Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/j9A0O_4D02GFOLXRVEFrwx_-dcA.roa
File: j9A0O_4D02GFOLXRVEFrwx_-dcA.roa (raw, json)
Hash identifier: ViGf9RolN4PY0NDMess5ub26zdx9I66N28VBRvad4n4=
Subject key identifier: 8F:D0:34:3B:FE:03:D3:61:85:38:B5:D1:54:41:6B:C3:1F:FE:75:C0
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DDA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j9A0O_4D02GFOLXRVEFrwx_-dcA.roa
Signing time: Sun 09 Feb 2025 11:55:54 +0000
ROA not before: Sun 09 Feb 2025 11:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3546 (0xdda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 11:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8FD0343BFE03D3618538B5D154416BC31FFE75C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:dd:66:7e:ae:fa:9e:26:aa:ff:2f:3e:15:
7d:ab:42:9c:4e:15:db:17:fe:39:a7:88:e6:c7:a2:
e5:9e:70:90:05:58:df:ed:56:f1:3b:09:d9:b8:58:
33:40:7b:8c:57:ee:3e:8a:32:f1:e9:59:5e:9c:0f:
fb:3f:77:8e:44:50:02:08:4c:4b:dc:69:41:b1:22:
78:e0:8e:7a:61:5e:09:44:67:ad:27:2f:87:b5:6f:
20:a4:73:15:b9:dc:18:90:c6:76:f8:6e:e3:c7:58:
6c:27:00:b5:be:e4:a8:81:6b:9a:01:dc:47:44:c4:
2c:49:ac:07:ba:b7:25:7f:1b:aa:03:d4:b5:0d:c3:
3f:36:74:53:20:43:7a:e1:0f:97:0f:cd:1b:ca:4f:
a9:f5:06:d0:70:76:1f:e6:7c:4d:41:74:70:5c:ad:
6d:3d:b5:1e:ad:b5:2e:7d:c5:3e:97:27:e9:fa:4a:
93:de:f2:db:c5:53:b0:13:e3:ff:1e:cf:7c:dc:bd:
c9:ba:6f:c5:2b:67:ed:57:91:1b:11:98:9d:65:45:
c4:ca:19:17:3d:dd:71:55:ca:3f:19:b9:31:7a:6c:
95:ad:64:78:ab:6c:08:a0:54:f5:f1:f9:b4:ec:dd:
68:51:57:da:54:6a:42:ba:7f:26:7f:0d:ce:71:9b:
24:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D0:34:3B:FE:03:D3:61:85:38:B5:D1:54:41:6B:C3:1F:FE:75:C0
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/j9A0O_4D02GFOLXRVEFrwx_-dcA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
28:91:cc:e5:7d:56:d2:43:9d:07:ab:a1:88:51:ef:30:54:9a:
e2:0f:aa:ad:d8:76:8c:59:ac:70:fb:e5:aa:68:52:19:3f:35:
32:2c:57:1c:60:59:18:b3:c9:91:da:3a:f2:6b:92:cf:c4:d6:
58:fe:2a:df:84:94:87:ef:ec:16:83:71:c5:81:fb:d6:5a:67:
5d:3c:c6:e4:d8:18:93:52:6f:95:14:09:dc:2b:c8:7c:0a:c6:
a1:87:92:04:6d:cc:0d:f2:97:8c:17:7a:77:f0:6f:61:84:d8:
2f:d8:69:e2:fb:c6:9c:9d:c2:2c:60:4d:b3:b6:94:aa:6e:c6:
d3:db:c9:fc:07:46:5d:18:50:d5:e3:79:5c:a9:03:3b:2d:51:
bd:89:63:73:c3:d0:3d:29:50:0f:53:5c:d5:3e:8f:0f:1e:8f:
26:e0:ac:dc:e3:8b:9c:8b:68:a2:4e:9f:d5:17:13:04:13:7c:
76:aa:3b:4a:b7:90:59:7f:12:6a:70:20:26:01:8e:0e:65:9c:
79:1a:b3:fc:f9:59:94:c6:5f:67:e3:90:56:94:a9:00:b3:37:
1b:ee:12:35:1a:bc:3b:a4:7a:f5:d2:1f:36:af:46:5e:26:f3:
2d:17:e1:2c:de:43:30:5c:6d:09:e2:db:cd:d9:30:ee:74:17:
ad:9d:a3:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:24:33 2025 by rpki-client