Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/PiTZYe0jL5JVEau-9HwMvMxjCso.roa
File: PiTZYe0jL5JVEau-9HwMvMxjCso.roa (raw, json)
Hash identifier: Zs8r/OIf651ZWMYGYqWekcGBtTkuz9dJcPir7/5fhVE=
Subject key identifier: 3E:24:D9:61:ED:23:2F:92:55:11:AB:BE:F4:7C:0C:BC:CC:63:0A:CA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C10
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PiTZYe0jL5JVEau-9HwMvMxjCso.roa
Signing time: Tue 04 Feb 2025 17:25:57 +0000
ROA not before: Tue 04 Feb 2025 17:25:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3088 (0xc10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 17:25:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3E24D961ED232F925511ABBEF47C0CBCCC630ACA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:85:e8:e8:38:bb:40:d4:c1:91:d1:85:a7:50:
0f:78:87:3a:b3:43:0f:25:f1:05:99:de:1a:44:dc:
c9:b8:7a:84:f5:c0:d8:91:11:9c:33:2a:a8:9e:bc:
1f:56:b2:c8:61:87:66:cf:2c:5c:a9:55:9c:0a:65:
b4:f4:5b:4f:c2:a9:67:fd:74:a0:bb:3e:6a:05:c8:
d8:e9:2e:b4:36:80:c7:c5:5a:3e:58:08:48:88:cb:
54:36:57:2d:dc:e1:93:71:85:f1:6b:29:a2:b3:b9:
f8:00:f1:df:38:c0:1e:71:00:a6:ff:44:8c:9b:67:
5e:0f:63:84:11:39:10:58:cb:5b:29:a8:fe:c3:ca:
f1:fd:02:11:c5:56:48:7c:ee:d3:12:56:b2:30:3d:
7a:b1:61:65:4f:84:77:34:1f:fb:dc:a5:94:5c:28:
f0:03:7d:9d:59:1a:d3:74:f4:92:b5:97:98:b4:da:
cd:65:5d:23:38:6a:e4:bc:3a:6a:91:38:35:5e:eb:
74:de:28:68:74:83:52:8f:cc:a2:74:81:20:e1:61:
46:60:ba:f6:f6:8b:e0:62:99:24:a6:b4:cf:b5:51:
d5:03:a3:ce:d6:a2:75:26:36:46:d0:bd:ae:f5:6d:
fa:4f:9c:95:ac:c7:73:40:22:a1:23:c7:05:57:16:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:24:D9:61:ED:23:2F:92:55:11:AB:BE:F4:7C:0C:BC:CC:63:0A:CA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PiTZYe0jL5JVEau-9HwMvMxjCso.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
82:15:a6:21:e5:f1:b9:6d:c4:54:f7:70:54:2c:61:99:3f:93:
02:36:3b:e2:85:93:17:e8:f1:36:2f:b3:5b:75:61:09:54:5e:
00:94:22:f3:70:73:08:84:01:d2:11:66:f1:d6:64:d8:b9:a0:
88:30:4a:0d:38:8f:b2:a1:e4:f3:77:98:55:71:60:e5:75:50:
4c:74:3e:e2:64:bf:33:d8:9c:e1:56:0c:b4:c4:e0:39:97:21:
c5:f3:be:54:19:06:6c:a8:21:bd:72:c2:e4:5e:04:f7:e5:b0:
1c:79:35:ad:25:0e:ca:b4:6b:2c:e8:4e:d7:07:b8:27:0a:cc:
a1:2c:56:6c:41:da:da:7b:e3:49:e8:90:79:4c:42:85:ab:2c:
b4:f3:f7:91:d1:55:5c:b1:33:bc:79:20:63:ba:b3:28:2f:34:
a7:4a:5d:a6:96:5b:4b:ea:b6:96:96:f8:8a:16:83:6b:f9:f8:
36:ff:a9:40:0d:a8:6e:23:32:eb:43:82:5b:df:29:bc:a9:4e:
d5:27:d3:99:a3:43:f0:c8:88:f8:9f:23:3a:6a:42:2a:85:1c:
ef:c8:6a:9e:d6:b5:02:ea:81:06:ac:f0:3a:f6:76:6f:d7:97:
5f:90:78:0a:f0:57:cf:12:4f:bb:8b:91:0c:7e:39:8f:20:0b:
ff:1d:a9:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:19 2025 by rpki-client