Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/MC97N8HakoS6jyMjyorPvUJRMnM.roa
File: MC97N8HakoS6jyMjyorPvUJRMnM.roa (raw, json)
Hash identifier: uQPrYgPcHnK4QS3hLRCxoHOSqIgDQTGDBsI8hNNvoaU=
Subject key identifier: 30:2F:7B:37:C1:DA:92:84:BA:8F:23:23:CA:8A:CF:BD:42:51:32:73
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BD2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MC97N8HakoS6jyMjyorPvUJRMnM.roa
Signing time: Tue 04 Feb 2025 01:55:38 +0000
ROA not before: Tue 04 Feb 2025 01:55:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3026 (0xbd2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 01:55:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=302F7B37C1DA9284BA8F2323CA8ACFBD42513273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:e5:dd:3c:e5:f3:20:ab:94:0c:83:cd:fe:
5d:36:85:09:b7:68:03:33:e6:b8:c2:97:59:fa:9d:
a1:a4:63:c1:4a:69:44:8f:0e:3c:b6:a2:19:39:c8:
2f:5d:e8:d4:97:2f:9c:75:a2:b0:da:b9:36:10:20:
4c:b7:c0:98:ae:97:7d:52:e4:b3:47:01:de:60:48:
d9:f5:61:36:8c:99:df:e9:cc:b6:77:fc:68:be:da:
f1:7e:7d:ff:8c:f9:8c:a4:4a:b4:d7:21:e4:8e:a1:
41:fc:34:85:83:7c:2a:be:4f:3e:71:67:cc:1e:99:
46:a1:5c:36:b5:4c:62:0d:62:b1:5a:25:13:54:ab:
af:92:e1:3d:e1:1b:73:3a:50:ad:95:52:24:82:85:
8e:d6:4e:10:c7:47:c3:c8:00:d9:6e:8e:16:3d:6d:
b4:e9:3b:a3:61:10:18:13:e8:9b:1c:26:52:dc:02:
09:f8:62:3d:d4:23:d0:5c:83:de:ef:48:37:05:d5:
5a:f1:37:e1:48:25:e1:33:5b:28:b0:fc:77:25:64:
fb:96:f2:65:62:a3:04:b5:ce:9d:19:16:bf:c8:a8:
98:6c:2e:aa:5d:2b:e3:bc:ac:8b:ce:c4:cc:86:4e:
2c:77:37:4e:a5:cd:54:8c:de:4f:1a:81:27:3a:02:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:2F:7B:37:C1:DA:92:84:BA:8F:23:23:CA:8A:CF:BD:42:51:32:73
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MC97N8HakoS6jyMjyorPvUJRMnM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
15:c1:81:a5:67:89:d8:4a:38:24:d1:eb:17:e8:3a:f3:4c:0e:
a3:07:3e:64:7f:a2:8f:fd:12:e2:16:6e:22:54:12:e0:cb:70:
d0:8e:5e:da:4f:9f:d5:31:6b:bf:6b:81:50:39:9b:2d:fe:de:
1c:d0:a3:a6:47:33:a2:17:f0:97:d3:c1:b1:e8:b9:b0:3d:db:
54:b5:de:22:48:3b:03:c4:dd:ba:69:b4:b3:0a:80:1c:0c:df:
8c:c3:c9:b6:df:cc:8d:99:3d:62:d5:d4:5f:f1:00:1a:8d:35:
30:57:26:42:95:11:65:88:de:2c:f9:a8:d7:d1:4f:65:a0:6f:
ad:2b:3a:8a:77:92:64:f5:e9:d2:ca:23:13:ac:9a:ef:4e:b1:
11:19:f2:d2:d4:e3:79:7d:0a:dc:cb:0e:1c:40:fd:ce:ec:66:
e6:70:2e:e9:9d:d6:a7:13:43:dc:22:e9:27:80:a9:49:14:a1:
8d:74:c0:6d:9d:1e:c0:c4:65:e0:c1:1a:e7:12:27:bc:b2:ff:
a6:90:56:a7:af:bf:49:94:a6:a1:17:a8:94:79:61:69:1b:95:
02:33:3d:10:f9:44:f0:03:97:b5:03:dc:49:0e:b1:cd:2c:69:
b9:65:7d:d5:dc:1a:19:df:e7:55:ee:f2:e2:5b:9c:fd:98:00:
3e:a0:cf:30
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 09:57:03 2025 by rpki-client