Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/cCTpCLJb2QlISbQ2eNanib8flYg.roa
File: cCTpCLJb2QlISbQ2eNanib8flYg.roa (raw, json)
Hash identifier: 0Ji2UkjkqEwRvJUEQWZ4Yyq9/cZ7z6yFCHL84JZhaVo=
Subject key identifier: 70:24:E9:08:B2:5B:D9:09:48:49:B4:36:78:D6:A7:89:BF:1F:95:88
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C50
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cCTpCLJb2QlISbQ2eNanib8flYg.roa
Signing time: Wed 05 Feb 2025 09:25:43 +0000
ROA not before: Wed 05 Feb 2025 09:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3152 (0xc50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 09:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7024E908B25BD9094849B43678D6A789BF1F9588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:d3:f0:4c:aa:f3:0e:b5:59:52:31:54:e2:
40:32:26:15:34:1b:15:bb:1e:00:1d:01:c4:b6:1f:
d9:f8:7d:69:da:fe:ec:88:d1:6c:20:a6:a5:58:81:
8e:0e:e1:6b:39:a3:4f:11:c7:36:32:53:ef:a0:6e:
d3:f8:8b:76:4d:12:0e:1c:6f:30:61:25:a7:fb:78:
ac:60:a6:59:eb:1d:31:e5:bd:86:2d:a6:73:5e:3f:
46:f1:75:71:5a:fc:a0:81:ef:f9:31:e6:d7:fe:5a:
66:64:55:99:c4:b2:a2:8b:77:95:16:2e:96:96:e0:
1c:d8:7d:27:20:3f:23:81:fe:32:b8:e7:47:b2:ad:
8a:ce:a4:53:d0:a5:9d:a0:e1:a6:97:28:11:98:ab:
eb:ed:88:53:fd:07:68:7b:fb:70:69:1a:a1:eb:c3:
44:8e:10:28:8e:79:88:26:2c:89:fa:b8:dd:76:fe:
65:2d:47:0f:bd:2a:6c:a7:8b:a4:4a:11:1e:b2:9b:
bf:1f:b5:7a:83:40:1a:27:b8:c7:38:65:2a:11:14:
81:35:fa:10:50:d7:c9:c9:eb:d2:d7:6c:11:66:30:
99:85:21:1b:69:73:59:52:fd:2e:15:05:00:89:62:
2d:ba:1b:43:f7:4d:1a:81:62:2f:6a:c4:77:ab:e3:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:24:E9:08:B2:5B:D9:09:48:49:B4:36:78:D6:A7:89:BF:1F:95:88
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cCTpCLJb2QlISbQ2eNanib8flYg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
af:33:d0:dc:e1:79:a3:5f:4e:80:20:1b:8d:49:d7:63:5f:8b:
5e:90:ac:60:66:f1:93:52:28:53:d3:cf:68:01:5d:e9:f0:46:
76:c8:3e:37:90:83:de:15:ff:03:68:43:94:f4:24:10:97:31:
66:9d:5b:68:a5:ce:4c:e3:17:d5:2f:58:65:f0:06:09:d8:98:
39:51:d8:30:1b:ee:a7:3c:d1:86:f3:45:cb:fb:50:68:8f:5f:
90:ed:aa:23:e4:6b:d6:78:ea:e3:05:7b:2c:c8:50:63:3c:4c:
1d:74:9f:b3:d9:45:34:5c:53:04:c3:67:15:ec:f5:ad:ab:0c:
70:0b:76:84:75:3e:6a:c8:3d:0a:65:9d:4e:0e:0d:ea:20:1d:
76:25:e7:a5:2e:ea:2c:af:92:7b:9c:ad:f7:ed:31:04:63:c9:
c1:2f:d4:3e:c4:7c:7c:9c:ea:d0:18:5b:2f:d3:aa:76:8f:6e:
b2:bd:ff:41:ef:ef:d6:fa:99:97:0b:be:2a:a5:9f:d2:72:05:
15:c1:14:64:dd:ca:53:79:3a:98:67:d1:87:ab:fb:8d:d5:50:
40:1c:58:b4:8a:3a:2c:57:52:91:ee:f2:15:80:9f:0e:5a:61:
ef:fe:a1:95:84:10:11:0f:63:69:99:67:61:75:cd:ec:66:4f:
97:c8:7a:4c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:06:16 2025 by rpki-client