Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NPZeDHNEkc_FxCW3dy-yTr6eoqI.roa
File: NPZeDHNEkc_FxCW3dy-yTr6eoqI.roa (raw, json)
Hash identifier: MkHLbyRZm4HEz2jTyLGEDlfWsHjrCHCJHzq+KjWQxsw=
Subject key identifier: 34:F6:5E:0C:73:44:91:CF:C5:C4:25:B7:77:2F:B2:4E:BE:9E:A2:A2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C2A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NPZeDHNEkc_FxCW3dy-yTr6eoqI.roa
Signing time: Tue 04 Feb 2025 23:55:41 +0000
ROA not before: Tue 04 Feb 2025 23:55:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3114 (0xc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 23:55:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=34F65E0C734491CFC5C425B7772FB24EBE9EA2A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:c6:7b:a4:cf:60:a8:fb:1f:f5:55:a6:6f:
a8:c9:45:37:f9:b8:70:7b:26:51:21:30:3e:77:5b:
3a:41:33:c6:19:27:16:0a:3e:09:bb:29:f6:0f:b2:
a3:8a:8d:bb:7b:50:5a:cb:a9:f7:29:bd:be:56:4a:
b4:e5:01:7c:fe:ee:a1:f9:b0:d3:7d:63:da:f9:76:
e2:a0:33:ff:9f:d1:2e:46:63:10:19:52:a6:ae:99:
56:ee:4a:0f:e5:57:a1:45:02:a8:b7:11:84:1c:79:
2f:d2:5c:24:9d:0b:ce:20:14:e4:98:76:44:c8:17:
78:05:24:ef:6b:31:f4:53:61:20:ec:fc:68:4a:c1:
40:c2:d0:be:01:fc:2c:6e:a4:d4:2a:4a:a1:b5:97:
23:d9:cd:a3:5e:ad:18:00:5e:47:07:98:b4:83:bf:
68:69:18:29:f9:1d:48:bf:36:1c:55:af:59:b7:3e:
6b:9c:40:fa:3b:c2:83:24:72:f4:7d:36:7c:d9:ae:
b4:34:f0:51:7a:a9:7d:08:90:11:cc:86:8b:b0:69:
51:53:68:03:0b:0b:65:ea:d3:54:a4:ce:05:2c:ad:
c6:c4:ec:13:4d:be:8a:91:1a:83:8c:10:9f:46:b8:
58:32:b3:ee:94:0a:e7:96:ab:1a:0b:ba:94:aa:d9:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:5E:0C:73:44:91:CF:C5:C4:25:B7:77:2F:B2:4E:BE:9E:A2:A2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NPZeDHNEkc_FxCW3dy-yTr6eoqI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:33:07:79:f7:14:ae:26:64:62:72:30:44:f0:47:e5:28:be:
53:c7:6e:6d:16:ec:99:e2:3d:5d:77:03:8d:2f:f1:e6:6a:9c:
e6:9d:17:b5:a5:14:ca:39:7c:e7:06:88:f9:fe:87:70:bd:4d:
7f:73:82:5a:5d:30:87:61:99:25:16:cc:a9:58:45:7f:8e:d9:
07:13:ab:2e:89:89:a3:18:9f:7f:fe:fe:7b:22:d4:ea:51:9a:
8f:81:f9:f5:b8:83:79:cb:b1:e8:97:22:d0:99:42:3e:db:0c:
2a:f7:f7:16:6f:80:c2:08:e2:95:e3:91:ba:64:95:cf:a9:46:
02:e6:11:6c:11:0c:dc:36:8c:e7:02:57:7a:a6:6c:87:0d:5e:
20:18:ab:12:75:6f:21:c6:8a:4d:09:3e:8e:30:d0:71:84:e3:
76:b3:c3:74:2f:18:07:e4:53:fd:8f:a0:0b:f2:05:65:17:30:
c4:d9:bd:d1:79:a1:9a:82:4f:fd:0e:b1:c2:28:c4:81:d5:50:
3a:4b:4c:f0:27:ea:71:6b:ec:3f:f2:aa:09:59:d3:be:b5:80:
4b:fe:e8:ea:a7:29:5f:c5:f7:57:3d:48:da:86:82:83:80:a0:
49:17:24:93:90:de:4e:37:c1:cc:16:63:90:9c:03:ac:4f:5e:
0c:d7:9d:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 21:29:25 2025 by rpki-client