Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YhueDOLx_fnd7IFvEG_LmyTvQp4.roa
File: YhueDOLx_fnd7IFvEG_LmyTvQp4.roa (raw, json)
Hash identifier: jfiJSEfUlKeoFIaGjTlDV9TkWkOxeGua4tX4MYbgR9E=
Subject key identifier: 62:1B:9E:0C:E2:F1:FD:F9:DD:EC:81:6F:10:6F:CB:9B:24:EF:42:9E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 080A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YhueDOLx_fnd7IFvEG_LmyTvQp4.roa
Signing time: Fri 24 Jan 2025 23:55:08 +0000
ROA not before: Fri 24 Jan 2025 23:55:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2058 (0x80a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 23:55:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=621B9E0CE2F1FDF9DDEC816F106FCB9B24EF429E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:4f:e1:16:27:a1:69:35:47:43:c7:58:10:
b6:3e:26:0d:79:c3:20:ab:ab:58:c9:ea:e9:ad:0d:
05:a3:95:d4:6d:88:aa:03:a8:ad:45:39:62:00:cb:
1a:d2:73:da:f3:97:04:99:c8:15:32:bd:6f:c3:44:
ff:47:ac:e7:47:50:90:2e:2e:02:61:85:f6:45:a3:
b9:a2:5e:5d:61:9c:e5:6c:a3:86:7a:70:d7:30:0d:
06:36:72:8c:1c:65:fd:c0:65:a9:26:a9:2f:8b:72:
e7:71:5a:b4:36:8a:cc:f1:89:f4:60:16:c0:97:72:
27:f0:77:6a:f8:71:6b:52:9e:a3:3f:1f:34:a5:3c:
85:ee:d5:4c:8c:df:8f:5c:3d:99:42:9b:d8:c8:aa:
80:6a:43:20:d8:9f:06:42:18:3a:d7:68:3e:67:92:
71:8f:00:5d:a0:21:47:db:59:3a:d6:7a:11:34:c2:
b3:37:05:cc:01:5f:a8:1c:9a:5b:d2:44:19:eb:f2:
a9:f4:ed:9c:be:5c:f8:ac:5e:ce:26:00:a9:36:1b:
65:b7:32:15:3e:da:30:ea:54:8b:5c:2f:bb:97:00:
85:8e:ba:b9:4e:3b:51:a5:e9:9f:41:1a:e2:a2:72:
42:10:d2:f9:65:84:d3:32:3d:c5:7b:eb:9b:e2:21:
c4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1B:9E:0C:E2:F1:FD:F9:DD:EC:81:6F:10:6F:CB:9B:24:EF:42:9E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YhueDOLx_fnd7IFvEG_LmyTvQp4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:85:34:0c:d0:c2:59:7e:2d:2d:af:7b:1e:8f:5d:ee:54:27:
c9:08:92:a9:14:44:3a:07:4f:86:11:2c:6c:dd:34:15:c6:bb:
7d:86:b8:8b:17:a2:a5:9f:09:5b:63:3e:ea:40:ae:0a:8c:ab:
47:4a:b3:15:47:17:f4:ad:16:db:c4:14:8c:66:54:1a:c2:76:
cc:20:38:6e:37:71:e7:10:17:b8:f2:1b:82:47:1c:e7:da:1b:
6d:b4:30:bf:06:6c:0f:82:75:d3:6a:1a:02:31:6c:12:1b:81:
4c:53:9c:ec:cb:44:2d:fa:12:f0:42:c5:18:7d:f0:a3:ff:e0:
a1:a2:51:f2:32:7e:aa:97:3f:fb:c9:ae:8a:00:84:d4:ba:54:
03:0b:11:13:b3:ad:63:29:98:e6:09:54:af:d1:73:a9:8c:bc:
2c:53:b2:79:44:5a:e6:ed:c4:00:22:e5:86:94:35:e5:11:28:
b9:bb:a1:f0:7c:33:80:5c:b8:0d:ef:e2:14:85:1d:9e:c5:03:
54:e8:6b:ee:3e:fd:62:c2:f2:5f:aa:73:73:d1:0a:2e:76:9e:
14:39:bf:24:2c:c4:09:92:c4:b5:c9:a9:b5:52:28:7f:14:bb:
1a:2f:aa:ee:9a:0c:58:a5:72:3d:a7:41:9e:4f:65:53:03:b8:
5b:97:80:b6
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjQy
MzU1MDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDYyMUI5RTBDRTJGMUZE
RjlEREVDODE2RjEwNkZDQjlCMjRFRjQyOUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoFU/hFiehaTVHQ8dYELY+Jg15wyCrq1jJ6umtDQWjldRtiKoD
qK1FOWIAyxrSc9rzlwSZyBUyvW/DRP9HrOdHUJAuLgJhhfZFo7miXl1hnOVso4Z6
cNcwDQY2cowcZf3AZakmqS+LcudxWrQ2iszxifRgFsCXcifwd2r4cWtSnqM/HzSl
PIXu1UyM349cPZlCm9jIqoBqQyDYnwZCGDrXaD5nknGPAF2gIUfbWTrWehE0wrM3
BcwBX6gcmlvSRBnr8qn07Zy+XPisXs4mAKk2G2W3MhU+2jDqVItcL7uXAIWOurlO
O1Gl6Z9BGuKickIQ0vllhNMyPcV765viIcTjAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUYhueDOLx/fnd7IFvEG/LmyTvQp4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1lodWVET0x4X2ZuZDdJ
RnZFR19MbXlUdlFwNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEmFNAzQwll+LS2vex6PXe5U
J8kIkqkURDoHT4YRLGzdNBXGu32GuIsXoqWfCVtjPupArgqMq0dKsxVHF/StFtvE
FIxmVBrCdswgOG43cecQF7jyG4JHHOfaG220ML8GbA+CddNqGgIxbBIbgUxTnOzL
RC36EvBCxRh98KP/4KGiUfIyfqqXP/vJrooAhNS6VAMLEROzrWMpmOYJVK/Rc6mM
vCxTsnlEWubtxAAi5YaUNeURKLm7ofB8M4BcuA3v4hSFHZ7FA1Toa+4+/WLC8l+q
c3PRCi52nhQ5vyQsxAmSxLXJqbVSKH8Uuxovqu6aDFilcj2nQZ5PZVMDuFuXgLY=
-----END CERTIFICATE-----
Generated at Sat May 17 21:27:02 2025 by rpki-client