Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/fbQ5ESXvM-EiYIoRdval76dvPl8.roa
File: fbQ5ESXvM-EiYIoRdval76dvPl8.roa (raw, json)
Hash identifier: 3ldjYQqzAqBFegouu97ibEA0R3MkUDxm7m0F22nf9g0=
Subject key identifier: 7D:B4:39:11:25:EF:33:E1:22:60:8A:11:76:F6:A5:EF:A7:6F:3E:5F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D20
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fbQ5ESXvM-EiYIoRdval76dvPl8.roa
Signing time: Fri 07 Feb 2025 13:25:47 +0000
ROA not before: Fri 07 Feb 2025 13:25:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3360 (0xd20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 13:25:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7DB4391125EF33E122608A1176F6A5EFA76F3E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:c0:a9:3d:d3:8c:e7:7a:75:8e:6e:85:74:
78:e6:6b:7e:e1:de:9d:b4:4f:a3:6d:a2:2a:1c:64:
39:de:f0:3c:c3:ff:ec:fa:75:ba:b6:97:17:49:fc:
c4:2d:34:b8:8b:fa:c1:bb:d7:d1:82:8e:9e:97:81:
0a:b9:57:10:43:0a:fe:60:4e:98:17:a5:f4:be:c6:
25:79:a4:1c:b6:e9:79:6f:66:e0:a2:8a:24:7a:4d:
6e:ab:ba:6e:9c:78:e0:2f:72:b9:48:09:5d:46:3f:
2c:7e:ea:c2:40:95:df:77:d0:ae:06:41:3b:2e:09:
38:af:0b:85:3c:7f:d9:f1:59:57:c2:4f:bb:85:96:
38:0f:71:aa:f3:e6:65:99:47:c7:cc:98:48:2b:31:
d5:6d:80:a0:1e:98:06:f8:a2:d8:7a:51:8b:71:c2:
b7:30:d2:9c:62:ca:7c:ea:7b:f8:f5:96:d6:e9:ce:
f2:cb:00:6e:38:f2:c1:53:e9:4d:f5:75:4e:a6:6b:
51:14:83:ee:c7:f9:97:df:4b:e6:9b:71:0f:9f:9e:
5e:df:a3:4b:b3:0f:0d:8a:59:a1:f6:1c:73:23:8d:
a4:34:a2:0f:be:7b:2d:14:12:27:87:8b:8c:1d:c8:
6a:a8:d4:60:5b:91:58:bf:2f:88:a4:b4:7f:31:3d:
2f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B4:39:11:25:EF:33:E1:22:60:8A:11:76:F6:A5:EF:A7:6F:3E:5F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fbQ5ESXvM-EiYIoRdval76dvPl8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:87:85:3b:99:80:9b:6a:80:2b:de:07:3f:c9:00:5b:7e:7b:
ed:34:0f:75:0d:27:23:54:75:11:c9:a0:0c:62:56:83:3e:a7:
60:46:70:12:d0:fa:a2:ba:9e:1b:76:bb:43:a3:94:0b:ac:4e:
b2:7a:44:e1:8b:49:5b:97:ab:c9:0c:33:a7:2f:05:88:5b:e1:
69:29:97:97:65:f9:80:28:0b:ba:26:18:70:fa:3f:96:01:45:
6d:b6:5f:bd:12:c6:e2:40:ae:0e:36:11:f8:6d:bb:29:6d:13:
af:ab:19:9d:3f:e4:81:4a:2d:71:20:e7:0a:49:55:dd:de:e6:
d2:29:fb:75:e3:7d:88:12:fb:36:33:75:4a:45:cc:63:e2:0f:
83:04:2f:39:4a:4f:01:8a:f1:53:bc:52:fb:3d:3b:13:c4:d0:
13:66:5f:ea:84:07:2a:37:4e:94:d9:bc:f7:f9:4d:bd:df:39:
ff:49:1e:ff:cc:96:36:89:9b:bb:fc:1c:9c:55:26:a9:0f:0f:
2b:ac:80:ff:60:0f:6d:5b:e2:42:4d:79:74:2f:05:67:9a:8b:
3b:39:77:b1:8f:8f:7f:a6:6b:b1:83:4c:8d:4e:06:1b:e6:50:
00:94:1b:42:01:4f:9c:79:2f:b8:e3:67:d6:7a:1f:52:6d:92:
a3:07:7c:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:09 2025 by rpki-client