Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/e5iPuJAynN_d2HRx7t8OA3SvyPc.roa
File: e5iPuJAynN_d2HRx7t8OA3SvyPc.roa (raw, json)
Hash identifier: +V+eovoZKki8BTS44H9bHQOYa10+zs5+KivwuXSxtPw=
Subject key identifier: 7B:98:8F:B8:90:32:9C:DF:DD:D8:74:71:EE:DF:0E:03:74:AF:C8:F7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AB8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/e5iPuJAynN_d2HRx7t8OA3SvyPc.roa
Signing time: Sat 01 Feb 2025 03:25:31 +0000
ROA not before: Sat 01 Feb 2025 03:25:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2744 (0xab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 03:25:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7B988FB890329CDFDDD87471EEDF0E0374AFC8F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:01:97:aa:f1:67:7c:3d:30:7d:1f:0d:93:f8:
a2:99:13:5f:f6:32:92:6d:d3:cb:35:2b:b8:10:64:
52:8a:64:6f:02:17:6f:00:41:b1:27:b6:36:c7:af:
d7:6d:5a:39:da:93:4e:d5:fb:06:86:f7:30:79:9b:
48:b7:87:27:f8:a4:e0:58:49:d2:39:00:84:5d:db:
e2:b8:64:15:35:5e:01:58:6a:3e:5c:29:59:2a:c1:
bc:b8:7f:c5:dc:c1:63:0b:b0:54:37:e8:a8:66:71:
f2:10:cc:8c:78:9b:ad:46:66:6f:2b:5c:e5:00:6c:
7c:cd:dd:fb:6e:20:46:f7:b3:9f:d5:53:06:83:de:
e9:3a:f1:72:84:f5:53:7d:74:a1:02:bf:ab:1c:e2:
ed:cc:b2:b8:e7:e9:83:0f:4d:3b:d2:9e:2e:d1:fc:
09:16:9c:52:0c:a8:fe:3e:05:16:12:5a:62:19:ff:
74:53:a8:38:f1:ff:6f:32:bf:24:19:db:65:39:7c:
9f:cd:6c:9c:b1:4a:df:b5:84:d8:f0:5a:94:60:67:
5e:28:28:69:41:84:eb:0e:ae:26:6c:ea:01:f5:90:
d6:27:6f:a6:6d:98:c5:b6:8d:7a:fc:51:fa:1b:d8:
25:16:a0:48:c4:9d:5d:4e:b1:6d:93:71:0a:2d:52:
3f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:8F:B8:90:32:9C:DF:DD:D8:74:71:EE:DF:0E:03:74:AF:C8:F7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/e5iPuJAynN_d2HRx7t8OA3SvyPc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
10:ba:37:19:32:c5:e3:c8:a5:0f:83:cd:0d:ea:c9:f1:a3:7f:
61:d0:f5:a3:48:41:e8:35:b7:9c:43:22:53:d1:09:c6:44:24:
d8:2b:13:4f:df:8b:bb:7b:7c:d3:d0:fc:f4:f1:0f:17:6f:88:
a6:6e:40:4f:6c:54:80:a1:61:80:aa:17:be:41:c8:35:fe:ea:
eb:1c:3c:86:75:b3:3e:07:ed:56:e0:f7:bb:af:1e:cb:a4:02:
00:93:91:7f:48:4b:89:ab:02:3e:71:f6:0d:c9:06:38:50:03:
8b:bf:63:db:0f:71:da:7e:2c:ab:c4:c9:cd:eb:d1:15:4d:ec:
9a:59:f3:dd:f8:60:81:51:1d:f7:2f:03:08:71:4e:6b:c2:20:
e3:c4:e1:67:fb:a1:4c:ff:60:30:7d:6d:81:a8:9a:57:e3:86:
04:09:18:d3:77:e8:8e:14:a2:b6:6a:d5:e7:45:69:e8:d9:aa:
d8:e0:54:5d:e8:04:e2:0f:b0:3e:ae:81:0e:33:40:11:2b:0d:
79:45:f3:be:e2:58:8c:2f:31:d2:7d:49:d4:35:df:ab:e6:55:
b6:e3:94:23:21:88:94:5a:c7:f5:fc:8a:d6:c4:69:54:26:d6:
80:6f:37:e7:da:68:59:a3:43:13:47:44:da:7f:38:99:54:b2:
e6:9e:0f:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:44:14 2025 by rpki-client