Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yDMgrqawHj4noKa7SZG-ZPo-KTc.roa
File: yDMgrqawHj4noKa7SZG-ZPo-KTc.roa (raw, json)
Hash identifier: /X5ZcIjsY5wkV5n98vrZ+8+X41F0/3IK7m0uk1NuS2A=
Subject key identifier: C8:33:20:AE:A6:B0:1E:3E:27:A0:A6:BB:49:91:BE:64:FA:3E:29:37
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05D0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yDMgrqawHj4noKa7SZG-ZPo-KTc.roa
Signing time: Sun 19 Jan 2025 01:24:47 +0000
ROA not before: Sun 19 Jan 2025 01:24:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 01:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C83320AEA6B01E3E27A0A6BB4991BE64FA3E2937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:06:2b:24:59:62:ed:61:0a:2f:3c:a6:c6:
cc:86:a2:eb:d5:72:b5:b4:e9:b0:6e:ad:86:04:cb:
8b:83:ce:14:c0:bc:3a:67:e8:44:b6:9a:f5:34:a0:
25:11:74:70:52:7e:d1:dd:e7:b6:4a:f6:cd:c7:9a:
fa:14:d5:a8:18:bf:d0:80:08:23:31:fb:cb:af:dd:
31:1f:37:b7:4b:29:3b:3b:d5:90:4e:97:57:ad:db:
87:3e:87:c7:0a:e5:9f:28:82:60:31:5b:b1:52:9f:
09:76:7f:4e:95:d2:42:fb:cd:9e:ec:49:61:40:96:
64:4c:7c:fd:2c:8e:dc:b2:83:8f:47:0b:0c:97:6f:
15:d6:0d:27:cf:4f:aa:c2:dd:d8:d6:31:61:b2:3c:
ca:bd:2d:a3:00:42:0a:16:39:61:36:36:b1:0e:c0:
90:7e:f1:1d:68:12:d4:e6:9c:b1:c3:4c:67:df:91:
bb:d1:8e:56:ed:19:39:8a:60:8c:76:9a:89:1f:07:
d1:5f:ea:8e:af:e1:2c:99:5b:07:9c:2f:a4:f7:42:
40:e1:20:fb:e3:bd:e3:95:73:37:bc:0d:75:72:75:
33:b6:d6:8f:4b:a9:2b:1d:d4:16:a5:2e:75:e7:47:
d6:16:cb:e0:af:46:49:cb:56:09:84:67:c6:57:50:
e9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:33:20:AE:A6:B0:1E:3E:27:A0:A6:BB:49:91:BE:64:FA:3E:29:37
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yDMgrqawHj4noKa7SZG-ZPo-KTc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
74:57:3b:d4:29:a6:5d:a8:da:a0:53:d7:44:cd:d5:cb:44:65:
2c:16:8a:3e:a1:0c:a7:de:c1:7e:a6:49:28:2f:c1:29:b6:b3:
cc:a3:71:cf:ab:b1:9a:14:c2:ae:b1:5a:df:94:39:3b:bd:62:
a9:89:65:cd:8f:4f:eb:2e:fb:9d:05:9d:f8:2c:1b:99:25:fd:
a4:ac:bb:97:a9:b0:1d:1c:c2:b0:af:d7:86:e1:f5:5c:bd:61:
e3:aa:f3:c8:ec:a4:49:93:22:cf:a4:e0:9f:9a:ab:5a:96:3c:
75:29:b9:8b:3e:8d:00:51:e4:4b:be:40:19:aa:12:a5:3c:03:
69:63:ff:51:07:31:15:7f:bf:0b:4f:b9:bc:69:56:47:fb:34:
22:31:41:4a:1b:b9:d6:ab:64:60:4e:1b:53:ac:31:8d:ed:15:
05:c8:cf:9c:51:36:18:82:33:44:1c:22:45:1e:6f:83:52:4b:
cf:37:9b:11:a3:d4:88:ce:78:e2:ed:19:b0:35:9b:50:ba:a2:
55:ce:76:4c:08:73:01:43:9e:14:7d:12:1b:37:b1:48:ab:a4:
d0:a1:d7:2b:ae:50:35:9f:e6:d0:3d:49:62:ce:92:54:36:ef:
84:98:2f:75:e2:9e:cc:ff:99:90:b4:56:9d:3d:f1:c7:51:ce:
ed:d4:bc:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:20 2025 by rpki-client