Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8jt9UF0Z8lK4bka4L8zFFe1ZiSY.roa
File: 8jt9UF0Z8lK4bka4L8zFFe1ZiSY.roa (raw, json)
Hash identifier: 0zqW6eXJDbIvWq3Tx6+JaHxEcfqeOxnOXR7Vx3xYFKs=
Subject key identifier: F2:3B:7D:50:5D:19:F2:52:B8:6E:46:B8:2F:CC:C5:15:ED:59:89:26
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07B0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8jt9UF0Z8lK4bka4L8zFFe1ZiSY.roa
Signing time: Fri 24 Jan 2025 01:25:02 +0000
ROA not before: Fri 24 Jan 2025 01:25:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1968 (0x7b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 01:25:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F23B7D505D19F252B86E46B82FCCC515ED598926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4c:9c:e1:49:b5:c1:14:3a:36:58:26:e4:be:
c9:4d:34:47:53:ec:6b:48:60:18:35:19:f1:b2:5a:
fb:8d:ab:b3:56:01:7d:48:99:1b:ca:cb:df:dd:cf:
3e:df:fb:a1:e3:10:17:0d:98:d1:5d:6a:b2:45:8a:
89:a5:40:22:ae:6b:b7:9f:6d:40:2c:1f:46:46:c1:
0b:be:cb:76:c6:08:3f:06:26:c2:87:ca:75:67:4a:
4a:b3:e0:da:8a:1e:af:a6:da:24:38:ea:6d:59:c8:
b9:d7:a9:d9:12:31:48:f4:44:4f:1e:92:87:85:da:
07:09:49:d0:f9:06:11:f7:77:7d:79:69:0a:ec:d8:
99:0c:d5:8f:aa:42:5c:51:37:34:4a:72:30:c2:96:
62:8b:45:98:57:e0:f1:16:ef:52:e3:d7:91:18:aa:
ec:97:3b:06:9f:c6:4e:30:4f:9f:a7:d0:f1:4f:a6:
9e:be:16:d8:6c:b5:05:86:ba:30:3a:8e:d9:4a:d4:
06:72:c7:bb:0c:db:14:4a:cc:3e:73:eb:1b:db:bc:
77:a4:7b:16:0f:5d:93:7d:ef:4d:52:dd:a7:8e:f9:
1d:92:a3:62:1a:ad:49:2f:c6:4b:e9:ed:d3:83:ec:
bf:2a:68:3b:58:71:bc:5d:bf:56:ba:25:21:88:7f:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3B:7D:50:5D:19:F2:52:B8:6E:46:B8:2F:CC:C5:15:ED:59:89:26
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8jt9UF0Z8lK4bka4L8zFFe1ZiSY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:85:6d:84:82:27:3f:23:10:5c:c6:88:63:fd:d9:91:2c:b7:
f7:2d:6c:94:d6:bb:14:f1:35:dc:6c:d2:fc:a3:27:f3:6c:c6:
b4:fc:82:de:b5:65:fe:98:7b:b7:9e:13:ec:98:b0:0e:3e:4e:
d2:ed:67:4a:c3:5d:89:e3:fa:15:15:73:23:46:86:c0:43:8a:
67:76:7f:1b:18:00:e5:22:09:41:ae:c9:aa:1e:ac:cc:a8:15:
96:7f:1a:0c:34:01:fe:3b:45:84:52:ef:b7:57:36:d4:d8:84:
a7:60:4a:e8:92:84:67:b9:bd:41:c5:ac:d8:c2:0f:25:01:e0:
79:f4:7d:16:25:0c:d0:a1:4f:ee:4d:36:bb:91:cb:84:64:3c:
ee:86:0c:06:86:e8:0a:d3:de:5a:d7:02:4c:f6:33:f3:18:2f:
4d:0d:80:f2:f2:69:05:38:d2:fe:b2:66:65:58:99:89:11:16:
8a:75:46:66:37:3e:b6:cd:f4:18:11:4f:56:00:53:c9:0b:8b:
f0:37:e5:79:2d:68:f2:53:e5:3e:b4:9e:e7:58:6e:3c:26:40:
f3:c6:18:b9:82:91:1e:12:e5:c8:a6:6d:6b:df:5d:8f:89:08:
64:4b:8b:c6:8a:b8:d7:52:d6:8e:cf:eb:20:69:5e:a6:8b:e6:
4d:99:43:8b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjQw
MTI1MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEYyM0I3RDUwNUQxOUYy
NTJCODZFNDZCODJGQ0NDNTE1RUQ1OTg5MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsTJzhSbXBFDo2WCbkvslNNEdT7GtIYBg1GfGyWvuNq7NWAX1I
mRvKy9/dzz7f+6HjEBcNmNFdarJFiomlQCKua7efbUAsH0ZGwQu+y3bGCD8GJsKH
ynVnSkqz4NqKHq+m2iQ46m1ZyLnXqdkSMUj0RE8ekoeF2gcJSdD5BhH3d315aQrs
2JkM1Y+qQlxRNzRKcjDClmKLRZhX4PEW71Lj15EYquyXOwafxk4wT5+n0PFPpp6+
FthstQWGujA6jtlK1AZyx7sM2xRKzD5z6xvbvHekexYPXZN9701S3aeO+R2So2Ia
rUkvxkvp7dOD7L8qaDtYcbxdv1a6JSGIf/rXAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU8jt9UF0Z8lK4bka4L8zFFe1ZiSYwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzhqdDlVRjBaOGxLNGJr
YTRMOHpGRmUxWmlTWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBADqFbYSCJz8jEFzGiGP92ZEs
t/ctbJTWuxTxNdxs0vyjJ/NsxrT8gt61Zf6Ye7eeE+yYsA4+TtLtZ0rDXYnj+hUV
cyNGhsBDimd2fxsYAOUiCUGuyaoerMyoFZZ/Ggw0Af47RYRS77dXNtTYhKdgSuiS
hGe5vUHFrNjCDyUB4Hn0fRYlDNChT+5NNruRy4RkPO6GDAaG6ArT3lrXAkz2M/MY
L00NgPLyaQU40v6yZmVYmYkRFop1RmY3PrbN9BgRT1YAU8kLi/A35XktaPJT5T60
nudYbjwmQPPGGLmCkR4S5cimbWvfXY+JCGRLi8aKuNdS1o7P6yBpXqaL5k2ZQ4s=
-----END CERTIFICATE-----
Generated at Sun May 18 12:24:12 2025 by rpki-client