Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/T4wTY3c2_-YdoXmxS1oLs66wNJ0.roa
File: T4wTY3c2_-YdoXmxS1oLs66wNJ0.roa (raw, json)
Hash identifier: Wb5r/98nGcM1RCM5TaOi+7Z7Se27C+r2hBB9wsoA4H4=
Subject key identifier: 4F:8C:13:63:77:36:FF:E6:1D:A1:79:B1:4B:5A:0B:B3:AE:B0:34:9D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C7E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/T4wTY3c2_-YdoXmxS1oLs66wNJ0.roa
Signing time: Wed 05 Feb 2025 20:55:46 +0000
ROA not before: Wed 05 Feb 2025 20:55:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3198 (0xc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 20:55:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4F8C13637736FFE61DA179B14B5A0BB3AEB0349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:93:28:6a:3f:27:26:f1:0c:8c:e7:3e:1a:a4:
92:bd:7c:49:e7:c2:14:b3:22:4b:a9:46:53:4f:01:
be:82:78:d5:e3:ba:03:c3:2f:d6:20:8e:09:12:c7:
41:d9:11:68:45:f8:ae:9a:b2:72:94:f7:e6:14:ac:
99:e3:8d:76:69:fd:f2:cd:b3:29:c9:9d:30:f3:9c:
7e:be:9b:73:c1:be:cb:f1:95:b5:91:91:12:05:37:
91:1d:5e:54:9f:d6:62:17:80:e0:ed:c8:1d:db:ea:
43:c8:e3:1e:67:d1:c9:58:76:fb:e4:f4:ad:4d:93:
86:f6:bb:30:bf:6f:04:d7:11:85:59:e8:46:a9:57:
8b:26:f2:a0:5b:07:a7:8a:c7:b2:6e:4e:c2:71:90:
27:c4:8d:63:96:25:46:a3:63:19:55:c1:b4:76:34:
83:9c:2c:81:29:71:f7:fe:1b:58:35:ab:2c:e4:c9:
60:b3:4e:f1:09:5c:44:b6:c2:e8:d8:54:80:3b:4c:
06:52:ea:26:89:79:df:7e:32:4d:64:27:22:d6:b5:
63:18:4c:fd:39:22:38:1b:b6:47:32:ce:95:2d:93:
84:44:62:ff:66:44:f9:71:48:97:ef:b8:20:e8:4c:
9e:db:bc:5f:b2:ae:30:bd:a7:8d:84:28:75:eb:35:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:13:63:77:36:FF:E6:1D:A1:79:B1:4B:5A:0B:B3:AE:B0:34:9D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/T4wTY3c2_-YdoXmxS1oLs66wNJ0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
74:19:a4:5a:cb:c0:9d:ea:bd:05:25:0a:3f:78:dc:ba:0f:f5:
79:f5:cb:e0:6a:4d:2d:36:24:5c:9f:14:6a:5c:fa:30:a3:b1:
2b:f6:ff:45:c6:b4:c4:b5:65:e2:eb:3b:fb:77:e1:bc:e8:7c:
cc:0a:5a:75:95:c3:79:5e:89:86:c0:71:ee:63:75:01:3e:31:
34:1c:35:e7:0b:10:dd:9c:b6:3d:33:48:09:9f:6d:3c:0e:e9:
c4:36:a7:f5:f8:2a:e6:28:ac:20:f3:dc:ea:0a:06:26:2f:d7:
64:22:a2:a6:34:12:eb:0c:01:2d:12:9d:62:f2:6d:87:75:a0:
93:74:86:0b:70:52:7d:77:91:57:6e:0b:1b:cd:4d:d2:25:b3:
9d:b4:35:d6:bc:dd:f6:2a:c3:a1:8a:d4:9b:16:f5:e0:10:88:
12:9c:d9:97:61:7e:56:d4:93:30:2b:b9:97:f2:22:96:48:93:
0c:2e:d0:03:98:59:a9:3e:c1:da:90:43:b5:83:15:42:55:e5:
0f:72:ed:9c:98:3c:f2:13:f8:f6:c4:bc:0d:21:57:11:7f:63:
70:4a:93:36:c5:26:f9:6b:38:e3:64:70:07:ba:22:45:28:bd:
d5:84:0f:be:e4:ad:14:e5:65:16:b6:43:43:af:07:79:81:7c:
80:56:f2:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:24 2025 by rpki-client