Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/bdp34C0yj6MF6lEweiHcXeIS6FE.roa
File: bdp34C0yj6MF6lEweiHcXeIS6FE.roa (raw, json)
Hash identifier: NDPZM0jdX6Ekn60SuevlytaKccpPwmZw7X7XGEu+ufw=
Subject key identifier: 6D:DA:77:E0:2D:32:8F:A3:05:EA:51:30:7A:21:DC:5D:E2:12:E8:51
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C32
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bdp34C0yj6MF6lEweiHcXeIS6FE.roa
Signing time: Wed 05 Feb 2025 01:56:29 +0000
ROA not before: Wed 05 Feb 2025 01:56:29 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3122 (0xc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 01:56:29 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6DDA77E02D328FA305EA51307A21DC5DE212E851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8b:ba:c4:ca:55:8e:b9:4b:60:b3:29:63:dc:
d9:b7:8c:be:ed:bb:75:ed:6f:ca:f6:29:92:05:9c:
49:5f:a5:ee:c0:2f:ce:5a:bb:50:3f:c3:f2:c1:87:
17:8c:70:b0:e3:f3:65:6f:76:43:84:5b:d2:18:89:
0b:41:ba:fc:e1:69:55:07:e9:cc:24:d2:d8:97:11:
e3:84:3f:69:c6:e0:73:43:7a:09:06:c9:34:6d:03:
66:8d:4f:7f:08:8d:a1:c0:df:02:88:6a:0f:c0:4a:
99:1f:54:9d:e1:80:ba:a9:97:9f:91:4c:8b:80:71:
21:91:0f:2e:f6:68:b3:24:17:59:ec:7c:c5:74:fb:
5b:43:7d:26:39:40:c4:2e:82:dd:4c:08:ca:47:40:
e2:e0:0b:46:bc:ff:3e:82:d6:dc:e4:25:a3:26:4a:
59:4c:55:30:a7:73:c1:c7:40:02:70:5a:20:66:83:
a6:07:4b:1d:0e:38:d6:01:14:d0:49:d2:ec:25:f5:
92:4e:c7:f5:65:d6:b8:b1:ee:94:32:e9:20:9c:50:
01:5e:73:81:1b:ba:1a:43:f6:b2:5c:af:f7:41:98:
dc:3a:f6:1d:6b:37:d3:f7:bf:82:92:56:03:29:5a:
0c:50:b9:f4:04:9f:02:be:4a:8a:3a:74:ef:e1:07:
33:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DA:77:E0:2D:32:8F:A3:05:EA:51:30:7A:21:DC:5D:E2:12:E8:51
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/bdp34C0yj6MF6lEweiHcXeIS6FE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
04:0c:b9:39:e0:ea:0c:5c:6e:40:97:7a:44:7f:c4:33:35:a1:
87:13:15:ab:86:36:7b:86:88:19:73:ab:7c:16:65:c9:2d:13:
80:42:e1:bc:e5:83:f5:d6:b1:a2:05:0e:3c:e6:46:4d:a9:24:
c0:ab:ec:80:44:ac:87:43:af:03:56:26:51:10:dc:75:22:1b:
2e:fb:85:e3:fa:e8:d8:84:67:5a:79:97:20:fc:c0:61:ce:34:
af:0e:ed:20:07:6a:9b:91:75:8d:56:1d:e1:74:a6:61:5e:6e:
1f:ac:fb:39:4c:8b:d5:ee:c0:71:96:4f:d4:f9:20:4d:0f:57:
fd:10:72:f0:64:42:cd:c5:53:40:13:47:a1:be:71:4d:1c:13:
70:78:0f:00:90:83:5e:bb:05:41:b5:91:36:95:71:c6:df:90:
54:d2:2d:93:67:80:d7:4a:8e:19:b6:a5:b0:c2:a2:0a:dd:2c:
66:6c:56:09:59:ff:f9:aa:63:b5:6b:26:3a:1a:1d:81:16:12:
ae:06:c2:4a:e4:f8:ff:4a:a8:4e:c2:93:3c:17:e6:2b:4f:b8:
c2:a1:37:3e:80:bc:f1:3b:1c:90:f5:58:50:2c:6f:c9:5a:79:
13:2e:58:40:cc:b5:74:fc:3f:e1:3b:8c:16:f0:02:fb:16:50:
ec:db:ec:1d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:54:51 2025 by rpki-client