Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Xniakk9jOIeFIBso83LKcIUCa0E.roa
File: Xniakk9jOIeFIBso83LKcIUCa0E.roa (raw, json)
Hash identifier: l/HTpX7n1YqoOHzRHnWiBWdc0H/zB8p2pA+eiTgS6nY=
Subject key identifier: 5E:78:9A:92:4F:63:38:87:85:20:1B:28:F3:72:CA:70:85:02:6B:41
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07E6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Xniakk9jOIeFIBso83LKcIUCa0E.roa
Signing time: Fri 24 Jan 2025 14:56:26 +0000
ROA not before: Fri 24 Jan 2025 14:56:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2022 (0x7e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 14:56:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5E789A924F63388785201B28F372CA7085026B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:a0:d2:96:83:e0:01:fd:90:d8:38:cd:51:
37:45:38:11:40:a0:34:f3:70:b7:f1:63:89:98:9f:
d6:ba:7a:4d:43:d4:eb:3e:63:f7:d6:00:e6:a2:e0:
9a:d3:b2:88:c6:c2:35:a4:c2:e5:c1:94:52:8e:1d:
6b:c3:d9:bd:db:26:98:64:46:dc:bd:2d:4e:49:e0:
59:fa:df:e9:38:4b:be:a2:45:be:42:df:76:1c:52:
96:53:70:37:b2:5f:4e:6c:e4:63:41:af:1b:52:41:
33:03:b9:ab:57:45:64:2a:f4:ab:e4:f3:f4:de:41:
87:ff:29:52:ae:4b:d2:f0:39:72:e4:b6:49:9f:66:
8e:f1:2e:5c:f1:bc:76:20:ef:70:2a:0d:95:86:47:
e8:f0:5c:72:10:73:72:fc:a0:0d:67:92:7d:c6:60:
51:bd:3e:a1:97:26:11:2c:db:26:40:99:d8:7b:18:
c2:20:ff:95:46:51:7c:0b:0d:49:44:63:9d:a9:a5:
2c:b1:a0:f5:79:51:e2:70:54:d4:df:72:d5:0c:0a:
92:ca:f6:70:12:94:3b:f5:0e:80:eb:ca:d7:6a:a0:
10:70:6c:05:0e:20:db:8a:75:52:ba:aa:6c:00:3e:
be:64:68:e5:ab:87:0f:18:03:fc:cb:a6:77:c3:a3:
32:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:78:9A:92:4F:63:38:87:85:20:1B:28:F3:72:CA:70:85:02:6B:41
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Xniakk9jOIeFIBso83LKcIUCa0E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
12:e6:3a:9a:c5:eb:6f:5b:0d:e8:55:a9:d3:54:f3:ab:51:13:
a4:5d:89:0a:6a:95:c0:7f:82:f8:b2:38:0b:12:5d:e9:8e:cf:
ba:9b:73:c7:da:68:91:b2:3e:3d:6d:ab:25:c8:30:37:f7:c8:
71:ad:9a:5f:dc:4b:d4:b5:f5:35:44:44:0a:3c:6b:d4:96:e7:
b2:86:cb:4a:55:43:ad:48:d6:e5:61:cc:b7:04:04:75:53:ec:
ab:6e:89:0f:c5:da:80:ee:23:fa:bc:85:62:fa:b1:63:ea:95:
f3:ec:50:93:8e:5f:94:50:93:04:90:31:e6:ff:21:d4:ba:1c:
5e:b9:b0:32:d3:d9:77:f8:20:c7:c3:75:24:6d:13:34:79:d1:
d7:e5:4b:37:1b:7b:be:19:42:8f:dc:79:41:4d:37:2e:7e:c3:
62:d2:a1:19:69:6f:01:af:70:56:02:0f:85:a1:63:2e:d4:25:
01:c4:b0:8a:17:fe:04:53:bd:11:c1:29:23:8f:0f:55:c6:e3:
7d:5e:d5:a1:15:e6:dd:6e:43:6a:7a:4f:d4:71:47:de:9e:ae:
72:c3:d7:8c:b7:1f:f8:9a:d7:f5:a6:b8:fb:6b:25:26:72:91:
51:17:04:15:bc:d0:b1:57:ea:ce:76:ee:9a:7d:f4:34:0d:fb:
ca:7c:b9:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:18 2025 by rpki-client