Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/gSM5b3sp8F53M7c3UTK4mrig0zE.roa
File: gSM5b3sp8F53M7c3UTK4mrig0zE.roa (raw, json)
Hash identifier: RkjeAR4z+F0lH2QgEb1U59TqC4TLayKkVOGPZnlS5dE=
Subject key identifier: 81:23:39:6F:7B:29:F0:5E:77:33:B7:37:51:32:B8:9A:B8:A0:D3:31
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B88
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gSM5b3sp8F53M7c3UTK4mrig0zE.roa
Signing time: Mon 03 Feb 2025 07:25:36 +0000
ROA not before: Mon 03 Feb 2025 07:25:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2952 (0xb88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 07:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8123396F7B29F05E7733B7375132B89AB8A0D331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:11:8b:80:5e:dc:61:5f:92:5f:aa:c0:1c:
4e:4e:62:1d:f8:fb:ab:84:4e:ad:2d:19:af:83:cd:
dd:e3:75:85:5f:a5:0c:2b:18:7f:13:49:1b:80:65:
6e:5a:1c:e4:bd:29:c0:c6:04:11:a3:fc:6d:ad:77:
fa:1a:fb:d3:70:7f:5a:61:03:e6:11:c2:00:49:f6:
4c:69:8e:5e:79:1f:bc:11:ef:91:b5:e3:aa:64:f9:
32:65:51:33:db:e7:16:25:7c:e5:d5:98:98:fa:7a:
14:bc:c8:1b:ca:03:eb:e9:53:13:66:fc:68:6b:60:
00:b2:2f:44:e1:94:22:50:7f:93:41:02:5a:a1:f9:
29:97:c1:08:7b:da:5d:7c:f8:d3:69:02:df:40:79:
c6:ec:2a:bb:ba:67:4c:74:22:ba:ba:3d:b7:62:2c:
8c:21:0d:c6:67:8f:29:ad:fc:e9:1b:fa:3a:d5:a2:
27:d5:6f:b3:2f:07:4b:1a:19:16:ce:1d:29:26:28:
dd:61:6f:38:99:36:9c:a8:a0:d3:f4:b5:09:f3:db:
1a:50:24:42:2e:af:5e:4f:a3:28:c4:52:f7:e1:b2:
e9:f0:c6:41:24:85:e4:86:83:2d:3b:7a:24:5c:b8:
17:fb:71:06:c6:83:2b:cf:eb:5c:d2:76:0f:13:4a:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:23:39:6F:7B:29:F0:5E:77:33:B7:37:51:32:B8:9A:B8:A0:D3:31
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/gSM5b3sp8F53M7c3UTK4mrig0zE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:40:f4:0b:e9:b7:32:35:0f:84:a1:5a:34:d0:8c:56:eb:91:
67:3f:ed:5e:1c:98:3b:90:ff:17:1e:b1:5f:d4:1e:e8:df:86:
b0:5d:47:b5:e6:f2:cb:d2:ee:6b:c2:14:7e:9a:83:ea:e3:91:
f5:52:18:bb:3f:96:6c:87:30:25:18:31:6c:f5:87:63:46:02:
1b:49:16:94:04:de:27:7c:54:07:56:ff:3e:f4:9f:95:d8:b0:
84:1c:af:47:a7:58:e2:da:6e:ca:d7:c9:c1:c4:05:c5:b8:5b:
df:70:cc:f0:a8:4e:14:da:54:4c:80:9a:f4:f9:4c:52:2c:19:
18:6e:23:7d:4c:7a:b0:9b:81:39:bb:f2:93:29:92:d1:0e:c8:
07:92:1a:d2:21:ce:68:0f:c7:cd:b7:5d:7b:e2:e4:6d:f1:29:
35:ec:84:2f:7c:e3:c4:34:a0:13:b3:1f:e7:b2:b9:b2:40:1a:
e9:88:81:65:a2:3e:41:01:88:d1:4c:6c:26:67:27:b3:82:13:
db:59:f4:f6:64:32:ad:96:78:32:cb:0c:7c:11:5b:09:e1:20:
52:bb:72:ec:b9:b9:b1:42:6d:a7:13:3b:80:52:df:bb:1e:02:
7a:99:ee:bc:2d:b8:ee:df:ee:e6:86:b8:80:37:2d:2e:94:bb:
5b:3c:67:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:11:07 2025 by rpki-client