Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/GFu5IYPEnhjSJUJaHLpR4iqFh64.roa
File: GFu5IYPEnhjSJUJaHLpR4iqFh64.roa (raw, json)
Hash identifier: m47dv1X+K3eK1YtbXzODKeBQ7N+Q4fv9mzG9uMvVuHc=
Subject key identifier: 18:5B:B9:21:83:C4:9E:18:D2:25:42:5A:1C:BA:51:E2:2A:85:87:AE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D0E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GFu5IYPEnhjSJUJaHLpR4iqFh64.roa
Signing time: Fri 07 Feb 2025 08:55:47 +0000
ROA not before: Fri 07 Feb 2025 08:55:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3342 (0xd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 08:55:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=185BB92183C49E18D225425A1CBA51E22A8587AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:17:a4:31:db:af:88:69:b2:9e:0d:bf:0c:85:
8f:98:4b:14:7d:19:4d:5f:01:ac:13:3d:60:83:02:
e2:66:2c:2e:38:a1:47:4a:6d:45:f0:07:9e:05:a0:
9a:ea:cf:44:ab:d6:33:09:05:7b:5b:1e:24:0b:78:
83:20:2f:14:13:ed:f7:03:f8:51:95:94:4a:68:44:
7b:07:ee:b8:09:ce:d2:b8:4d:02:de:ae:62:90:7d:
e5:a1:34:2f:ee:30:b1:2f:64:bc:ad:ed:55:0e:8e:
4e:a1:60:14:d6:bb:ae:1a:8a:86:96:44:c0:aa:7e:
7b:16:e6:9c:b9:1f:e8:05:20:22:0a:76:49:4d:c2:
2c:b2:66:97:8f:b4:05:e1:98:94:fb:35:f1:d4:a2:
32:98:92:ff:42:bd:c1:ad:bb:d0:74:95:39:f9:36:
9a:a0:cc:60:d3:de:cf:8f:de:bf:8f:36:b9:4c:10:
0f:3e:67:38:16:1e:87:e8:68:0f:c5:df:c7:bf:80:
5c:4e:28:77:71:7a:ff:db:06:d6:4f:cf:5c:61:46:
0a:f3:f0:07:b7:90:29:6d:fd:48:f8:b8:b0:97:e2:
59:01:3d:52:21:49:5e:44:51:40:aa:0c:b8:ec:66:
42:68:45:fe:3f:e4:69:c6:33:e8:a2:59:96:bf:de:
02:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:5B:B9:21:83:C4:9E:18:D2:25:42:5A:1C:BA:51:E2:2A:85:87:AE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GFu5IYPEnhjSJUJaHLpR4iqFh64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
40:b1:81:c5:8b:b9:b6:18:90:e5:de:0d:ec:30:46:7f:f2:98:
96:24:90:43:b5:92:19:8d:0f:dd:c0:38:80:ef:5e:1f:19:6c:
ec:17:e0:a1:4e:b6:c2:f4:b1:11:00:c8:04:44:d7:92:95:e0:
e6:e9:90:ea:52:5f:bc:dc:4e:a6:1f:83:5c:a5:6f:dd:98:1d:
47:a1:ea:1c:c1:c6:c4:e2:dc:dc:5e:76:a2:a5:48:70:78:4d:
37:ce:fb:fb:eb:3b:6f:87:18:68:87:41:e9:64:83:a3:85:1d:
43:16:a7:48:a3:b2:77:91:5f:42:89:a6:45:3b:4f:f4:ce:26:
cf:f3:c0:0e:ff:bb:91:72:80:d3:64:58:81:d6:07:df:ae:07:
d0:56:01:82:8f:81:e6:28:a4:2c:4c:42:90:96:c7:59:9a:a1:
b0:8e:e8:a0:0f:8c:c2:b5:57:be:fb:df:a1:26:e9:d7:52:1f:
6c:3a:c0:ab:91:b4:0d:8b:77:dd:19:59:01:6b:1f:96:5c:39:
f4:21:4e:ec:70:8d:05:1b:92:77:10:62:d6:15:1a:fa:e8:18:
27:79:34:d9:a5:ee:89:84:02:3d:eb:50:4b:2f:f4:d6:70:0f:
ed:72:7a:22:db:b1:c4:99:bb:3b:2a:c2:b0:5d:dd:0e:03:d7:
cd:32:da:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:08:15 2025 by rpki-client