Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/46Hfyn28e9jnuKUaF9PCWcVjSpM.roa
File: 46Hfyn28e9jnuKUaF9PCWcVjSpM.roa (raw, json)
Hash identifier: 3uZ/u+bev/GYzHcTvAA4awd68o6zWT254REw3AKLQjo=
Subject key identifier: E3:A1:DF:CA:7D:BC:7B:D8:E7:B8:A5:1A:17:D3:C2:59:C5:63:4A:93
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B9E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/46Hfyn28e9jnuKUaF9PCWcVjSpM.roa
Signing time: Mon 03 Feb 2025 12:55:39 +0000
ROA not before: Mon 03 Feb 2025 12:55:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2974 (0xb9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 12:55:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E3A1DFCA7DBC7BD8E7B8A51A17D3C259C5634A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:b6:2b:47:94:b9:b7:63:67:39:c0:f4:f9:
64:40:79:6b:1e:b2:10:ed:84:ed:f9:2f:ee:58:f8:
07:29:7a:a8:88:46:cd:d6:f8:22:b9:2b:55:11:eb:
a4:02:22:8c:35:12:fe:e5:c9:6d:fd:96:62:24:0f:
21:e6:4f:4d:96:48:12:b1:63:a6:64:ff:42:eb:a8:
39:cf:ab:27:d8:36:8e:25:75:25:4d:23:fa:87:1a:
74:c7:34:0c:6d:9d:f3:70:b0:ef:96:99:7a:da:f9:
a7:dc:cd:17:0a:10:bf:f2:56:f0:fd:97:2e:c1:7b:
3e:96:5f:df:6b:25:4f:9d:5a:bf:ae:ce:7e:1b:6b:
3b:f9:1c:e4:53:d7:6f:33:08:a8:28:d7:3c:40:4a:
40:43:62:de:9a:e5:ca:97:5b:73:67:a8:7a:e4:a5:
6d:9f:0c:3d:1c:dc:a5:82:ec:2f:0f:fb:73:08:35:
b2:3e:16:fa:e9:e4:10:58:1c:ea:2e:46:1c:04:3e:
4d:8c:3a:3c:d2:41:81:e2:44:79:ee:c2:0e:95:67:
0e:f5:db:7c:ae:53:8f:66:b3:97:a8:9b:bb:55:bc:
77:3e:2a:dd:cd:6a:ff:cf:be:5e:81:7c:2a:df:cc:
62:f9:7d:b5:36:55:e4:09:cd:70:0b:9b:81:34:2b:
34:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:DF:CA:7D:BC:7B:D8:E7:B8:A5:1A:17:D3:C2:59:C5:63:4A:93
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/46Hfyn28e9jnuKUaF9PCWcVjSpM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:09:97:4a:64:6e:15:f8:2f:9f:22:c0:bb:21:69:85:ef:4c:
6d:b5:d4:80:f3:be:a7:d3:d5:7d:9f:24:1e:b8:c0:fb:dc:11:
76:73:21:bd:6e:9e:89:65:7b:56:0d:12:9e:fe:1b:e2:4a:98:
67:a7:e1:37:68:37:6f:c1:ad:63:53:4c:34:c9:ae:f1:fc:3c:
2f:fd:b8:71:72:1b:1e:84:7e:1d:61:77:e2:57:6c:00:94:67:
06:fe:9c:8c:b6:07:ba:46:e6:1e:77:e9:01:3f:f5:28:99:88:
6f:81:49:b3:b3:27:6e:f2:8a:cf:65:45:74:75:97:1d:73:f0:
04:24:5a:15:3a:92:04:fb:30:63:ea:77:64:cd:2a:d7:90:79:
ac:eb:7b:8b:dd:1d:df:b3:1a:84:dc:49:be:dd:76:ea:7d:6d:
b0:fd:db:4f:98:19:9c:18:a9:81:71:f5:97:1b:d5:fe:3f:0b:
0e:15:ec:6e:28:7a:09:9f:60:8f:ba:8c:e9:f7:6a:1c:f2:11:
51:45:fc:4a:2e:ad:6a:dc:30:c7:20:1c:8c:fd:7a:4f:1e:69:
1b:cf:bb:0a:2f:bf:50:61:19:16:32:96:6e:67:99:08:3b:96:
c0:fd:97:fa:d9:73:14:cc:9d:6f:0e:45:57:9b:aa:d5:12:c1:
8f:31:a0:6c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:37:55 2025 by rpki-client