Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/VdrNWQGqxZ2Sj3msLR6M7V_lNvo.roa
File: VdrNWQGqxZ2Sj3msLR6M7V_lNvo.roa (raw, json)
Hash identifier: EZZ71xKvHPyR2H6pApPdWYedUZHkykYXuOLqhXzo44w=
Subject key identifier: 55:DA:CD:59:01:AA:C5:9D:92:8F:79:AC:2D:1E:8C:ED:5F:E5:36:FA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05F8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VdrNWQGqxZ2Sj3msLR6M7V_lNvo.roa
Signing time: Sun 19 Jan 2025 11:24:49 +0000
ROA not before: Sun 19 Jan 2025 11:24:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1528 (0x5f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 11:24:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=55DACD5901AAC59D928F79AC2D1E8CED5FE536FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cf:70:d5:28:2c:69:be:67:73:f1:be:be:0d:
e3:e3:da:42:bd:e2:80:de:3c:69:1c:1d:ec:47:05:
f5:7f:62:51:3e:de:17:7f:83:5a:9e:b0:14:f5:06:
fb:74:10:75:9d:2b:d4:27:17:c8:03:6d:00:d6:47:
44:dd:8b:67:73:3e:92:1f:07:c9:15:74:21:d6:88:
ef:df:81:f9:bb:6b:fa:32:c4:14:11:9d:7d:45:c1:
91:02:01:7c:f1:5b:e1:1b:43:52:ea:62:34:c3:1a:
f3:dc:76:9e:d8:0c:ae:42:2c:dd:a3:8e:ea:f0:da:
23:ff:62:44:ed:b2:9d:5e:4b:22:ec:47:d7:13:ca:
d6:3f:f7:59:40:3b:33:bc:8c:5e:58:de:18:19:46:
8b:65:bd:8d:ae:0b:6c:57:24:dc:0c:60:e3:0c:c1:
c2:d5:ee:02:e8:ba:35:82:5c:bf:57:f2:0b:c2:5e:
c6:0a:4a:60:a4:23:a0:55:eb:e0:f6:6d:27:70:96:
2a:c0:68:1b:e1:c0:91:bf:f8:ef:c5:7d:fc:83:d2:
a7:9f:0b:c7:3b:b9:79:86:9b:8b:0e:24:bc:a4:22:
78:30:9f:7e:de:e9:7b:b3:18:f7:d8:81:3c:0e:ff:
7d:99:d7:31:13:e1:7f:71:4e:58:73:bb:15:e1:9d:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:CD:59:01:AA:C5:9D:92:8F:79:AC:2D:1E:8C:ED:5F:E5:36:FA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VdrNWQGqxZ2Sj3msLR6M7V_lNvo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
16:1c:54:3e:b5:ae:cd:80:07:70:7d:f7:12:9e:93:6f:3e:a3:
c7:74:f9:23:96:3f:00:60:b7:57:a4:b0:1b:b5:2b:67:0d:13:
da:d8:ba:e2:8d:2a:07:bf:34:c5:0a:11:1f:09:b7:f1:08:f2:
c8:d7:4e:08:9f:28:cf:df:fb:3d:07:9d:a6:f9:a5:24:1f:dc:
1e:a3:25:0b:58:e6:0a:a1:42:9f:b0:0f:9a:8f:3c:30:70:ac:
04:e5:9a:ad:a3:40:a0:b9:4c:ae:2b:6c:92:e2:22:6e:50:98:
f4:4b:6a:b1:62:9b:ce:3d:4f:29:c8:1f:e8:e5:c3:98:06:3b:
a6:2d:73:6c:10:6a:62:85:79:fe:6c:fb:bd:3f:55:8d:1b:75:
ff:f2:76:54:e4:ab:35:53:d8:4e:af:f2:9d:1a:aa:15:56:af:
9e:d3:cb:08:03:91:dd:2c:78:b1:02:bd:61:fe:9f:d7:a5:7d:
43:da:1f:e2:8e:c5:e1:21:bd:32:23:5d:23:82:99:b5:ca:9b:
98:10:f8:d9:77:e5:4c:31:82:a3:67:a3:71:e1:14:b7:dd:2f:
86:72:dd:66:1c:0d:b2:68:c4:ef:0a:66:b1:48:52:4a:7b:90:
62:3c:55:8d:c6:05:bb:f6:bf:44:d2:a3:1d:02:fe:ae:ce:74:
d3:32:01:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:45 2025 by rpki-client