Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/7cxLyuGM0XhIQf9oy-iBdHCaKYA.roa
File: 7cxLyuGM0XhIQf9oy-iBdHCaKYA.roa (raw, json)
Hash identifier: GTQ1F94bDE2xT2Bc2PnSHej8IwhyE1Y9Byf+KFAsMRw=
Subject key identifier: ED:CC:4B:CA:E1:8C:D1:78:48:41:FF:68:CB:E8:81:74:70:9A:29:80
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C5A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7cxLyuGM0XhIQf9oy-iBdHCaKYA.roa
Signing time: Wed 05 Feb 2025 11:55:42 +0000
ROA not before: Wed 05 Feb 2025 11:55:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3162 (0xc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 11:55:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EDCC4BCAE18CD1784841FF68CBE88174709A2980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9b:ec:07:6d:e8:90:5c:12:38:9c:d2:9e:b2:
89:98:14:85:ab:e1:ae:d3:4a:bf:3a:a3:8d:c2:b8:
2c:f3:9c:e1:7b:df:46:10:4f:2a:ea:47:00:75:89:
da:3f:ca:ce:d6:fa:61:57:76:ac:d9:36:03:dd:11:
45:b4:1b:9d:30:c8:27:c3:5f:b4:cf:04:f8:41:f6:
23:22:3b:3f:a4:44:0b:98:8c:15:d1:13:5d:83:bc:
d8:fd:a8:90:73:77:61:ad:1f:bd:2e:42:fe:1c:28:
b6:3e:1f:7c:9d:d1:ee:c1:a6:76:c6:7e:2d:da:33:
98:65:97:19:9f:0f:b8:db:76:22:c6:21:ba:73:62:
99:0e:40:d3:44:2d:74:ff:c0:39:5e:76:ee:11:7a:
ae:5a:c6:48:59:e3:0b:61:98:90:9a:60:65:14:39:
50:59:1b:52:66:cb:89:5c:e6:a4:6f:15:91:e4:ca:
e7:45:5c:c6:5d:27:02:78:02:ce:1d:06:f3:3a:19:
f1:48:2b:a7:34:7b:25:4d:79:ea:5b:ca:85:60:8f:
69:c4:ee:4f:8b:3e:d4:c9:71:67:8e:8c:10:21:4f:
1d:91:47:9f:45:1d:24:30:b9:af:68:3b:6f:34:80:
ac:3d:1f:9e:a7:a8:9f:c9:e2:82:c2:be:5f:b8:62:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CC:4B:CA:E1:8C:D1:78:48:41:FF:68:CB:E8:81:74:70:9A:29:80
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/7cxLyuGM0XhIQf9oy-iBdHCaKYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
60:c3:dc:45:58:ca:fa:e1:c9:fc:cc:d0:f5:d5:43:30:7d:4a:
ca:8d:6e:71:35:09:27:83:af:64:ee:33:0a:43:57:69:f6:c7:
47:ff:c6:7e:50:88:c9:94:db:7a:72:dd:d2:8b:76:1a:e9:00:
fb:a5:62:89:22:27:e3:73:6d:ee:cf:14:47:f9:8a:38:6f:4e:
fe:1f:b6:d1:c8:2e:82:55:e0:95:a5:7c:68:b5:e7:c7:16:c9:
f1:bd:ea:95:86:0f:3f:ab:9a:f4:eb:cf:cf:1e:a5:84:22:35:
d7:b3:eb:11:55:51:18:02:02:8e:79:4e:e9:4f:f0:78:99:0c:
24:e0:fc:7c:3e:e4:1a:48:36:a5:5a:f9:71:cc:0f:c0:0d:31:
47:c8:74:9a:f3:cb:4f:8c:bf:76:ba:54:b7:04:ea:02:d3:15:
bf:d6:1d:80:c8:0f:fb:f5:e9:af:24:6a:c2:7b:1a:d2:a6:33:
a9:29:65:61:7b:8f:e7:47:d2:f3:09:7f:84:44:d8:61:2f:01:
c8:cf:0f:32:b0:6a:a9:a2:92:a2:6f:8b:35:9f:cd:e8:ed:e8:
23:b3:1c:aa:2b:29:0b:ab:1e:e0:7b:84:d1:51:a3:06:b2:73:
fa:25:f6:70:8d:dc:70:94:39:2c:1c:d8:a1:44:07:87:2e:08:
d9:ab:f8:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 20:56:49 2025 by rpki-client