Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NZ_dP984bY4KiQrBXRej2PQ3OAk.roa
File: NZ_dP984bY4KiQrBXRej2PQ3OAk.roa (raw, json)
Hash identifier: 5YoVgcfWgC9mMoBpe1LJJ65FksPFrlWLcAliYJM+UXA=
Subject key identifier: 35:9F:DD:3F:DF:38:6D:8E:0A:89:0A:C1:5D:17:A3:D8:F4:37:38:09
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A30
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NZ_dP984bY4KiQrBXRej2PQ3OAk.roa
Signing time: Thu 30 Jan 2025 17:25:30 +0000
ROA not before: Thu 30 Jan 2025 17:25:30 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2608 (0xa30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 17:25:30 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=359FDD3FDF386D8E0A890AC15D17A3D8F4373809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:75:78:3b:55:3e:80:96:cb:ec:58:8e:e0:
0f:38:cf:16:1d:54:ca:1c:77:35:4b:70:0d:fb:8a:
1f:5d:77:8d:c8:26:0a:ff:04:d4:8d:07:4b:07:7c:
59:90:9e:17:7f:2c:87:22:7c:37:9b:b7:d2:c9:9a:
d9:5e:5e:e2:94:f3:5b:75:d8:5d:cb:1f:62:07:a8:
ac:2f:ac:48:40:f6:f0:79:f4:b9:fe:8d:4a:3f:32:
f8:3f:0f:c6:2d:6b:3e:ea:ef:1a:a9:bf:1f:70:0d:
92:37:88:ec:40:81:bd:c9:a4:86:ae:ce:5e:1c:10:
13:9e:7b:97:90:98:92:a8:c0:39:6a:2a:b2:1f:64:
18:97:0c:e5:fb:6c:45:18:7e:83:4d:8b:76:78:1e:
92:6d:c6:cf:de:c0:58:d0:d1:c3:79:ca:73:f0:13:
68:5e:e0:2a:5c:88:da:1a:80:73:e0:f3:1d:78:db:
89:19:09:af:2f:db:0a:c7:2c:39:44:5a:2e:70:8f:
7e:a3:3f:2e:84:78:60:86:e9:f6:8e:52:73:85:46:
6d:93:4f:19:20:a9:f1:43:8c:96:b0:0a:dd:78:5a:
f1:47:dd:3f:64:d3:97:e6:74:f7:1d:10:93:48:4b:
96:ea:14:f2:2b:7d:b3:52:78:1f:84:c0:d5:5d:cf:
88:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:9F:DD:3F:DF:38:6D:8E:0A:89:0A:C1:5D:17:A3:D8:F4:37:38:09
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NZ_dP984bY4KiQrBXRej2PQ3OAk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:cd:7d:01:89:22:ec:ab:12:3c:e8:51:41:80:d5:32:25:ea:
94:46:96:c8:c9:40:d7:64:09:bb:7f:c4:2e:67:7f:1a:90:14:
0e:9a:4b:76:21:a8:07:b8:19:4d:92:32:71:5d:7e:95:a8:e0:
47:e9:ae:ef:71:c9:76:3d:c4:e9:8b:bb:1e:be:95:f1:ef:b7:
e1:90:a1:00:04:af:f7:db:34:4a:55:f1:1d:fa:e2:ad:fd:97:
83:bf:e1:74:6e:56:12:f8:cc:da:02:fd:e6:85:7c:c9:f3:e6:
f3:f4:0d:75:da:6e:9f:8e:d9:cd:cb:b5:ec:ee:16:7d:ca:42:
2c:90:71:f5:86:e9:e4:4f:0c:6a:fb:41:fc:b8:51:2a:02:29:
63:44:c3:1d:a0:0c:01:91:2b:ab:f4:30:d0:60:dd:a0:70:a1:
e1:37:cb:54:ba:0c:e6:f9:e8:a5:92:f1:52:1c:5e:c4:b5:32:
2a:83:1d:54:22:c6:01:43:c8:61:a2:d2:1b:5f:a1:34:a2:da:
10:e2:8b:ba:41:49:59:43:89:04:1c:85:a4:a9:d8:20:b2:e3:
e0:dc:d5:8c:44:9f:83:5f:f9:ec:17:e0:f3:8d:fa:f6:bb:62:
31:bd:da:c0:b6:26:08:44:1a:a2:d6:73:1b:14:d0:63:65:5f:
f4:22:33:52
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzAx
NzI1MzBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM1OUZERDNGREYzODZE
OEUwQTg5MEFDMTVEMTdBM0Q4RjQzNzM4MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdHHV4O1U+gJbL7FiO4A84zxYdVMocdzVLcA37ih9dd43IJgr/
BNSNB0sHfFmQnhd/LIcifDebt9LJmtleXuKU81t12F3LH2IHqKwvrEhA9vB59Ln+
jUo/Mvg/D8Ytaz7q7xqpvx9wDZI3iOxAgb3JpIauzl4cEBOee5eQmJKowDlqKrIf
ZBiXDOX7bEUYfoNNi3Z4HpJtxs/ewFjQ0cN5ynPwE2he4CpciNoagHPg8x1424kZ
Ca8v2wrHLDlEWi5wj36jPy6EeGCG6faOUnOFRm2TTxkgqfFDjJawCt14WvFH3T9k
05fmdPcdEJNIS5bqFPIrfbNSeB+EwNVdz4hrAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUNZ/dP984bY4KiQrBXRej2PQ3OAkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL05aX2RQOTg0Ylk0S2lR
ckJYUmVqMlBRM09Bay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAHLNfQGJIuyrEjzoUUGA1TIl
6pRGlsjJQNdkCbt/xC5nfxqQFA6aS3YhqAe4GU2SMnFdfpWo4Efpru9xyXY9xOmL
ux6+lfHvt+GQoQAEr/fbNEpV8R364q39l4O/4XRuVhL4zNoC/eaFfMnz5vP0DXXa
bp+O2c3LtezuFn3KQiyQcfWG6eRPDGr7Qfy4USoCKWNEwx2gDAGRK6v0MNBg3aBw
oeE3y1S6DOb56KWS8VIcXsS1MiqDHVQixgFDyGGi0htfoTSi2hDii7pBSVlDiQQc
haSp2CCy4+Dc1YxEn4Nf+ewX4PON+va7YjG92sC2JghEGqLWcxsU0GNlX/QiM1I=
-----END CERTIFICATE-----
Generated at Sun May 18 02:03:02 2025 by rpki-client