Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/xpitToc7IHHV1e_O4VmUs1Q5FNs.roa
File: xpitToc7IHHV1e_O4VmUs1Q5FNs.roa (raw, json)
Hash identifier: DZ191+CZm8Addw8dG+LQLEN4J7YecC7pz9fcVogwZoE=
Subject key identifier: C6:98:AD:4E:87:3B:20:71:D5:D5:EF:CE:E1:59:94:B3:54:39:14:DB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D60
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xpitToc7IHHV1e_O4VmUs1Q5FNs.roa
Signing time: Sat 08 Feb 2025 05:25:50 +0000
ROA not before: Sat 08 Feb 2025 05:25:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3424 (0xd60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 05:25:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C698AD4E873B2071D5D5EFCEE15994B3543914DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:e1:83:df:19:39:42:82:12:83:7f:57:09:
3a:c9:07:dc:df:85:1c:08:3c:3a:83:e7:06:5c:fb:
c6:16:14:31:37:a2:8d:48:33:99:e5:11:72:8a:01:
8e:81:19:49:11:b5:b5:68:ee:93:f4:5f:49:c9:b4:
d7:91:c8:38:e8:e0:c3:52:ca:fe:9f:03:a6:27:57:
10:60:22:bc:d6:ec:e9:b0:8c:63:0f:ac:da:54:b7:
c4:f4:48:e5:ed:1a:18:04:42:b5:b8:6b:44:d7:d3:
6f:f3:f3:d7:6f:27:c3:b0:d7:23:84:50:ca:1b:9c:
e4:ec:37:4e:89:02:f2:a0:89:b3:a3:e7:bf:9d:b6:
cd:bf:f2:81:30:0f:b4:d0:4d:20:6a:30:ac:7f:0e:
e5:52:d2:8d:78:f1:b7:20:71:37:57:46:e9:cd:7b:
29:3c:60:68:b6:09:eb:e2:ea:e9:03:39:97:b7:d2:
4d:96:0a:ab:47:c5:31:58:75:7d:70:cd:4e:58:1d:
cb:33:1e:94:23:5e:64:7a:d8:6c:16:68:e5:6c:85:
cb:11:4e:c3:5a:4e:62:1e:70:d0:46:c8:a9:f6:93:
af:1a:fd:6f:20:c0:d0:c8:e5:ae:5c:47:37:19:e1:
a9:4f:b1:35:4a:30:9a:e4:4c:4a:15:b8:77:3e:27:
ad:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:98:AD:4E:87:3B:20:71:D5:D5:EF:CE:E1:59:94:B3:54:39:14:DB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xpitToc7IHHV1e_O4VmUs1Q5FNs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:24:43:00:21:8f:d6:eb:1d:d7:37:ac:75:71:13:34:61:60:
7d:63:c1:93:aa:fe:a3:18:80:a5:4e:50:34:e6:63:fd:29:11:
14:6c:5a:a8:37:0d:2f:1f:9e:fb:b9:44:3e:47:30:ab:54:87:
3e:06:85:7d:be:87:8f:68:40:b6:09:e2:c4:90:ff:23:a4:c0:
c7:5a:34:9e:2b:b1:8a:37:b1:cc:a0:9f:a0:18:6f:60:50:8d:
39:40:2b:5e:12:5f:53:5e:8f:cc:29:f3:37:66:e1:20:ec:6a:
9a:aa:f1:8b:af:56:59:5f:14:c9:dc:05:83:18:4b:26:81:d3:
25:ff:7c:81:20:e3:00:06:74:e3:81:23:e3:09:e8:90:21:99:
3b:30:7a:b2:d4:92:99:ac:d3:78:26:5e:60:b3:ca:e9:16:ec:
a1:ca:e3:bd:52:94:ba:89:fc:a3:40:a9:a0:af:11:20:31:ad:
f8:63:b7:e7:81:69:fe:49:bb:19:4e:ec:6a:8a:9c:9b:d0:d7:
22:4d:59:8a:82:01:0f:e6:d9:2e:b2:fe:48:a2:3c:22:d9:a5:
17:56:25:0c:a6:f9:5b:a2:c4:73:cc:64:fd:b2:14:8b:0d:02:
b6:ee:df:42:fe:1b:69:39:29:86:54:66:80:09:e3:27:87:8b:
bb:8c:aa:dc
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDWAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDgw
NTI1NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM2OThBRDRFODczQjIw
NzFENUQ1RUZDRUUxNTk5NEIzNTQzOTE0REIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0O+GD3xk5QoISg39XCTrJB9zfhRwIPDqD5wZc+8YWFDE3oo1I
M5nlEXKKAY6BGUkRtbVo7pP0X0nJtNeRyDjo4MNSyv6fA6YnVxBgIrzW7OmwjGMP
rNpUt8T0SOXtGhgEQrW4a0TX02/z89dvJ8Ow1yOEUMobnOTsN06JAvKgibOj57+d
ts2/8oEwD7TQTSBqMKx/DuVS0o148bcgcTdXRunNeyk8YGi2Cevi6ukDOZe30k2W
CqtHxTFYdX1wzU5YHcszHpQjXmR62GwWaOVshcsRTsNaTmIecNBGyKn2k68a/W8g
wNDI5a5cRzcZ4alPsTVKMJrkTEoVuHc+J63bAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUxpitToc7IHHV1e/O4VmUs1Q5FNswHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3hwaXRUb2M3SUhIVjFl
X080Vm1VczFRNUZOcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBACUkQwAhj9brHdc3rHVxEzRh
YH1jwZOq/qMYgKVOUDTmY/0pERRsWqg3DS8fnvu5RD5HMKtUhz4GhX2+h49oQLYJ
4sSQ/yOkwMdaNJ4rsYo3scygn6AYb2BQjTlAK14SX1Nej8wp8zdm4SDsapqq8Yuv
VllfFMncBYMYSyaB0yX/fIEg4wAGdOOBI+MJ6JAhmTswerLUkpms03gmXmCzyukW
7KHK471SlLqJ/KNAqaCvESAxrfhjt+eBaf5JuxlO7GqKnJvQ1yJNWYqCAQ/m2S6y
/kiiPCLZpRdWJQym+VuixHPMZP2yFIsNArbu30L+G2k5KYZUZoAJ4yeHi7uMqtw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:29 2025 by rpki-client