Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/R9at1do8XnJcrXXq_0RvzxKZRsk.roa
File: R9at1do8XnJcrXXq_0RvzxKZRsk.roa (raw, json)
Hash identifier: X/ZnFUIkgH1pYv7cvW+Nd20HlGjQrrWnrERQnwPcpVk=
Subject key identifier: 47:D6:AD:D5:DA:3C:5E:72:5C:AD:75:EA:FF:44:6F:CF:12:99:46:C9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 060E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/R9at1do8XnJcrXXq_0RvzxKZRsk.roa
Signing time: Sun 19 Jan 2025 16:54:48 +0000
ROA not before: Sun 19 Jan 2025 16:54:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1550 (0x60e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 16:54:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=47D6ADD5DA3C5E725CAD75EAFF446FCF129946C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:3b:10:c7:0f:98:0c:5a:ff:a8:51:d9:d1:
aa:48:e2:ef:d1:7c:e5:93:c1:c5:0b:5f:73:58:98:
38:ff:2a:07:03:b4:2a:08:a5:49:06:f2:fe:b8:9d:
5b:c1:0c:53:f1:df:32:6c:58:5c:ba:0b:6d:8a:1c:
4c:31:14:98:3c:ad:8a:74:9e:a4:86:bc:c4:37:6a:
b6:44:7d:ad:86:83:31:60:76:10:a6:21:b2:a7:b9:
50:0b:8b:ee:b3:5f:1e:3c:dd:7c:67:54:bb:57:57:
19:c0:f1:1a:ac:6c:f0:66:d7:c7:af:d3:8f:3a:c5:
7f:39:05:bb:2f:89:fb:81:b9:f2:7b:8e:a2:f3:76:
5d:0c:2a:27:38:7d:06:d1:06:5b:16:00:20:43:32:
57:df:35:d0:c8:9f:82:ba:ab:f0:ef:ac:e2:36:dc:
8e:41:ee:b6:61:ca:c7:f7:ab:19:15:ac:3a:7b:2d:
03:c9:23:d1:e5:c4:a2:93:25:1a:82:4d:f4:c1:73:
67:d4:bd:18:2c:6f:79:66:4a:8e:51:2b:2c:78:0c:
2a:f4:03:f8:14:02:87:ef:dc:c1:ea:d8:38:55:b1:
03:6b:99:05:fa:38:fc:e5:be:72:bf:42:a1:12:3a:
4e:d7:73:4b:af:54:84:18:61:f8:96:1d:82:f4:d8:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D6:AD:D5:DA:3C:5E:72:5C:AD:75:EA:FF:44:6F:CF:12:99:46:C9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/R9at1do8XnJcrXXq_0RvzxKZRsk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
88:37:c1:7f:98:ee:1c:9b:09:ab:17:69:32:94:56:d8:3b:fe:
99:44:c7:9f:29:19:0e:d6:9c:85:c7:de:3f:62:b6:80:ba:dc:
dc:68:72:1c:27:ad:01:71:47:94:4f:a1:ac:90:d4:b3:c6:d3:
f5:7e:95:02:ad:1d:a4:f9:52:d1:cb:6f:99:b0:0f:9f:b4:42:
33:66:c7:18:ea:79:4a:a6:2a:7d:24:b2:e9:e1:33:f2:e3:fa:
fe:9a:de:f2:24:85:f2:38:29:14:dc:bb:16:63:33:62:12:ec:
1d:23:b0:0b:d8:cd:03:47:07:da:a0:66:12:9e:26:fc:e2:f7:
db:37:06:f9:1c:4d:e4:2a:8b:93:07:8f:8f:5f:67:28:40:f1:
4b:d9:6e:e0:82:2a:7a:59:9e:78:60:ec:a8:83:b8:fd:8d:f6:
44:e0:51:e9:12:bd:af:dc:52:cb:68:fc:dd:77:37:41:18:97:
44:37:56:de:aa:e4:85:f9:e7:be:96:0b:ba:1e:af:36:b4:50:
22:6f:19:5e:7b:b4:49:74:1f:4e:c6:62:2d:0c:1a:50:2e:3d:
ad:c3:1b:1f:a1:80:4b:72:59:df:b3:42:a7:8b:bd:17:7a:41:
c6:dd:2c:d9:a6:e3:ac:c9:e9:03:ea:e3:eb:5c:7c:d1:9b:a4:
8f:75:92:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:39 2025 by rpki-client