Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/RG50HYNEQDwWPe9vUsM8AU-j3hg.roa
File: RG50HYNEQDwWPe9vUsM8AU-j3hg.roa (raw, json)
Hash identifier: VBEtTxNmGRcF6LgBZGK5xCIi/BrD49NCcuTmeqdkD5s=
Subject key identifier: 44:6E:74:1D:83:44:40:3C:16:3D:EF:6F:52:C3:3C:01:4F:A3:DE:18
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CBE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RG50HYNEQDwWPe9vUsM8AU-j3hg.roa
Signing time: Thu 06 Feb 2025 12:55:46 +0000
ROA not before: Thu 06 Feb 2025 12:55:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3262 (0xcbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 12:55:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=446E741D8344403C163DEF6F52C33C014FA3DE18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:84:88:6e:cd:e0:19:79:0b:e5:19:72:41:af:
15:f4:0e:fb:7e:0c:d2:6f:9a:a6:ba:9a:98:37:e7:
30:fc:82:52:6a:9c:f2:5a:77:85:32:7f:92:ea:89:
6b:ef:f9:22:f5:5a:1c:95:a4:d7:06:4a:b6:cd:3b:
da:09:8e:5c:25:f9:2a:d1:cf:82:df:e0:45:1b:fa:
a2:f6:df:e9:9b:37:32:7e:cf:16:10:b3:0a:fb:98:
a9:9a:51:ff:ec:b4:e4:a1:73:c3:a6:50:46:35:23:
3f:ef:68:4f:65:15:f9:73:11:84:ff:a0:2a:f8:46:
1a:dd:97:97:62:85:90:a8:b1:7e:f3:2a:d8:c2:b8:
db:a2:49:e5:9e:4a:85:e7:67:0d:29:21:c9:b4:28:
6f:41:75:79:3a:fd:b2:cd:6b:3d:3d:59:e6:3d:e1:
7f:ba:4b:07:cd:bb:5b:df:ff:10:07:e4:04:e3:02:
a3:05:68:d0:d5:9f:e1:9d:2b:c0:d0:ba:87:17:ab:
05:01:bc:7b:db:f4:48:a7:d2:17:81:9b:36:19:da:
9c:af:56:61:83:7e:c7:58:9d:4d:73:a6:ba:34:a6:
5b:01:9b:25:23:b4:e0:cd:dd:0e:03:43:94:cd:dd:
f6:21:83:f6:4f:0e:aa:a8:5a:65:af:67:c8:f0:8e:
68:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:6E:74:1D:83:44:40:3C:16:3D:EF:6F:52:C3:3C:01:4F:A3:DE:18
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RG50HYNEQDwWPe9vUsM8AU-j3hg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
80:37:37:00:79:88:4c:db:da:2d:01:ae:d2:99:6a:fa:78:25:
0d:da:eb:24:3c:2c:0e:75:d2:cd:5e:8e:e4:ff:57:28:ca:cd:
d6:f2:3b:2d:65:e9:24:b1:57:68:0b:32:62:00:c1:9e:f9:08:
a9:61:36:80:29:b0:54:f5:76:e4:02:c8:8d:8d:c8:91:65:e8:
d2:50:e5:a4:21:91:04:89:54:0a:d1:d9:53:85:24:b0:63:f5:
1d:d8:5d:7c:78:38:eb:e2:f7:b6:a4:3d:52:ae:2a:b1:95:47:
3e:c3:c7:27:12:9f:7f:46:05:84:61:84:af:43:cb:47:99:8d:
4b:63:c0:f9:92:f0:04:d1:c5:48:b2:42:4b:2f:47:33:36:4d:
f9:9c:46:15:2b:dd:e1:72:63:c7:99:0e:b6:e7:2f:a1:4d:76:
77:4b:1e:35:4a:24:82:81:05:67:7f:1a:f9:2c:a4:b7:a0:eb:
05:4d:0d:91:87:3c:87:ed:0b:34:92:73:b4:57:86:bb:0c:c1:
a3:26:80:ce:40:9b:ac:d4:5d:fc:5a:33:b7:55:f3:b2:ae:2c:
56:c3:54:c6:dd:f5:e0:fb:af:79:1f:af:f9:02:65:1d:4b:6a:
db:e6:06:08:86:0f:39:b0:45:0d:fd:ba:48:73:c2:4b:e0:f3:
bf:c4:a9:e4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:37:21 2025 by rpki-client