Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ON69fnVk1wbtsDz5_9zKZhXxrvY.roa
File: ON69fnVk1wbtsDz5_9zKZhXxrvY.roa (raw, json)
Hash identifier: TrOzmk1+p8M7H43JOCV7OSLtUqJmF60N6ZhvyJcKt14=
Subject key identifier: 38:DE:BD:7E:75:64:D7:06:ED:B0:3C:F9:FF:DC:CA:66:15:F1:AE:F6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0940
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ON69fnVk1wbtsDz5_9zKZhXxrvY.roa
Signing time: Tue 28 Jan 2025 05:25:21 +0000
ROA not before: Tue 28 Jan 2025 05:25:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2368 (0x940)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 05:25:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=38DEBD7E7564D706EDB03CF9FFDCCA6615F1AEF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:42:78:98:11:2a:26:07:e5:b5:93:7b:86:
f8:82:7f:10:69:49:55:b4:93:4e:76:41:bc:99:ec:
ff:78:8a:cb:48:b1:0f:09:d4:2f:ec:25:18:ad:2a:
6f:c3:ba:fb:34:4c:07:69:f6:38:3c:24:70:e9:d0:
8e:42:2f:4c:e6:45:cf:70:21:02:c8:09:ea:68:d3:
58:66:38:8c:e6:cf:41:62:44:4e:14:c6:a6:1d:22:
4f:4c:1c:3c:34:b0:8f:49:1a:b1:0a:e5:5e:89:e4:
cc:28:36:fe:94:c3:de:eb:20:ac:c8:62:ac:3d:1c:
b0:e8:46:8c:ba:e2:ca:c8:ee:6f:e6:a2:61:ac:fe:
eb:7b:7f:35:ed:16:43:18:2e:e3:2a:6b:40:d7:b5:
c1:96:64:8d:f0:2a:43:e2:d2:19:b2:91:96:d7:1b:
ed:c9:bd:e4:c4:dc:66:31:c3:1a:2e:e3:4e:34:5d:
6d:05:a2:92:7c:12:6c:10:77:dc:d9:3b:20:29:e5:
de:43:75:c9:13:80:cd:b1:ff:d9:ef:18:11:71:28:
fb:85:b1:60:75:d0:bf:5a:d4:e3:a0:6f:b7:69:b4:
e9:ac:66:b2:f8:7c:2a:c5:b7:69:e4:2a:a4:77:6f:
e0:b9:c9:84:9a:ad:e4:a7:20:ab:20:2b:24:ec:a1:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DE:BD:7E:75:64:D7:06:ED:B0:3C:F9:FF:DC:CA:66:15:F1:AE:F6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ON69fnVk1wbtsDz5_9zKZhXxrvY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:f3:47:fc:f7:61:6c:08:a4:59:83:a1:f7:1a:55:7c:15:68:
19:7d:4c:11:98:7e:a1:4c:2c:80:46:fd:fd:48:d2:34:a3:01:
61:53:91:ea:1a:f5:50:0e:7c:c4:75:c1:45:2e:88:12:18:ca:
4b:f1:36:d3:5e:5e:52:dd:c6:80:dd:b3:f1:3e:b3:17:14:21:
47:c5:bc:b7:27:ef:bd:e4:02:07:94:1d:56:c2:47:ad:66:b9:
f9:09:bd:05:ca:05:4f:b0:8b:d2:37:93:cc:75:f3:cc:61:b7:
dc:92:68:87:1b:8d:e1:9e:8f:ae:9f:03:7f:cb:2d:e4:d7:9c:
78:c2:73:2b:7a:29:6c:88:33:16:11:dc:a5:6e:ce:25:db:2d:
55:94:90:de:f0:28:c4:2e:57:ba:0f:9a:6b:c6:5f:12:9f:fa:
ee:8b:75:16:4a:9d:3c:a7:89:63:a1:67:99:d5:fb:f7:93:a8:
92:5b:6d:05:65:b1:eb:39:dd:4f:da:05:f6:a0:31:49:45:3e:
74:c9:81:74:94:4e:ce:60:76:54:44:02:ad:19:29:c1:7e:76:
fb:78:bd:a0:95:0e:46:3f:38:85:77:d6:14:ab:1b:f1:6e:b9:
cd:0c:42:99:00:96:0d:15:ee:da:6d:9b:39:91:50:80:51:47:
84:34:0e:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 07:32:06 2025 by rpki-client