Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/XZIZBS-PvdlbqMWDnRmahL_B8SQ.roa
File: XZIZBS-PvdlbqMWDnRmahL_B8SQ.roa (raw, json)
Hash identifier: 5kfxceA8tmJyKT8EAxgugVBpdCnHgz7vwN9p+AG4hrI=
Subject key identifier: 5D:92:19:05:2F:8F:BD:D9:5B:A8:C5:83:9D:19:9A:84:BF:C1:F1:24
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D14
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XZIZBS-PvdlbqMWDnRmahL_B8SQ.roa
Signing time: Fri 07 Feb 2025 10:25:48 +0000
ROA not before: Fri 07 Feb 2025 10:25:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3348 (0xd14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 10:25:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5D9219052F8FBDD95BA8C5839D199A84BFC1F124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:81:4a:73:43:98:89:5d:38:eb:f3:e4:e1:9b:
21:9e:35:79:b3:d6:b6:fd:50:cd:b3:71:be:a4:7e:
00:71:85:58:6f:d9:1e:9f:e2:44:3e:ad:72:87:74:
c2:c2:96:e8:1d:f5:ee:c3:85:c4:80:52:af:ea:b0:
7f:d1:52:18:c0:8d:f6:5c:4e:0c:3b:27:cc:6d:b2:
02:6c:8a:8e:8f:5f:6a:32:82:34:8a:0e:9f:f1:2e:
ab:ae:f0:e0:f5:11:78:0c:98:74:07:d0:89:15:b3:
1f:5c:fc:77:05:6e:ff:45:c9:f3:1e:17:34:98:ee:
74:b5:aa:a0:6f:75:b1:05:fd:3e:5a:80:4d:11:3b:
a5:52:e3:10:60:37:aa:e6:f2:9b:44:56:93:6e:3d:
58:25:4b:4d:51:c5:51:76:f9:e9:f7:7c:66:2c:03:
8f:71:16:bb:f1:d6:00:ea:34:55:84:cd:a5:7c:92:
48:43:5f:61:a7:53:92:26:68:0e:33:a5:f4:0b:96:
55:d4:71:7a:87:39:2c:ff:69:8b:3a:0e:69:a1:49:
9c:3b:ff:b6:5f:7e:04:27:2a:53:df:3c:a2:13:2d:
ed:6a:e0:96:67:c2:d2:44:0b:b5:00:35:9e:ba:db:
6b:b3:ae:ce:f4:48:22:73:b1:55:28:b9:35:07:1e:
5a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:92:19:05:2F:8F:BD:D9:5B:A8:C5:83:9D:19:9A:84:BF:C1:F1:24
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XZIZBS-PvdlbqMWDnRmahL_B8SQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:3e:8e:33:df:f5:a8:c9:1c:c4:ef:e2:f4:44:11:04:50:3a:
71:32:a0:f5:f0:52:cf:e9:81:04:6b:a8:a1:d1:31:52:aa:a2:
c8:48:18:63:58:79:61:b3:aa:de:38:82:e6:ea:de:42:4b:50:
b2:ec:66:81:86:37:47:47:e4:14:49:5f:5b:af:68:13:c9:0c:
46:32:c3:fd:51:e9:d8:8b:be:5e:e6:4a:e5:3e:ae:28:dc:d7:
bb:72:83:f1:4d:47:29:ec:a0:70:fc:9c:fd:39:2c:04:b5:22:
77:77:2c:98:68:fb:78:73:d0:29:18:12:40:5a:87:2f:7d:2b:
b1:81:86:12:0a:44:47:84:13:7b:7c:e6:2f:4c:fa:fe:3d:4c:
4f:c0:1f:5a:df:fe:4b:99:90:08:77:14:03:d0:80:19:1f:7e:
36:64:47:6b:6a:18:c9:68:ad:34:4b:53:ba:28:18:2b:43:37:
6f:84:85:72:fc:c9:f6:f9:ec:87:72:ba:5a:e6:e4:0c:e5:57:
8e:b8:31:a5:77:2e:e3:01:9b:d2:80:b4:8a:da:29:54:98:c5:
a8:cf:ed:a4:ed:93:16:a0:06:d4:b8:8f:55:23:52:49:7c:a3:
d1:a9:4c:85:eb:3d:27:58:7f:5e:4e:45:2e:33:5b:a2:9d:8e:
8f:68:8a:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:05 2025 by rpki-client