Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/FbpjMN3F89fE8kyS0GuGxiBndsw.roa
File: FbpjMN3F89fE8kyS0GuGxiBndsw.roa (raw, json)
Hash identifier: jSycle7NojSADzCJI9ykUV4HteW9IFAhs9rSmp8qvFI=
Subject key identifier: 15:BA:63:30:DD:C5:F3:D7:C4:F2:4C:92:D0:6B:86:C6:20:67:76:CC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C36
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FbpjMN3F89fE8kyS0GuGxiBndsw.roa
Signing time: Wed 05 Feb 2025 02:56:59 +0000
ROA not before: Wed 05 Feb 2025 02:56:59 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3126 (0xc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 02:56:59 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=15BA6330DDC5F3D7C4F24C92D06B86C6206776CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8a:32:19:29:a5:0b:d5:78:ea:60:4b:f5:66:
97:8f:37:9a:07:87:f1:89:5d:78:d1:c6:8e:58:e4:
1b:1a:06:3e:a6:9c:e9:2a:49:89:aa:0d:64:2f:47:
c4:8b:bb:91:29:05:a6:44:09:66:47:fb:75:79:c5:
f1:9f:e9:53:f6:64:b0:ed:dc:31:3b:fd:fb:52:b8:
52:67:32:79:40:f8:a5:70:b6:6c:67:05:5f:f1:56:
ec:ba:6d:8f:4f:ec:82:cc:50:b7:30:83:52:6f:21:
3c:64:91:05:4e:80:6f:ae:fb:74:f0:fc:bc:c5:61:
df:13:8f:d8:a0:78:0b:a7:b8:2c:67:83:f6:89:40:
87:75:1e:0b:7e:08:15:6c:54:38:9d:25:73:30:ed:
60:d9:cd:86:6f:75:0d:c1:c6:43:bd:8c:63:7e:4c:
3d:47:0a:1c:5f:de:81:ec:c4:c7:46:1c:dc:bf:91:
1b:4c:36:0a:2d:38:f6:4e:e9:e3:64:fb:37:d4:0a:
1e:72:ec:ab:8d:1a:cd:b6:40:82:fe:ba:f6:cf:79:
7b:76:a4:e2:5e:fc:50:fd:9e:32:ec:ad:ca:72:3c:
25:2e:c9:84:9c:34:24:83:c2:a0:d7:8f:73:93:a4:
98:e7:39:75:59:d7:32:f5:c8:a9:5b:b7:53:27:6e:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BA:63:30:DD:C5:F3:D7:C4:F2:4C:92:D0:6B:86:C6:20:67:76:CC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/FbpjMN3F89fE8kyS0GuGxiBndsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:68:9c:eb:2f:a7:3d:f6:4f:81:ec:67:74:e6:a4:71:3a:0d:
50:8c:63:4b:3a:e4:74:dc:6a:66:d8:cb:fd:cb:63:9a:fe:bc:
9e:ba:70:b0:30:34:ad:d7:b2:17:c3:dd:df:a5:55:f4:93:25:
fc:61:3b:ea:6a:72:bb:19:17:48:1f:01:77:40:c4:11:62:10:
9c:50:d3:d4:cb:ff:b0:a6:c7:56:97:a1:b3:04:e9:ab:cb:1a:
1d:64:d7:99:c3:49:36:55:b0:83:41:cf:0e:04:e4:8f:ad:8e:
82:4d:c3:65:4b:8b:e7:eb:8c:d4:ee:a4:87:d9:1c:f3:87:40:
76:30:10:90:a1:b1:f1:7b:66:86:a9:83:04:91:c1:78:09:f5:
66:d5:a0:2f:db:7d:c8:66:97:3b:0e:ea:a1:aa:a8:4c:88:1d:
49:e2:35:0a:42:49:00:8e:de:a1:1c:7e:1b:c6:fc:4b:02:da:
ed:06:53:c4:02:90:4c:36:68:fa:b5:e4:9d:73:b6:8a:89:cc:
c4:d0:8d:30:3a:40:9e:9f:07:43:66:70:05:b9:33:cb:3f:a4:
2c:93:cc:c1:99:7b:c2:f1:77:04:f5:08:9d:d3:50:4c:54:42:
ff:e1:1f:52:c7:53:0a:38:40:dc:fd:46:e1:27:c4:8b:2f:10:
c4:84:24:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:06:37 2025 by rpki-client