Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/oZk4x0oHCzQOhRhWHEoaJ7Agop0.roa
File: oZk4x0oHCzQOhRhWHEoaJ7Agop0.roa (raw, json)
Hash identifier: NMGdU0x+/CIUraV+tTntazs7oVnBw3iQ8N0JlEw6HJw=
Subject key identifier: A1:99:38:C7:4A:07:0B:34:0E:85:18:56:1C:4A:1A:27:B0:20:A2:9D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0600
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/oZk4x0oHCzQOhRhWHEoaJ7Agop0.roa
Signing time: Sun 19 Jan 2025 13:24:48 +0000
ROA not before: Sun 19 Jan 2025 13:24:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1536 (0x600)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 13:24:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A19938C74A070B340E8518561C4A1A27B020A29D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:b8:58:ed:66:46:02:30:d9:6a:31:ec:0e:
ff:24:fe:e1:47:a6:96:5e:6c:03:43:dc:67:23:26:
48:d6:2e:d7:c7:92:aa:8f:45:9e:36:88:69:36:75:
a4:8a:4e:10:7f:76:f2:f3:33:27:01:5e:5d:56:0e:
ff:66:9d:b8:92:05:1e:d0:dd:4b:23:37:a6:af:21:
25:bd:c3:04:67:7d:4d:8b:7c:a8:21:1c:4a:e1:97:
f2:76:f0:53:58:fb:76:53:9a:e4:7e:3f:e8:e8:a9:
b7:31:c0:c6:38:8e:88:f6:b7:9a:a7:d2:5b:3f:6c:
60:c9:17:05:bd:1f:df:df:ce:08:b9:37:c1:92:d3:
82:df:19:64:8a:73:35:ad:33:12:19:96:6b:4c:d2:
24:51:b0:ea:89:69:8b:99:53:1c:ea:17:31:a6:00:
be:05:ba:ad:30:9a:5a:95:97:7f:42:56:81:ba:0f:
dd:24:ee:da:a0:04:58:bd:f0:98:84:57:50:aa:43:
4a:c2:1a:79:cc:3a:e0:ea:59:77:47:4b:aa:98:6b:
9f:f3:1c:da:ee:f4:87:08:1c:fd:8f:f2:21:09:05:
25:8b:a1:8d:df:49:f1:88:e6:bd:7e:86:64:80:d3:
9a:da:96:57:52:42:7b:87:a8:24:49:5c:8d:38:ea:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:99:38:C7:4A:07:0B:34:0E:85:18:56:1C:4A:1A:27:B0:20:A2:9D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/oZk4x0oHCzQOhRhWHEoaJ7Agop0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
58:ec:0f:ce:7d:41:e4:60:a1:6e:2e:c0:38:9b:27:74:dd:ef:
3b:d5:c1:ff:e7:af:bf:29:e0:47:27:38:24:9f:56:e1:ae:1b:
8a:de:d6:86:f6:dd:1f:01:32:a0:1c:8c:a0:1a:e1:6a:fa:f3:
41:a0:b7:0b:7c:68:bb:c6:38:fb:d2:78:a0:57:7a:6d:d7:34:
59:61:7a:82:6e:80:78:6f:28:24:9c:f1:aa:f0:fb:05:c3:c2:
2d:41:1a:a0:51:76:43:55:1f:65:5f:ca:69:81:05:e0:31:4d:
48:f0:45:c8:fb:b9:9a:56:18:03:5c:e4:ac:96:4b:17:f1:11:
9c:28:2f:ea:65:63:a5:2c:9b:db:f0:21:e4:bc:65:67:e8:c6:
fe:b7:9c:6b:87:05:d8:1b:ed:f8:5a:e9:29:4f:04:f7:c6:f3:
23:d0:d6:a9:5f:e1:0c:19:f2:b6:28:1c:ed:a7:d6:8c:b5:82:
3a:a2:bb:2b:2b:62:89:56:f5:ae:59:f0:54:22:1b:0b:ee:ea:
11:46:33:3c:de:35:99:57:28:bf:43:6c:0c:c7:4c:37:f2:a2:
f9:80:a3:bc:e3:09:c8:5a:b5:da:8a:e6:9a:21:ba:28:94:7a:
39:04:2b:8a:bd:2e:fc:50:7a:8f:f2:2c:d1:04:77:79:1e:da:
1c:d0:59:9d
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTkx
MzI0NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEExOTkzOEM3NEEwNzBC
MzQwRTg1MTg1NjFDNEExQTI3QjAyMEEyOUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDS9rhY7WZGAjDZajHsDv8k/uFHppZebAND3GcjJkjWLtfHkqqP
RZ42iGk2daSKThB/dvLzMycBXl1WDv9mnbiSBR7Q3UsjN6avISW9wwRnfU2LfKgh
HErhl/J28FNY+3ZTmuR+P+joqbcxwMY4joj2t5qn0ls/bGDJFwW9H9/fzgi5N8GS
04LfGWSKczWtMxIZlmtM0iRRsOqJaYuZUxzqFzGmAL4Fuq0wmlqVl39CVoG6D90k
7tqgBFi98JiEV1CqQ0rCGnnMOuDqWXdHS6qYa5/zHNru9IcIHP2P8iEJBSWLoY3f
SfGI5r1+hmSA05ralldSQnuHqCRJXI046nVvAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUoZk4x0oHCzQOhRhWHEoaJ7Agop0wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL29aazR4MG9IQ3pRT2hS
aFdIRW9hSjdBZ29wMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFjsD859QeRgoW4uwDibJ3Td
7zvVwf/nr78p4EcnOCSfVuGuG4re1ob23R8BMqAcjKAa4Wr680Ggtwt8aLvGOPvS
eKBXem3XNFlheoJugHhvKCSc8arw+wXDwi1BGqBRdkNVH2VfymmBBeAxTUjwRcj7
uZpWGANc5KyWSxfxEZwoL+plY6Usm9vwIeS8ZWfoxv63nGuHBdgb7fha6SlPBPfG
8yPQ1qlf4QwZ8rYoHO2n1oy1gjqiuysrYolW9a5Z8FQiGwvu6hFGMzzeNZlXKL9D
bAzHTDfyovmAo7zjCchatdqK5pohuiiUejkEK4q9LvxQeo/yLNEEd3ke2hzQWZ0=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:30 2025 by rpki-client