Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/gIJNawB-ccPpGMZVmV8ffFqe8OQ.roa
File: gIJNawB-ccPpGMZVmV8ffFqe8OQ.roa (raw, json)
Hash identifier: HeTCBCbSAYE57j4DPoqJuj0BWdKnKAt0H04h22izxBQ=
Subject key identifier: 80:82:4D:6B:00:7E:71:C3:E9:18:C6:55:99:5F:1F:7C:5A:9E:F0:E4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0544
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gIJNawB-ccPpGMZVmV8ffFqe8OQ.roa
Signing time: Fri 17 Jan 2025 14:24:45 +0000
ROA not before: Fri 17 Jan 2025 14:24:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1348 (0x544)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 14:24:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=80824D6B007E71C3E918C655995F1F7C5A9EF0E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:61:0b:9e:3e:ba:61:4e:f4:90:bb:81:56:
9b:26:b4:8d:05:1c:e9:20:a9:9b:b3:09:8c:f5:74:
48:54:41:3c:27:65:d1:ae:30:6c:6f:61:f2:e1:4a:
c0:ac:1b:b2:95:90:eb:f6:44:78:21:a5:ee:3e:ed:
cd:bf:89:e3:0e:6f:ab:a4:dc:df:0a:07:ac:cc:e0:
8c:fc:52:0c:9d:8c:d8:84:34:95:5b:a4:c6:3e:50:
84:93:36:6f:c6:6e:d9:cd:bd:0c:4e:e5:4b:a7:03:
33:a4:c4:bf:d4:f5:79:83:97:cd:3a:63:f4:34:ec:
d8:f2:c1:0e:70:bc:12:f3:cb:f9:29:54:e2:29:9a:
8f:35:ae:5d:7f:43:52:62:ea:5a:7a:a7:4a:1d:de:
e6:be:8a:e4:53:7c:e2:3f:a1:41:c3:95:35:ad:53:
14:d1:c8:16:04:7d:c5:43:d1:67:f8:fa:e0:f8:52:
a7:cb:01:bc:64:d8:4e:56:5d:ce:03:4e:22:3a:65:
ee:b1:42:15:eb:48:2d:7f:5c:4a:f7:b6:ef:67:75:
c2:28:a1:19:29:7e:d6:0a:43:d9:ab:60:d9:fa:f1:
14:ae:12:f2:05:89:c0:e0:8e:79:af:0c:58:34:1a:
3b:7a:62:33:61:80:1c:33:33:31:e8:0b:02:d6:e3:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:4D:6B:00:7E:71:C3:E9:18:C6:55:99:5F:1F:7C:5A:9E:F0:E4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gIJNawB-ccPpGMZVmV8ffFqe8OQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
74:56:a9:41:63:9d:2e:6e:81:c6:ed:c8:33:82:87:6b:ce:62:
25:8c:17:d2:a6:eb:70:4b:4f:65:07:4b:04:74:cf:07:9e:97:
9d:5e:3c:7b:17:b3:17:45:b4:c6:39:fd:97:39:e1:b6:88:d6:
87:e8:f6:af:15:22:7f:bf:1c:92:de:d1:06:e7:2a:66:61:b5:
b7:09:b6:ea:fe:04:05:ab:bf:e2:95:e4:0c:7b:8c:78:02:a0:
3f:59:74:6b:8a:b7:8b:41:da:b2:0f:a6:48:88:2e:c4:5a:b4:
0f:da:ff:ff:e6:5b:9d:18:44:45:d2:ab:c1:eb:cc:89:43:f8:
f9:aa:fb:7c:81:29:d4:22:f1:16:3b:d0:f0:f3:f7:2d:76:54:
cd:33:a7:c4:3d:58:d4:00:47:47:2e:ed:de:45:b0:ac:cd:70:
f3:10:17:9a:55:00:3d:f4:fa:08:14:c8:ab:c2:65:c7:de:ef:
c5:6a:7c:7d:8c:a8:2c:23:75:9d:e5:1a:8e:39:26:e8:01:34:
df:43:d8:3c:e8:ad:2d:a4:c1:7b:0d:b2:b4:c8:d2:62:d4:af:
27:fe:00:09:78:0d:c8:84:e5:71:e8:e8:58:6b:00:fc:da:a4:
aa:7c:83:b2:77:5c:58:08:73:b0:49:b2:ad:14:e2:9f:03:28:
1b:29:67:2e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:07 2025 by rpki-client