Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/xofv93rsC6nlO00JewBpttzGnsI.roa
File: xofv93rsC6nlO00JewBpttzGnsI.roa (raw, json)
Hash identifier: +ulGX4ke1vL56TqLrrg/TngafHQJv3aL+fo/8snUZK8=
Subject key identifier: C6:87:EF:F7:7A:EC:0B:A9:E5:3B:4D:09:7B:00:69:B6:DC:C6:9E:C2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CFE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xofv93rsC6nlO00JewBpttzGnsI.roa
Signing time: Fri 07 Feb 2025 04:55:49 +0000
ROA not before: Fri 07 Feb 2025 04:55:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3326 (0xcfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 04:55:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C687EFF77AEC0BA9E53B4D097B0069B6DCC69EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:eb:55:bb:aa:f2:02:9f:91:de:58:e9:1e:c8:
97:e2:0f:ba:f6:72:69:74:0a:65:b7:37:b1:f0:c0:
26:2c:71:6b:f4:4f:8d:f5:13:0e:8a:c2:e9:09:47:
a7:93:ed:b3:90:dc:7e:b2:15:a0:11:e8:92:95:7c:
c4:43:37:39:36:f0:e1:a6:7d:2a:f4:82:53:e2:26:
de:f1:34:e7:28:e1:7c:c1:04:66:48:b8:7b:c4:e4:
04:2e:96:77:f6:dd:79:43:12:ec:bd:d1:2a:fe:c5:
e1:d3:26:3f:17:95:6a:d6:8e:3c:46:5b:c0:19:d1:
e5:07:26:90:45:bd:c0:2d:07:0d:d8:35:44:1d:70:
b1:25:f1:a2:66:bb:d4:03:01:e0:b5:cd:0c:77:4d:
f6:3c:6c:15:be:61:a6:76:d2:12:cf:e1:0a:62:6c:
66:05:8f:fb:99:e7:41:15:8c:c7:57:41:1a:aa:71:
9c:3e:67:c4:2e:68:ec:97:d9:59:8f:44:7a:60:94:
f3:43:2e:6e:2e:c0:74:7b:29:b9:6d:0a:d3:70:8a:
52:00:4d:24:95:b8:f5:bc:80:8e:d3:f2:52:0e:30:
2b:91:28:38:b0:c7:3d:c2:bf:1c:37:b5:f0:b5:83:
29:64:9a:bd:8b:83:49:99:bb:ab:4d:3a:17:2c:94:
6b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:87:EF:F7:7A:EC:0B:A9:E5:3B:4D:09:7B:00:69:B6:DC:C6:9E:C2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xofv93rsC6nlO00JewBpttzGnsI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
26:5c:10:b2:50:70:18:f6:fc:f6:3f:55:41:ca:b1:de:fd:91:
91:05:f7:a2:a1:27:df:68:04:d9:27:8f:93:85:c6:76:f7:ff:
3b:46:e3:d9:13:dc:16:c2:83:00:a0:f1:56:6e:7e:a6:b7:7b:
f2:23:0c:c2:2f:de:19:50:2d:df:6f:08:30:17:4a:09:92:f4:
99:23:f5:a1:6a:05:1f:8e:18:99:98:ef:f1:2d:be:53:e7:42:
8a:68:96:ab:9b:01:1b:ff:e1:f3:04:2e:49:9e:d1:10:3b:06:
3d:ee:e0:20:21:5a:3b:4d:36:be:c3:de:05:cd:8e:e0:e1:58:
ad:8a:2f:fc:91:82:94:38:6e:6d:ea:56:fa:e7:98:75:6e:dd:
ae:53:de:1e:ac:a7:50:bf:1d:65:53:3a:64:f8:d5:79:35:57:
3a:e4:53:8e:b6:f6:e0:93:56:5c:1f:65:c4:9b:0d:89:53:86:
2d:f3:0e:65:4c:7a:0a:20:f3:0c:cf:87:89:ab:2d:47:61:c1:
20:43:19:11:0b:d0:6b:b3:03:4e:96:7a:b0:63:a0:5d:de:55:
a5:9f:53:b7:70:5e:bf:00:87:94:16:d6:59:a4:ad:cd:04:c0:
68:8e:28:6d:e6:30:c7:95:fa:c4:fa:9e:6f:06:93:89:12:1f:
24:15:4a:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:43:22 2025 by rpki-client