Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/27xneXVHFOG7h0_EPzMYPbEenhY.roa
File: 27xneXVHFOG7h0_EPzMYPbEenhY.roa (raw, json)
Hash identifier: H90Ed89qy/HMyTV6j8o5RArbsPYlcunBK7CGFEFiCOY=
Subject key identifier: DB:BC:67:79:75:47:14:E1:BB:87:4F:C4:3F:33:18:3D:B1:1E:9E:16
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AB0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/27xneXVHFOG7h0_EPzMYPbEenhY.roa
Signing time: Sat 01 Feb 2025 01:27:32 +0000
ROA not before: Sat 01 Feb 2025 01:27:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2736 (0xab0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 01:27:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DBBC6779754714E1BB874FC43F33183DB11E9E16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:9c:4e:10:3e:d8:58:73:4e:fd:21:f9:f7:
f5:af:e0:90:bb:de:39:ee:b2:73:d7:4e:40:83:74:
f3:8f:4d:32:cc:ee:d2:3e:c2:1e:41:4d:99:3f:a6:
95:7d:be:b9:77:cf:cc:28:e0:dc:6f:4b:09:71:4f:
f5:10:52:89:66:e4:33:25:4f:de:2a:7f:29:c0:e4:
38:7c:ae:65:ed:92:01:a1:28:aa:60:4b:a4:20:34:
e4:1d:4a:a7:0c:bb:02:d0:9f:f4:52:57:03:3a:a7:
6d:86:94:b4:a4:07:9a:d4:6d:2f:0d:c4:ea:1f:b3:
e3:91:90:44:87:b1:06:d6:d3:93:92:ec:ad:59:58:
ed:09:20:8d:6f:c1:fa:6b:ff:8b:3e:35:1e:c0:9a:
6e:f2:99:81:0c:eb:01:b6:5c:5e:5e:a1:2c:ec:02:
f0:9a:95:48:0e:f9:9f:d2:5f:14:99:46:e8:16:b2:
52:35:3f:f4:0a:25:4d:eb:c9:68:60:45:84:4d:f3:
3b:c7:11:80:87:2e:ec:80:f8:31:44:2c:5a:27:3a:
59:74:1d:7e:70:a7:e6:6c:91:c9:25:0f:42:29:e5:
22:4b:d7:7e:0d:a5:1d:37:aa:b4:26:bb:c4:75:c6:
69:b3:95:a6:0e:29:ae:7a:26:8e:84:7a:ad:68:a8:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:67:79:75:47:14:E1:BB:87:4F:C4:3F:33:18:3D:B1:1E:9E:16
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/27xneXVHFOG7h0_EPzMYPbEenhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:e9:4d:f9:cf:21:26:93:89:04:a6:31:32:a5:ac:39:69:03:
dc:c6:4e:25:33:0a:6e:ce:f3:5b:75:f8:92:2b:40:fd:40:36:
27:e3:5e:eb:42:8f:b3:1d:48:b5:4c:22:fb:a5:ae:3d:9e:d3:
72:12:32:6b:91:27:f9:79:32:02:65:f2:d2:ed:3e:fd:21:81:
f6:23:25:03:37:35:3a:1f:f9:2c:17:a4:18:74:fe:66:4c:d5:
b6:00:50:a7:98:5e:27:e1:4b:8a:47:67:7b:07:cd:81:12:3c:
5b:7d:37:be:aa:21:24:d5:32:bd:16:37:27:46:0e:04:40:07:
e7:c7:b9:c0:ad:39:60:ef:4a:11:66:55:2a:f2:31:7c:40:42:
b9:7a:95:8e:77:02:a5:c7:b2:f7:d0:58:dd:60:4d:bd:95:c7:
ff:f5:3c:8e:69:1e:ab:e2:1e:55:3d:30:24:ec:b4:05:c3:b1:
f4:59:0e:71:d4:7e:0d:18:d1:57:dd:d8:35:d1:b4:f3:fb:59:
50:36:ac:6a:23:af:ef:26:88:0d:7a:22:1f:ec:c9:9f:7b:b7:
e8:b5:9f:bc:dd:1a:62:ba:db:30:91:93:a2:14:fd:ab:2e:fa:
e4:1a:3f:83:ce:0b:94:31:3b:3b:9d:a1:a1:e1:72:77:cd:e4:
1a:d7:4e:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 20:24:31 2025 by rpki-client