Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/z_ul3gVpGi7fAg9sjOXCQUy8E-0.roa
File: z_ul3gVpGi7fAg9sjOXCQUy8E-0.roa (raw, json)
Hash identifier: szFkZXgnBTmb2JbSw76tq1oxFOJbiihps4rgNBYsZFA=
Subject key identifier: CF:FB:A5:DE:05:69:1A:2E:DF:02:0F:6C:8C:E5:C2:41:4C:BC:13:ED
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BFC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z_ul3gVpGi7fAg9sjOXCQUy8E-0.roa
Signing time: Tue 04 Feb 2025 12:26:55 +0000
ROA not before: Tue 04 Feb 2025 12:26:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3068 (0xbfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 12:26:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CFFBA5DE05691A2EDF020F6C8CE5C2414CBC13ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d2:b8:b9:c5:a2:01:7f:b4:d4:25:02:18:02:
18:a3:2e:b0:d4:01:27:6e:a4:01:36:4c:d9:31:37:
c5:77:e1:41:79:f6:49:1a:c5:c0:4c:9d:72:ec:5e:
45:97:96:6d:dd:35:3f:42:24:ff:c6:2d:bc:fb:3c:
d9:a2:27:31:68:ac:19:91:c9:88:c9:03:e9:00:db:
a3:27:28:d3:1c:03:0f:40:e5:36:d9:be:ff:fd:56:
33:de:9a:28:fb:3e:5d:5c:2c:46:f9:91:39:2d:c2:
86:dd:6c:95:58:25:d3:ae:81:83:c4:89:55:0a:8f:
98:75:d9:76:e7:a6:28:d6:13:6f:2c:50:b7:ef:86:
f1:3e:a4:8e:fa:01:e6:f2:2a:b2:91:29:5f:04:fb:
52:e0:ad:68:f5:37:c8:40:14:e4:e8:f9:a7:c7:ba:
79:59:6d:ac:b2:1e:49:a1:a2:f8:7c:5e:d7:e1:94:
32:7f:07:b1:83:0b:7f:0c:0e:7e:3b:f8:ca:d4:ab:
11:90:1c:4b:9b:84:12:a0:b1:5b:ec:c8:e1:bb:b2:
9e:d5:83:06:4e:4d:20:6c:c4:07:9c:5f:99:ae:83:
c0:43:4e:45:50:18:1c:06:fd:c9:4e:ba:1e:d1:b7:
41:87:71:04:65:59:73:38:f1:56:77:4f:f5:5b:b8:
55:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FB:A5:DE:05:69:1A:2E:DF:02:0F:6C:8C:E5:C2:41:4C:BC:13:ED
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z_ul3gVpGi7fAg9sjOXCQUy8E-0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
21:41:9f:c2:28:7d:bc:e4:ff:96:d5:05:a3:a9:e1:b4:2a:f4:
16:37:d2:dc:a5:e7:10:e9:6b:26:7e:c0:74:d4:84:44:a1:9b:
d9:cd:14:d2:c1:e3:c1:23:8d:8a:1f:10:81:c6:38:b5:a5:28:
4d:67:84:dc:db:97:41:ab:c2:52:55:17:27:6b:2e:d1:e9:95:
4a:23:54:f1:55:2f:c5:ad:0c:5f:30:01:ca:b2:06:34:4d:31:
5c:81:16:52:56:86:ab:f3:f5:ab:b5:91:50:6a:71:f5:8f:15:
d6:ff:26:29:13:94:be:8f:ed:23:c6:15:df:f6:0a:8b:ad:84:
50:c8:05:61:b4:b6:3c:dc:94:7a:e3:9c:62:d7:c2:9f:16:24:
35:16:53:d3:fa:88:6d:a4:22:38:eb:d9:c2:ed:8c:33:1c:07:
c9:93:c1:a2:5b:8e:d9:a4:06:50:9c:6f:92:58:79:1b:03:f0:
db:46:ae:17:ed:cf:69:ec:17:f7:45:04:61:c7:06:4b:b2:97:
4b:cb:05:d5:1a:0c:7d:54:83:64:38:5c:ce:2e:91:be:60:b2:
6c:ba:36:7b:98:b2:d1:49:57:8b:bc:16:5d:9d:13:77:e3:7e:
36:f9:9b:7e:72:20:9d:ff:a9:b0:44:7e:78:49:90:3a:f3:06:
c1:62:80:92
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jun 4 02:13:40 2025 by rpki-client