Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yRNklvL0AMsQI_hOjxUlbzSm4-E.roa
File: yRNklvL0AMsQI_hOjxUlbzSm4-E.roa (raw, json)
Hash identifier: JO10OWUHEcGBGVVYIZhH0YH4VN8H61ifFpZl1TeZrVE=
Subject key identifier: C9:13:64:96:F2:F4:00:CB:10:23:F8:4E:8F:15:25:6F:34:A6:E3:E1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C06
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yRNklvL0AMsQI_hOjxUlbzSm4-E.roa
Signing time: Tue 04 Feb 2025 14:55:40 +0000
ROA not before: Tue 04 Feb 2025 14:55:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3078 (0xc06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 14:55:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C9136496F2F400CB1023F84E8F15256F34A6E3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3a:b9:39:f8:88:87:37:b8:1e:68:92:31:59:
08:2f:2b:99:03:5d:32:5e:44:0a:7a:58:d9:7e:e4:
82:8e:99:de:52:f1:f9:fc:3b:53:d5:07:16:76:74:
23:54:64:c9:e8:9b:d3:0e:dd:c6:91:b0:88:9f:f8:
8b:3f:94:28:2d:ed:4a:77:23:63:0c:b7:a5:a7:fa:
82:42:62:77:32:98:df:f0:3f:d1:9c:45:d5:fb:dc:
21:68:db:32:51:fc:ec:6f:9f:dd:33:26:a3:8a:1e:
b9:e3:2b:f2:5a:5d:e1:e8:0f:e8:d4:36:1a:3c:75:
fb:bb:a0:03:78:db:a9:1a:af:65:e1:77:c5:9b:48:
91:59:72:e9:8f:2c:88:6f:17:6e:08:a0:57:2a:02:
e6:3c:df:f8:d4:02:ce:22:64:06:8b:ae:bc:66:3c:
b9:23:48:20:a1:4c:ac:55:d3:14:a8:9b:c1:21:2b:
61:d2:7a:35:47:37:27:49:a7:99:dc:12:dc:23:12:
0f:64:8c:6d:7f:ca:1a:cd:fe:c5:55:fe:26:76:d8:
b5:4c:a9:4f:b6:46:62:8c:24:eb:8f:4e:21:76:3d:
8a:c7:7c:6f:92:e1:28:c0:b7:49:e3:32:22:6c:06:
5e:e4:f9:8b:4b:ee:2e:be:bf:4b:ce:bd:28:4f:47:
ce:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:13:64:96:F2:F4:00:CB:10:23:F8:4E:8F:15:25:6F:34:A6:E3:E1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yRNklvL0AMsQI_hOjxUlbzSm4-E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:87:b3:69:23:c7:fc:3e:74:de:5c:ed:3d:89:44:27:b7:c7:
9c:e3:c6:58:bc:58:c8:17:a6:97:d1:aa:1d:10:b0:9c:12:62:
76:ca:3d:4f:73:72:98:80:c6:ab:bd:85:3f:ac:d7:f6:71:62:
e6:ff:49:e7:ce:a9:68:5f:ea:dc:9f:a8:46:0d:72:57:3a:40:
55:19:59:d0:73:e1:9e:ea:ec:2b:dd:a6:7e:47:fe:68:fe:33:
d1:0c:da:1e:51:51:d3:8c:4c:2f:70:8f:16:5f:67:0d:5c:1a:
b7:e6:98:27:ce:5e:07:91:25:99:cd:69:cb:00:f6:0a:42:5f:
d8:12:aa:2e:e6:19:de:77:b5:30:fe:50:fe:d1:7b:46:0e:65:
79:13:50:8d:10:55:3a:a4:4d:ec:12:c6:20:a1:15:3c:a4:8d:
2f:ea:62:9e:1f:9c:0d:68:08:af:06:c2:ba:5f:45:f3:49:e7:
54:b4:ef:8c:7f:78:3b:4e:3f:3b:6b:28:6d:e1:72:43:2e:42:
58:1e:e3:63:5d:3f:87:71:a4:b9:c6:c4:11:ef:8a:f9:ba:20:
26:4f:f1:19:ca:44:a7:67:62:07:b4:57:c8:6b:82:6e:51:c6:
e6:7d:14:c9:c1:09:80:35:71:6b:34:bc:2c:ee:68:78:75:35:
13:70:70:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:40 2025 by rpki-client