Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/OP12Z66RNQpfcF_VB2pXG2Hh_f4.roa
File: OP12Z66RNQpfcF_VB2pXG2Hh_f4.roa (raw, json)
Hash identifier: LBweMO+uELFIU8ILFJhajqDw70lsCqE27OKhRDmNVWc=
Subject key identifier: 38:FD:76:67:AE:91:35:0A:5F:70:5F:D5:07:6A:57:1B:61:E1:FD:FE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 069E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OP12Z66RNQpfcF_VB2pXG2Hh_f4.roa
Signing time: Tue 21 Jan 2025 04:54:55 +0000
ROA not before: Tue 21 Jan 2025 04:54:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1694 (0x69e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 04:54:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=38FD7667AE91350A5F705FD5076A571B61E1FDFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:70:ba:c4:5b:8e:27:fc:83:7a:65:b2:08:ec:
82:53:df:32:a3:75:24:e1:fe:2e:b7:0f:1d:c0:8b:
bf:ba:bd:0e:4f:ad:a2:2b:43:2f:f2:86:1d:b4:68:
48:9f:eb:37:89:26:95:ae:f4:91:f2:1f:47:d9:a9:
b6:b3:49:a4:b0:1a:7c:ae:3c:bb:0b:a2:7f:44:34:
10:e0:5d:0b:00:37:df:f1:2f:56:4a:ee:5c:b1:55:
61:df:8f:94:95:47:f0:a0:f5:97:36:3f:02:91:33:
d7:e9:bc:f3:97:52:b6:bb:4e:da:be:43:84:f6:0d:
20:cc:7f:0e:f5:d2:c9:e6:76:6d:3d:4e:5e:24:0a:
7e:34:9a:60:20:f1:c8:8d:65:88:69:69:a6:b4:44:
f7:f5:73:d4:b5:04:db:62:05:c4:f5:e7:b5:94:48:
50:67:78:a6:7d:3e:9d:c1:aa:5a:92:d4:5e:0e:fe:
6d:6e:f4:f4:8f:af:c8:75:b9:16:da:6b:02:7e:8c:
b9:ce:28:74:b3:5d:85:70:cd:a4:4d:f3:61:f7:e8:
22:8b:56:cc:c8:40:a7:a0:cc:8c:dd:12:f9:dd:47:
6f:e9:4a:ed:c8:76:8f:93:65:09:69:54:4d:0a:f9:
07:92:b7:5a:b6:db:f7:6e:f0:9f:a1:81:5d:4d:3d:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FD:76:67:AE:91:35:0A:5F:70:5F:D5:07:6A:57:1B:61:E1:FD:FE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/OP12Z66RNQpfcF_VB2pXG2Hh_f4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:57:e8:21:dd:f2:b6:95:78:ba:30:42:8b:97:25:d8:20:48:
7b:d9:4f:59:7b:18:a5:da:9f:62:fc:b2:c4:a8:c2:1b:0a:58:
3b:be:38:4f:00:e6:1e:c8:61:a4:66:37:c0:7b:5d:db:24:f7:
54:0a:37:20:d8:35:ad:05:30:0b:eb:26:f9:0a:f6:7a:82:2f:
49:69:d4:8a:9d:6e:57:82:6e:60:a3:13:66:ae:9b:86:6e:4f:
ff:6b:be:eb:1d:ea:eb:99:e0:8f:f1:79:92:7f:57:86:34:44:
81:59:dc:cb:93:d4:d9:58:c3:ac:b6:16:b5:6a:0f:a0:12:4b:
81:c6:0f:4d:37:e6:e8:d4:ee:c0:31:fd:e1:72:79:16:27:7a:
cc:31:8c:24:f8:2e:b5:1f:40:83:7f:18:f0:ad:4d:ce:aa:81:
2a:c0:0d:66:5d:89:98:b4:13:af:0a:c4:1e:4b:ba:43:2d:c2:
62:36:e5:da:a9:be:99:f9:f3:1c:63:42:53:fe:11:99:9b:55:
ac:18:8e:11:99:98:cc:c1:f5:68:da:84:ce:05:50:2b:d2:88:
92:2a:9a:56:45:28:35:74:1f:2d:92:61:83:7d:27:3e:1a:c0:
90:e4:5a:72:e3:b4:68:75:5e:ce:5d:2f:95:8a:2d:42:97:80:
d3:1c:0c:ae
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:49:03 2025 by rpki-client