Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7TduewkeqVswly_HkhlOQ0IzAEM.roa
File: 7TduewkeqVswly_HkhlOQ0IzAEM.roa (raw, json)
Hash identifier: gUXZ4a1ZYYxBuzV8oW9zjJOz3+7N4Nd6JPIfXDNPib0=
Subject key identifier: ED:37:6E:7B:09:1E:A9:5B:30:97:2F:C7:92:19:4E:43:42:33:00:43
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D12
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7TduewkeqVswly_HkhlOQ0IzAEM.roa
Signing time: Fri 07 Feb 2025 09:55:46 +0000
ROA not before: Fri 07 Feb 2025 09:55:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3346 (0xd12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 09:55:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=ED376E7B091EA95B30972FC792194E4342330043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:95:a0:cf:c9:41:e1:63:8f:06:89:18:f1:63:
ea:55:92:a4:88:83:a1:24:db:7d:27:8d:73:5c:80:
99:94:23:38:c7:ce:11:6b:fa:c5:42:b3:a3:00:34:
d1:b2:6a:04:29:81:44:b5:0b:5e:ab:f9:48:ea:32:
ed:e5:26:db:a5:0d:40:3b:81:b3:f5:98:dc:b0:6a:
bf:32:df:f5:a4:9d:c6:66:4d:46:59:de:f4:6c:85:
b7:e4:2a:0d:59:5a:f4:32:40:da:36:64:8b:d4:8c:
0a:71:89:6d:47:c7:64:ef:54:3c:8b:61:b4:b3:9e:
ba:b1:c7:14:02:93:8e:65:56:cd:cc:e6:43:36:fb:
92:a5:30:0a:a8:bb:57:97:52:cc:4f:e2:fb:f6:1e:
e0:bd:d1:6a:5a:40:7b:54:e1:01:2e:06:be:24:cb:
8c:d0:30:10:0e:a6:e3:e9:a6:f7:c2:4e:fe:96:c5:
75:5b:74:03:7b:57:f0:f8:da:4b:88:be:1d:ab:20:
48:71:f1:e1:66:db:9c:00:f7:c1:61:3f:44:c2:f1:
5d:d3:48:1d:4e:a8:3f:c1:1d:7f:ad:d8:bc:6a:0f:
7a:7d:98:12:f4:6e:54:9d:b6:cb:b1:2c:0b:c6:e0:
13:e5:6e:2d:cf:d2:3e:2f:11:aa:87:04:be:82:a7:
1e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:37:6E:7B:09:1E:A9:5B:30:97:2F:C7:92:19:4E:43:42:33:00:43
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7TduewkeqVswly_HkhlOQ0IzAEM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:ce:03:e4:87:da:39:d5:f2:14:3d:4e:01:70:5b:c3:bd:5d:
44:71:af:5f:81:c0:5a:63:3b:e5:84:56:82:c0:4d:8e:cb:35:
b4:f8:84:cb:74:36:af:7d:9c:46:7d:4e:86:a3:67:5e:bf:8d:
2b:8c:43:57:fd:33:40:15:37:5a:b9:cb:23:e7:cd:3e:db:b0:
67:2f:1a:f0:46:c9:c0:f8:78:fc:2e:57:5b:c7:9b:9a:b4:9b:
94:b5:42:e0:ee:11:f8:26:72:c2:a4:63:51:c4:3f:8b:32:85:
2a:4b:92:62:0f:08:6a:38:4a:4b:34:e9:5a:a6:09:61:bc:52:
fa:38:ae:da:5d:86:d9:5e:4b:34:1d:c7:03:ed:2f:ed:14:0e:
74:2b:28:b2:f7:59:59:99:ce:43:49:39:6a:ba:3e:45:53:d4:
d4:91:85:0b:d7:27:fe:d7:91:20:f7:c2:43:ca:94:6c:2d:52:
14:55:90:55:58:d8:77:08:a0:57:b2:9a:11:e2:fe:08:88:a1:
77:7a:e8:23:1d:48:41:8d:c5:5f:8e:2a:f3:65:1f:53:8f:9a:
ae:63:ee:b2:78:97:0b:8b:e1:61:6b:c9:3e:43:44:06:e9:93:
a9:56:f2:19:a2:ce:0a:8c:9d:9d:cd:fd:f2:a7:5a:75:90:30:
82:d5:34:f6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 21:52:01 2025 by rpki-client