sw7GrnUxUHdqVg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:22 2025 by rpki-client