Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/22p204bbjxxlQgmo1IWhhPZwoko.roa
File: 22p204bbjxxlQgmo1IWhhPZwoko.roa (raw, json)
Hash identifier: 0G8bcY2KYhZT/hMfxFFKZ1mWEM2pLimIRBHsk610RAA=
Subject key identifier: DB:6A:76:D3:86:DB:8F:1C:65:42:09:A8:D4:85:A1:84:F6:70:A2:4A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 092A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/22p204bbjxxlQgmo1IWhhPZwoko.roa
Signing time: Mon 27 Jan 2025 23:55:18 +0000
ROA not before: Mon 27 Jan 2025 23:55:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2346 (0x92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 27 23:55:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DB6A76D386DB8F1C654209A8D485A184F670A24A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ea:43:f7:6a:eb:74:2f:b6:9c:93:66:2d:8b:
8a:d8:fa:a8:50:12:d7:5a:f5:e3:a9:50:e0:c7:d6:
fd:f8:c7:cb:96:84:de:6f:c9:9a:fb:2e:f8:02:67:
7c:22:91:13:f0:4b:94:77:f4:07:39:41:69:94:2d:
bc:6c:6f:47:bd:3d:e5:13:4b:49:f0:ad:5e:6a:f4:
08:9f:91:41:4e:59:d1:25:6a:e6:18:43:40:15:5c:
2f:78:1a:5e:6b:4b:5e:48:93:40:cb:ba:75:c3:5a:
ff:4f:80:61:2c:78:f5:7f:df:83:6a:f4:41:5a:df:
cc:e4:de:5e:04:31:7f:d1:55:37:3a:29:f8:c7:2e:
65:28:c4:11:05:d1:b1:1e:44:99:e2:19:91:f4:7d:
be:c7:b3:5d:7d:a2:6c:08:62:07:d0:5a:60:93:4a:
36:fe:0a:47:87:e1:df:5b:d1:c2:87:f6:4c:fc:dd:
a1:83:42:4b:eb:92:d3:f0:dc:c2:c7:2b:eb:d4:b7:
0e:10:0f:9e:dc:d4:6d:aa:ed:66:2b:2e:7e:3a:ac:
c1:e4:72:9a:48:71:4e:db:0f:69:43:b5:09:d3:ed:
0a:3d:82:02:25:4e:86:d2:12:9f:2e:27:ea:b3:3c:
2e:ee:9c:f6:ef:4b:b4:c0:9b:fe:17:7d:3a:da:0b:
35:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6A:76:D3:86:DB:8F:1C:65:42:09:A8:D4:85:A1:84:F6:70:A2:4A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/22p204bbjxxlQgmo1IWhhPZwoko.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
91:e8:65:19:1e:88:2c:3b:4f:b1:69:a7:ad:8f:b9:78:58:8d:
b9:fd:3e:37:53:e7:cc:c0:81:85:20:04:83:0d:4c:93:2d:5f:
17:50:3b:04:0a:ab:1e:dd:b0:fc:91:48:48:c1:6e:18:e8:a3:
fb:31:79:c5:d3:14:08:3e:fb:81:1b:c4:da:a6:cf:a1:1e:0c:
ce:73:0b:c0:4a:d1:10:99:17:9c:27:28:81:3c:d9:32:18:8f:
5c:79:aa:91:55:0c:0b:5c:37:6a:99:99:b6:8f:d7:24:65:ae:
c3:bb:2b:c3:49:f5:3e:a9:07:e6:c2:7e:f1:d0:0d:4d:e2:f2:
8d:4f:a1:23:b0:78:90:3b:a3:c9:b2:d1:4f:10:3e:92:b3:d0:
4a:3b:a7:1d:e6:b4:19:b5:c1:51:bf:9f:ec:11:a3:9b:e4:6d:
15:3a:40:ef:6d:f7:01:8f:ce:e6:d1:83:55:d0:33:10:be:56:
1e:8b:b5:c5:51:b6:98:5b:39:72:76:61:f8:41:2b:c7:0b:d8:
60:c9:83:b2:0b:62:36:55:a0:0d:6a:34:4e:36:a5:3a:82:0a:
70:98:71:25:6f:22:82:3a:fd:83:7d:d8:dd:9b:7f:a0:04:d7:
5f:b7:8b:99:31:05:e3:76:ea:b0:57:55:f8:09:7a:99:da:42:
94:32:90:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 00:13:31 2025 by rpki-client