Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/bAc1etfp6zS_KCzV7CWJGGSRMkg.roa
File: bAc1etfp6zS_KCzV7CWJGGSRMkg.roa (raw, json)
Hash identifier: /R8Ym3koS1ZPzOj1Qhvd1MXH+h0h2/y5t3aI60MRl44=
Subject key identifier: 6C:07:35:7A:D7:E9:EB:34:BF:28:2C:D5:EC:25:89:18:64:91:32:48
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BE0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bAc1etfp6zS_KCzV7CWJGGSRMkg.roa
Signing time: Tue 04 Feb 2025 05:25:39 +0000
ROA not before: Tue 04 Feb 2025 05:25:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3040 (0xbe0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 05:25:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6C07357AD7E9EB34BF282CD5EC25891864913248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:8b:60:f3:9a:8f:96:72:6c:c6:86:bd:ea:
16:39:4e:b9:7b:74:77:f9:93:1a:5e:1d:40:a5:3e:
d9:39:bc:73:b2:5a:b5:e8:b7:23:d9:fb:e7:85:f0:
ce:e7:a3:6e:e0:fe:0d:6b:7e:c6:19:93:44:bb:93:
b9:88:85:88:fe:78:06:9b:ad:a6:47:b4:02:df:4b:
b4:23:9f:d0:8a:10:35:14:27:a2:44:02:68:68:c9:
0e:c2:50:61:65:d5:42:85:6a:9d:13:a0:31:96:f2:
8d:4a:60:93:ea:2d:37:a1:85:cc:7c:59:a0:a7:69:
a3:ae:f1:46:46:3a:8c:fb:a1:2d:32:20:a3:94:f4:
c6:eb:d8:d5:5c:34:29:c1:b8:fd:fc:ef:10:3c:b1:
85:16:c3:b5:c0:f9:94:bb:ab:46:a1:c3:cf:e1:58:
4f:7c:fd:b2:b6:76:73:9c:09:1c:95:28:23:60:5a:
bb:ac:cb:60:06:d6:2e:0e:0f:b9:45:dd:c9:35:62:
11:41:b6:37:80:94:b6:f2:98:12:9c:9f:23:18:1d:
df:88:3e:ec:94:ad:ef:74:d1:6b:38:c5:98:86:a4:
2f:98:56:2f:ec:44:e2:bb:26:80:61:cd:29:6d:1f:
46:94:b1:36:c7:a5:0e:aa:a2:b7:93:ea:2a:54:54:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:07:35:7A:D7:E9:EB:34:BF:28:2C:D5:EC:25:89:18:64:91:32:48
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bAc1etfp6zS_KCzV7CWJGGSRMkg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
50:9d:15:0d:80:d9:15:a5:4c:cb:43:38:d9:0f:89:0c:99:58:
b2:f7:1d:b7:eb:85:21:9d:c2:ca:35:8d:c9:08:27:e7:8e:1a:
a2:e2:b4:f0:08:60:14:d5:83:73:ea:55:10:71:31:dd:6d:0f:
ff:03:95:2c:7c:68:d2:28:16:3a:c7:7e:fd:cf:8f:15:b4:11:
bd:9b:d8:0b:1d:6d:cb:9c:e4:9f:a0:27:fd:86:f0:22:be:00:
2b:7e:bb:cf:86:b2:53:9b:82:4c:2e:4b:ad:72:f5:33:8f:b8:
27:79:08:17:e8:27:f8:1f:93:4d:6e:ff:f4:12:4c:c2:e9:a5:
15:cb:5b:10:2d:93:68:70:77:79:aa:7a:d2:7b:50:5b:b9:f3:
f6:72:2d:8c:ac:aa:ba:fa:a7:27:55:a7:ef:6c:46:4b:a2:6b:
22:59:c6:0e:7f:00:c3:6c:0a:bb:1e:d2:07:20:70:f5:f1:42:
ad:41:11:80:4d:8b:97:cd:1b:2a:3c:3f:b9:87:cd:2c:92:42:
59:fe:ba:20:b7:bb:73:9c:96:ea:d6:8c:85:f7:64:14:7d:c2:
4d:18:60:c0:51:d1:27:9b:26:8b:5c:20:4c:61:5f:b5:8d:5c:
db:55:96:66:00:4f:9d:16:f9:68:12:ed:b5:1b:e5:e6:a4:a2:
c0:c8:37:fe
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:03 2025 by rpki-client