Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/filKqddc2_CunvlRubHkLLI-vDg.roa
File: filKqddc2_CunvlRubHkLLI-vDg.roa (raw, json)
Hash identifier: 5Rm+xmdD09uMyZpUxB5RRKxz4bUh6ZDFe9jtK2CibVU=
Subject key identifier: 7E:29:4A:A9:D7:5C:DB:F0:AE:9E:F9:51:B9:B1:E4:2C:B2:3E:BC:38
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C1C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/filKqddc2_CunvlRubHkLLI-vDg.roa
Signing time: Tue 04 Feb 2025 20:25:45 +0000
ROA not before: Tue 04 Feb 2025 20:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3100 (0xc1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 20:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7E294AA9D75CDBF0AE9EF951B9B1E42CB23EBC38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:cc:fa:cf:0b:04:94:8f:c4:3a:4a:a8:44:
b3:67:74:b0:db:f0:f6:c0:4f:e0:2a:70:26:4e:49:
6c:fd:72:40:e9:7f:1d:0d:e6:61:da:64:65:9d:cd:
52:1f:03:a9:6e:d1:08:25:ea:7d:ad:00:d0:22:4d:
46:aa:cb:9a:51:d1:16:fd:4e:aa:06:ff:a6:fe:96:
e2:39:1a:39:e7:64:93:cc:fa:e9:8d:8b:52:51:04:
80:74:83:48:4a:d9:a4:ca:e8:41:6d:97:14:e6:1b:
d6:a2:d0:14:9a:e2:42:7b:bb:83:74:b9:c6:ef:a7:
a0:40:82:76:56:2b:26:c8:55:fb:08:30:b7:1e:0b:
1f:68:a8:00:e8:59:be:6d:e2:d9:ef:41:b3:da:16:
b2:e5:d1:64:96:b7:25:80:15:3d:0f:ae:c1:74:da:
8e:bd:26:cc:51:1f:28:a1:08:f4:c9:9a:6e:f8:a3:
17:7c:55:ec:79:ca:ff:05:83:13:ec:27:1c:84:2d:
ca:bc:71:04:1b:94:fd:61:31:d0:d3:85:37:c5:36:
e5:df:ab:db:e7:7e:3a:11:d3:82:ed:29:56:7a:55:
14:25:f3:04:95:cb:ef:73:e8:78:1a:77:51:8f:19:
04:21:34:3d:80:0a:d6:e7:c9:df:f0:69:66:53:63:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:4A:A9:D7:5C:DB:F0:AE:9E:F9:51:B9:B1:E4:2C:B2:3E:BC:38
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/filKqddc2_CunvlRubHkLLI-vDg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:f0:c7:ac:fb:09:8f:98:e2:7a:99:de:f2:eb:62:e3:22:de:
e8:48:06:95:85:0d:cb:53:b2:20:fc:d8:f1:82:85:48:1b:c1:
81:0f:33:9d:d7:4f:46:2b:7f:e6:f9:4e:67:6e:bb:36:c8:50:
c5:5b:1b:da:08:cd:c4:04:c2:91:bc:e1:cf:0b:28:ef:49:4d:
43:a3:db:d9:3a:5e:08:4c:23:7b:37:9e:4f:d2:69:ee:e9:fc:
fc:cd:61:11:e3:25:2a:d5:08:1f:29:06:ec:8b:93:74:cf:83:
47:cc:37:fa:a3:1a:e7:5e:35:85:5e:86:8a:6e:07:47:34:93:
e8:13:97:d0:d9:b6:af:a3:b7:a8:ea:eb:57:93:8f:e8:61:14:
66:43:e9:8e:68:52:97:1b:4b:7c:e3:55:54:ee:d1:12:fc:b1:
63:c9:98:81:83:c6:8b:e4:d0:3a:8d:90:3e:dd:f5:9f:95:f4:
71:99:22:b3:80:f8:dc:aa:bb:2f:9a:be:57:d6:3a:64:f4:2b:
6a:12:1d:52:95:a3:b9:c5:a6:0b:7b:d4:b0:2d:29:c0:1a:65:
41:59:28:41:81:7e:ee:f2:7b:b1:be:ad:16:d4:d5:02:ff:c5:
92:25:59:76:cf:47:c9:9e:d5:50:17:b2:af:21:b6:6f:b7:9c:
ec:50:58:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 03:06:29 2025 by rpki-client