Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Fxb3iVO613rlHjmvz_ekN82e4Bo.roa
File: Fxb3iVO613rlHjmvz_ekN82e4Bo.roa (raw, json)
Hash identifier: 9bszFQAyrIAnTdMVhJHL8zObGPJOIxXnV/dH11Io02Y=
Subject key identifier: 17:16:F7:89:53:BA:D7:7A:E5:1E:39:AF:CF:F7:A4:37:CD:9E:E0:1A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C5E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Fxb3iVO613rlHjmvz_ekN82e4Bo.roa
Signing time: Wed 05 Feb 2025 12:55:44 +0000
ROA not before: Wed 05 Feb 2025 12:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 12:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1716F78953BAD77AE51E39AFCFF7A437CD9EE01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:f5:b3:12:c0:75:e4:c0:2a:29:3d:68:16:
2d:8d:0b:67:49:14:87:a4:94:94:be:5b:c3:c0:8e:
e0:bc:bd:90:d8:f1:c3:29:45:5d:06:6c:7e:62:7f:
52:03:e6:cd:55:b6:53:9b:37:36:1c:fc:0a:d0:5f:
65:9b:b6:c3:01:b1:bf:fe:f8:5b:c7:86:5b:a3:d3:
48:1d:4c:8d:8b:e1:73:b9:11:12:74:bb:f8:0b:5f:
fd:42:fc:3c:73:ba:5e:58:82:cb:e8:92:85:e3:9e:
be:c4:6b:a8:96:dd:82:90:40:1a:74:29:61:b0:7b:
5c:a0:00:05:ea:44:51:37:7a:ca:66:02:e2:c0:57:
c6:94:51:cb:52:ac:4a:92:96:ef:79:aa:63:96:b0:
ef:47:1a:86:f9:a2:7e:5f:eb:6b:e8:ca:da:5f:2b:
c0:0e:93:e8:cb:7b:db:dd:2e:50:35:4d:36:89:e6:
09:8f:cb:4c:09:d7:6e:c9:0a:a2:b7:63:9d:17:df:
0d:56:db:ee:04:f6:53:ad:b3:c6:4b:93:19:ee:a1:
ef:08:59:ae:4a:9c:95:49:5a:88:c6:ff:c3:aa:87:
bc:1d:20:97:0a:3a:3e:00:63:e6:bd:07:1f:c4:b7:
87:3d:d8:0b:db:b3:13:b3:22:09:4a:ed:5a:0d:4f:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:F7:89:53:BA:D7:7A:E5:1E:39:AF:CF:F7:A4:37:CD:9E:E0:1A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Fxb3iVO613rlHjmvz_ekN82e4Bo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:fd:36:01:5c:cf:a5:0d:58:18:99:17:f6:a2:c3:2d:c4:6e:
65:f9:8b:70:cb:2b:0d:dc:a4:24:67:3e:4b:6d:db:47:8e:cc:
1e:00:e3:05:b5:0e:19:db:bf:3a:4d:97:e7:6b:d7:a0:4c:36:
00:b1:1e:07:ec:7b:4f:95:8e:2a:9b:88:2f:94:00:a6:18:be:
54:63:af:b3:9d:9a:96:3e:2b:66:63:05:eb:4a:b3:85:b0:e5:
69:1d:ba:72:f0:51:55:58:52:4f:35:67:ea:9a:a8:90:b7:77:
e8:c5:fc:72:38:99:2d:a9:2c:ce:01:ce:bf:11:7d:41:19:a5:
b2:94:64:81:b6:8d:66:38:86:e7:11:5a:39:3d:45:c0:62:f2:
3d:64:ee:ba:10:0f:bf:02:fc:52:7c:78:bd:27:f8:d3:49:7d:
96:35:ea:10:3b:3c:7a:27:75:89:e7:7a:c8:9a:48:85:b1:75:
2c:b9:4d:45:53:a8:80:65:c6:8e:ed:15:1f:8b:59:02:85:e6:
e6:43:9b:fb:94:c1:b1:45:91:f7:ae:09:83:52:61:94:4d:81:
56:10:e5:a4:97:6a:71:36:fe:fd:b6:f2:ce:fd:23:aa:2b:c4:
36:dc:2f:ef:14:df:16:6f:41:ff:87:fb:3c:a9:4a:f4:97:94:
1c:ee:fa:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:02:56 2025 by rpki-client