Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YrXdTuhg8Aso6FLF_uRCFvNXmM4.roa
File: YrXdTuhg8Aso6FLF_uRCFvNXmM4.roa (raw, json)
Hash identifier: QwkuRE1Pk+/BawRHcjGh5Q/miNXIpE7h98vc+9/hnos=
Subject key identifier: 62:B5:DD:4E:E8:60:F0:0B:28:E8:52:C5:FE:E4:42:16:F3:57:98:CE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C3C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YrXdTuhg8Aso6FLF_uRCFvNXmM4.roa
Signing time: Wed 05 Feb 2025 04:25:43 +0000
ROA not before: Wed 05 Feb 2025 04:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3132 (0xc3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 04:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=62B5DD4EE860F00B28E852C5FEE44216F35798CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e2:61:7f:b9:b7:3d:16:d5:5f:3a:42:d4:03:
be:d7:e1:ea:10:71:4e:c4:a5:63:19:1f:fc:c0:66:
12:74:e7:00:c6:7d:e4:df:d7:00:45:ef:0e:26:bc:
fe:d0:3e:f8:14:30:eb:16:22:34:be:d5:aa:b3:8d:
a6:cd:d4:27:ad:4d:5c:e2:a8:99:c3:55:eb:b6:7b:
e0:b1:9e:e6:16:c7:a7:a4:63:06:f2:c9:10:c5:15:
29:ed:7d:94:06:e0:35:38:3f:fa:06:52:af:3b:5e:
87:64:90:00:96:9b:46:72:0f:80:0f:93:44:70:60:
22:2c:5b:fd:40:90:fb:34:4f:98:f9:a1:35:f6:b3:
0d:c6:4d:15:39:9e:9f:d2:07:89:40:c2:4c:ed:6c:
26:3f:dd:5e:f5:3d:10:eb:45:5e:4c:14:eb:46:62:
cd:f8:28:0b:79:f6:17:9c:04:7c:8b:65:7c:18:ea:
27:ce:97:43:15:de:dc:23:b5:87:41:3b:d0:b8:ac:
a4:09:34:1c:50:e9:03:b3:b2:e2:23:df:fd:c0:c5:
ac:9c:d4:e0:93:89:fe:c4:de:58:e8:f0:92:99:e3:
3b:f5:d9:77:b0:0e:b6:4d:96:7b:0a:38:a2:c5:28:
71:43:1d:48:3e:c9:0f:ef:79:3d:da:54:3e:1f:6b:
d2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B5:DD:4E:E8:60:F0:0B:28:E8:52:C5:FE:E4:42:16:F3:57:98:CE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YrXdTuhg8Aso6FLF_uRCFvNXmM4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:24:f4:13:49:52:f8:cf:44:f7:2f:81:d5:82:c6:2e:04:9f:
ea:ad:6a:c6:b3:c2:2b:ef:b1:b1:5a:71:d6:41:a9:3e:dd:81:
36:0c:04:ee:82:b8:a2:a8:0d:9a:34:55:5a:ce:14:88:58:f3:
16:33:a8:50:6a:d1:0f:f6:18:4a:96:4e:7f:41:2d:fd:3b:e7:
e7:9b:30:f2:1e:70:df:44:65:64:f2:39:45:20:70:76:14:2e:
7c:4e:b0:bc:47:3f:df:e3:16:fc:0a:d5:e7:bb:57:f8:bc:2e:
d2:6d:0f:24:c9:37:3d:3b:e2:6d:1f:57:ec:2e:9d:5f:35:19:
ca:0f:80:dd:c4:60:f1:a2:97:e1:9b:5f:ff:79:99:89:07:03:
36:b9:06:41:99:52:6a:ae:ff:28:ad:a9:dc:1e:4b:93:61:60:
cd:f4:4c:1e:d8:b2:dc:5c:29:9b:2f:93:91:fa:e3:85:e4:11:
fa:57:66:51:59:2d:10:77:05:0b:cf:1c:76:35:fb:08:2c:e0:
d3:53:92:74:f7:d1:b0:7b:5f:e6:b4:99:3a:e5:b5:e0:c8:1f:
a1:80:13:52:3a:de:56:95:f2:56:4e:07:5f:5a:1d:2b:bf:3b:
0f:3b:36:8d:ef:29:49:6b:7f:08:04:8b:70:98:23:90:43:6e:
d8:0e:91:49
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:37:38 2025 by rpki-client