Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/wAHqOl-jx7RMS7GKf5b8K_AtNdU.roa
File: wAHqOl-jx7RMS7GKf5b8K_AtNdU.roa (raw, json)
Hash identifier: KWQN/I4BehVQ3bpFs2lzOxD2LsEcueJzUk8psHVVLEQ=
Subject key identifier: C0:01:EA:3A:5F:A3:C7:B4:4C:4B:B1:8A:7F:96:FC:2B:F0:2D:35:D5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B44
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wAHqOl-jx7RMS7GKf5b8K_AtNdU.roa
Signing time: Sun 02 Feb 2025 14:25:34 +0000
ROA not before: Sun 02 Feb 2025 14:25:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2884 (0xb44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 14:25:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C001EA3A5FA3C7B44C4BB18A7F96FC2BF02D35D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:e6:8d:37:68:1d:a5:78:de:40:00:7c:e6:
aa:99:63:e9:eb:00:18:4c:c1:d8:4e:18:03:9d:22:
56:31:43:8c:f2:91:ee:3b:68:16:c4:9b:ad:fd:66:
06:e6:57:37:89:8a:bb:0b:24:db:79:86:d1:e0:42:
7a:db:cc:56:e9:3f:16:db:fb:5f:d7:b8:6c:49:8d:
b3:42:10:7d:79:5d:d2:69:eb:e9:4c:68:eb:14:a2:
2c:ac:25:f6:97:16:dc:4b:d3:19:50:4f:d5:88:b0:
a2:c9:17:b8:8d:bd:b7:9d:2a:82:a1:e3:ac:8a:1b:
d7:2d:aa:60:4c:49:36:e1:34:a9:26:4a:83:71:9b:
27:46:af:0c:52:25:c9:73:a2:d1:1d:bb:49:c2:e1:
24:d4:80:41:34:f9:7e:0a:ab:21:a6:56:fd:89:14:
81:b3:e3:3a:e4:60:2c:05:da:32:cb:3b:26:9e:55:
d3:df:18:91:f4:e7:9a:61:0e:b0:b9:d7:45:4e:34:
ba:85:4e:9c:a4:67:1e:26:be:1d:32:ca:c6:14:40:
57:44:88:6c:86:79:3a:a4:f4:a3:42:b6:a9:66:37:
73:69:d3:b4:14:57:2f:6d:90:81:54:3e:9a:3c:d9:
f5:ff:fe:50:18:df:75:de:06:7b:2f:9e:d3:47:bc:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:01:EA:3A:5F:A3:C7:B4:4C:4B:B1:8A:7F:96:FC:2B:F0:2D:35:D5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wAHqOl-jx7RMS7GKf5b8K_AtNdU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
82:a2:2a:ac:23:c1:52:53:48:68:ad:70:4c:35:ce:c3:c1:58:
9a:e6:c4:aa:88:f7:ae:f5:2b:fd:13:97:30:ce:4f:15:5d:83:
c3:dd:13:7b:58:96:a3:c1:74:28:40:97:14:c0:6f:f7:d8:9a:
fe:aa:9d:5c:24:0b:a5:5d:cc:04:5b:3d:cf:b2:97:ad:a8:dc:
30:c5:c1:55:45:7e:54:ef:08:2d:20:73:18:a6:29:99:0f:86:
62:7b:6f:48:00:7b:7f:29:a6:e2:bf:4d:7d:c7:2d:96:6e:39:
03:cf:6a:f6:78:26:62:10:8a:af:1b:ba:92:de:5b:fd:f9:2d:
6b:d8:0a:0f:7c:ed:28:90:58:e1:98:af:76:a0:f0:d2:4c:4f:
88:6d:65:c6:e1:d8:10:3f:4a:b0:ff:a1:74:dd:f7:63:bd:6d:
31:ef:db:ea:d0:ad:60:69:10:b1:71:88:34:2f:5a:a1:f2:6d:
da:1b:24:80:30:38:a2:08:41:7b:e0:ef:dc:cf:cb:94:f8:35:
d7:a2:84:65:61:55:18:a8:30:94:76:0a:84:55:f9:db:4c:69:
11:ac:92:11:62:78:1d:41:14:ec:a7:2b:d6:24:fc:5f:e5:77:
f2:72:44:50:7a:c0:0c:c5:65:7f:8f:ac:f3:0e:f1:a9:17:5b:
38:d7:14:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:36 2025 by rpki-client