Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/G9sfDOwQWwhXSni5sBR7fJmCU0w.roa
File: G9sfDOwQWwhXSni5sBR7fJmCU0w.roa (raw, json)
Hash identifier: Uxi28NYjjr+MAVZ9PKkqe/0PaHTd48jZVa90mxLbOsY=
Subject key identifier: 1B:DB:1F:0C:EC:10:5B:08:57:4A:78:B9:B0:14:7B:7C:99:82:53:4C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05EE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/G9sfDOwQWwhXSni5sBR7fJmCU0w.roa
Signing time: Sun 19 Jan 2025 08:54:48 +0000
ROA not before: Sun 19 Jan 2025 08:54:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1518 (0x5ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 08:54:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=1BDB1F0CEC105B08574A78B9B0147B7C9982534C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:23:b1:26:13:dc:5b:5b:67:5a:53:22:f1:46:
36:69:96:5f:7b:db:96:97:13:3e:e0:e3:46:df:cb:
06:47:49:ca:19:50:1a:7e:32:cb:ad:95:8f:a6:82:
c4:8c:8a:45:a1:ee:df:cd:4f:8a:d2:90:05:e6:3a:
f0:35:26:ec:e8:70:50:2d:91:ad:6b:c6:74:6e:e2:
40:14:82:ff:a3:2c:a2:52:c5:7c:4d:4f:52:f5:44:
4a:ad:bd:3c:ec:c9:a0:31:3b:c1:6b:31:58:bc:7b:
50:45:88:10:d3:3f:de:85:bd:1e:ae:de:9c:b8:18:
0e:3c:d6:2f:69:9a:67:cd:41:e0:31:2d:e9:c7:d2:
92:6f:bb:40:70:9a:8f:a1:ea:74:96:c5:74:38:4e:
6f:65:c0:59:3b:cc:4b:82:fd:3e:1c:d0:c8:18:b7:
ef:64:2a:d2:e9:75:bf:21:1c:63:bb:1c:6c:78:43:
f6:30:92:58:5a:eb:5e:19:ce:62:c0:25:08:d7:59:
7d:c5:73:05:04:95:92:1d:01:95:05:fa:f0:40:0e:
91:1a:b3:22:b7:15:3f:25:3b:32:41:ae:87:eb:79:
12:4b:d3:f8:c9:9e:07:c3:4c:c0:c2:e4:e3:05:6c:
c9:eb:d9:3d:f9:3e:f4:7e:73:eb:85:13:69:f9:e8:
c2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:DB:1F:0C:EC:10:5B:08:57:4A:78:B9:B0:14:7B:7C:99:82:53:4C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/G9sfDOwQWwhXSni5sBR7fJmCU0w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
57:a1:12:45:c2:ed:e8:32:47:ba:77:98:e7:76:32:98:e2:f6:
b4:3e:ad:7b:d2:fe:89:4e:6a:fd:33:51:1d:e7:d0:32:41:5f:
3f:0e:7e:7e:b3:9d:e0:96:8d:bb:d4:6d:19:1f:76:c5:82:17:
44:fc:d0:07:b8:01:e6:dc:da:a9:4e:bd:98:77:8e:4e:c9:e2:
f3:30:3a:31:34:c5:0f:e1:36:f5:b2:59:ed:22:ab:b4:d7:0c:
2e:ef:0b:23:6c:73:98:77:24:99:82:02:b4:e6:de:60:04:0f:
ec:c2:e5:f7:31:a6:f4:ed:f7:1b:8a:87:98:18:20:ba:56:99:
6f:4e:02:6e:dc:4d:4c:4d:eb:d5:4c:7f:3c:12:f4:81:f7:29:
7e:5c:3c:76:36:60:6d:30:bf:d6:ce:0e:af:0b:18:a5:85:f3:
76:96:37:51:9d:92:b9:2b:5a:b3:82:fa:ad:c0:09:28:1b:25:
53:1d:11:8b:26:b7:f9:4a:59:28:4b:89:06:6b:d0:12:ca:69:
82:b4:50:c8:1d:83:e6:45:2f:42:05:cf:47:b8:05:35:c8:07:
ff:1a:78:da:3a:d0:66:9b:73:fc:a4:5e:f0:77:80:aa:df:07:
30:e7:5d:db:44:29:94:56:db:d3:9a:5a:db:8b:1d:9e:8b:c9:
a9:94:d7:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 15:37:27 2025 by rpki-client