Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/m5D0xHtixgiKU5o7ugkS2DU-Nok.roa
File: m5D0xHtixgiKU5o7ugkS2DU-Nok.roa (raw, json)
Hash identifier: wImRIm7f6AjFW6hau62/OM8EI3/Z+mwtuu9rIPzK2q8=
Subject key identifier: 9B:90:F4:C4:7B:62:C6:08:8A:53:9A:3B:BA:09:12:D8:35:3E:36:89
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0606
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/m5D0xHtixgiKU5o7ugkS2DU-Nok.roa
Signing time: Sun 19 Jan 2025 14:54:49 +0000
ROA not before: Sun 19 Jan 2025 14:54:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1542 (0x606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 14:54:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9B90F4C47B62C6088A539A3BBA0912D8353E3689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:95:98:64:eb:ba:37:83:60:5c:2e:31:36:
a6:6f:e5:cc:74:b4:ff:20:d6:ce:d2:bb:71:00:37:
1e:c5:27:5f:19:44:b5:82:1a:37:37:13:62:0f:33:
51:80:88:10:f0:fc:ef:de:de:dd:f3:5e:29:fb:3d:
89:52:b2:81:8a:a9:60:a0:46:ff:ae:78:71:17:53:
b4:65:8c:5d:49:54:fc:6a:4e:73:24:c8:fd:23:76:
b0:a9:46:86:ec:de:fe:dd:cf:b0:b3:72:3c:ee:79:
73:4d:da:2a:d1:9d:8e:1d:c3:74:34:01:ba:d6:69:
87:a7:ea:41:b9:0a:54:4f:a3:07:29:0e:1d:56:d6:
13:d7:1b:4e:ce:d9:81:30:10:5c:ac:32:77:91:69:
bd:5a:e1:b5:86:25:ab:5b:9b:66:e5:c0:15:72:c7:
0a:8e:3e:7c:03:4c:33:e8:5a:68:92:27:9d:9e:a5:
20:99:07:2b:fe:68:42:95:4e:5c:8f:59:1c:ed:2c:
84:29:16:f3:29:6a:45:d2:e1:dc:30:bc:9d:65:51:
0a:3b:75:8e:08:c4:98:a8:c6:25:cc:35:39:45:9c:
bf:29:7d:bc:df:85:98:8c:02:a5:f4:e6:00:23:e9:
cf:2d:56:c4:f2:ba:f4:8e:f2:4d:27:29:d6:cf:c2:
a6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:F4:C4:7B:62:C6:08:8A:53:9A:3B:BA:09:12:D8:35:3E:36:89
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/m5D0xHtixgiKU5o7ugkS2DU-Nok.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
14:b6:63:da:ff:d2:68:3c:d8:a7:c1:fa:5a:f5:59:f5:2f:63:
f6:1f:b1:26:12:cf:34:e4:57:da:6b:4f:6e:b6:e1:9d:79:e6:
09:44:2a:47:4d:8e:34:82:1f:19:30:23:a6:b0:43:43:a0:bf:
3c:00:4e:d0:36:d0:b0:06:d4:a1:6a:6c:7c:42:51:2e:72:0d:
0c:f4:25:1f:96:e6:b7:ab:e9:ba:ce:3b:ad:19:7d:d9:46:df:
44:f7:f3:78:e8:3a:91:92:91:83:49:35:80:75:a1:94:11:f0:
52:81:0f:66:20:25:99:83:a7:9f:e9:69:31:08:27:a0:b2:f8:
32:b2:79:a1:42:d9:7e:85:10:0b:10:b7:56:d6:ec:9a:af:5c:
df:91:41:a8:9e:b5:12:06:ee:00:2f:62:86:e4:f0:5c:ed:c2:
7b:db:94:56:df:9a:6b:f8:fb:a7:ac:91:19:87:ff:da:13:d4:
c9:ed:62:81:9e:16:14:0c:eb:b0:ff:10:95:d6:62:68:0c:ad:
64:6f:78:1d:6d:49:f0:64:8f:27:9c:15:ca:ad:fb:72:e3:0e:
3e:9e:83:72:ce:60:73:2d:14:cf:b2:4c:6f:b1:02:30:ce:56:
d3:df:91:a1:d7:ac:d1:39:e3:9b:df:74:21:9c:cf:c8:05:a0:
23:1e:bf:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:51:36 2025 by rpki-client