Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/esa3ik37ZhrAd-XwDciPYbHWgno.roa
File: esa3ik37ZhrAd-XwDciPYbHWgno.roa (raw, json)
Hash identifier: QypzA9+Os+X3ysXF87FeQwI2TF/4RpYcL8P30zaHAfw=
Subject key identifier: 7A:C6:B7:8A:4D:FB:66:1A:C0:77:E5:F0:0D:C8:8F:61:B1:D6:82:7A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B76
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/esa3ik37ZhrAd-XwDciPYbHWgno.roa
Signing time: Mon 03 Feb 2025 02:55:36 +0000
ROA not before: Mon 03 Feb 2025 02:55:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2934 (0xb76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 02:55:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7AC6B78A4DFB661AC077E5F00DC88F61B1D6827A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:be:8e:de:77:87:83:1d:63:f3:2e:36:25:6f:
71:01:eb:00:14:d6:1b:47:39:e3:83:9d:31:05:db:
2f:db:83:5d:9e:0d:a9:e6:10:0e:a8:68:2e:b5:e7:
2d:cc:37:34:a0:08:14:3e:4f:58:d2:8d:dd:00:3c:
a3:80:6d:37:23:20:e3:88:ee:c9:51:14:85:80:30:
f8:aa:8c:76:a4:c3:39:41:f5:4c:4b:f5:34:94:d2:
a6:49:6a:30:21:79:c5:cc:11:4e:7e:66:2c:a6:d8:
48:39:ef:3a:c9:3d:d1:6f:05:b9:8f:92:41:d6:3c:
e9:a3:52:8c:de:f3:99:a2:ae:95:5d:e5:39:1d:2c:
e7:e5:b1:72:e4:57:5c:48:b2:88:0e:1e:e6:e4:81:
f9:52:ff:b7:10:69:df:1e:40:ef:80:6d:77:d8:77:
7e:01:33:d4:21:ab:10:2f:62:ef:4d:79:44:c6:74:
18:22:4a:e1:69:e8:e9:09:c8:23:be:27:42:5a:d8:
2d:29:a7:57:39:aa:b9:33:a1:13:b3:a0:9c:d5:2a:
37:ef:9e:47:5b:17:09:5f:40:57:a2:42:74:d7:bf:
ce:e5:4b:c1:c7:c2:04:21:c5:65:74:7a:c0:76:16:
37:d0:a2:ae:c2:43:ae:a9:0c:dc:8a:37:de:9e:3d:
d4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:C6:B7:8A:4D:FB:66:1A:C0:77:E5:F0:0D:C8:8F:61:B1:D6:82:7A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/esa3ik37ZhrAd-XwDciPYbHWgno.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:1b:d2:03:25:75:32:b6:6f:bb:c7:4e:31:f4:b7:dd:94:59:
77:32:6a:ec:9e:17:16:c7:3c:59:35:01:a5:8d:85:e0:e0:90:
74:67:66:93:a9:88:e9:ba:a9:d5:e0:de:50:96:87:ad:31:de:
10:d6:ed:69:e1:6f:9f:e0:5b:72:0d:6e:45:09:63:38:71:ff:
77:53:56:cb:e2:9f:c9:cd:b6:06:43:ba:97:8d:ec:54:e6:ae:
81:2e:10:0b:3d:6d:04:90:a8:46:b8:f8:a2:ef:36:52:04:d5:
f3:f2:39:eb:9e:06:f2:75:78:05:7a:c8:c6:77:fd:b0:50:08:
cb:b4:b5:db:36:06:97:34:8e:c8:aa:b9:6f:af:70:91:fb:2c:
58:d5:f1:03:95:70:a0:a2:09:ea:72:f8:fc:03:e0:7d:95:28:
bc:b1:1a:2f:32:f0:90:8d:ba:5c:46:65:34:1f:bd:19:8e:07:
79:ae:e0:c3:e1:ae:b2:86:7b:4a:59:5d:f2:7a:13:d5:f9:76:
21:cc:f3:54:69:f8:9a:8d:37:94:d3:61:0a:00:84:43:2c:8d:
30:de:17:0c:97:bf:96:ae:bc:df:64:eb:b7:22:7e:84:2d:02:
3c:73:3c:49:e1:3e:23:c7:74:03:f8:f2:ae:bb:41:c1:72:bb:
1f:63:a4:95
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC3YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
MjU1MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdBQzZCNzhBNERGQjY2
MUFDMDc3RTVGMDBEQzg4RjYxQjFENjgyN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDYvo7ed4eDHWPzLjYlb3EB6wAU1htHOeODnTEF2y/bg12eDanm
EA6oaC615y3MNzSgCBQ+T1jSjd0APKOAbTcjIOOI7slRFIWAMPiqjHakwzlB9UxL
9TSU0qZJajAhecXMEU5+Ziym2Eg57zrJPdFvBbmPkkHWPOmjUoze85mirpVd5Tkd
LOflsXLkV1xIsogOHubkgflS/7cQad8eQO+AbXfYd34BM9QhqxAvYu9NeUTGdBgi
SuFp6OkJyCO+J0Ja2C0pp1c5qrkzoROzoJzVKjfvnkdbFwlfQFeiQnTXv87lS8HH
wgQhxWV0esB2FjfQoq7CQ66pDNyKN96ePdQLAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUesa3ik37ZhrAd+XwDciPYbHWgnowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2VzYTNpazM3WmhyQWQt
WHdEY2lQWWJIV2duby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBABob0gMldTK2b7vHTjH0t92U
WXcyauyeFxbHPFk1AaWNheDgkHRnZpOpiOm6qdXg3lCWh60x3hDW7Wnhb5/gW3IN
bkUJYzhx/3dTVsvin8nNtgZDupeN7FTmroEuEAs9bQSQqEa4+KLvNlIE1fPyOeue
BvJ1eAV6yMZ3/bBQCMu0tds2Bpc0jsiquW+vcJH7LFjV8QOVcKCiCepy+PwD4H2V
KLyxGi8y8JCNulxGZTQfvRmOB3mu4MPhrrKGe0pZXfJ6E9X5diHM81Rp+JqNN5TT
YQoAhEMsjTDeFwyXv5auvN9k67cifoQtAjxzPEnhPiPHdAP48q67QcFyux9jpJU=
-----END CERTIFICATE-----
Generated at Sat May 17 21:30:11 2025 by rpki-client