Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/iWMnQKO9mPw6o3WlrNv8rG4zJ1o.roa
File: iWMnQKO9mPw6o3WlrNv8rG4zJ1o.roa (raw, json)
Hash identifier: /uUVM9TFG5mD/+b7NziU0XDxqkAOJuwzy+0wUQgAM/o=
Subject key identifier: 89:63:27:40:A3:BD:98:FC:3A:A3:75:A5:AC:DB:FC:AC:6E:33:27:5A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05A8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/iWMnQKO9mPw6o3WlrNv8rG4zJ1o.roa
Signing time: Sat 18 Jan 2025 15:24:47 +0000
ROA not before: Sat 18 Jan 2025 15:24:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1448 (0x5a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 15:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=89632740A3BD98FC3AA375A5ACDBFCAC6E33275A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:82:49:88:08:64:f6:58:18:4a:6d:ca:57:
35:d6:e7:36:db:9b:5a:1f:5c:3f:22:1c:74:36:57:
bc:2c:3c:41:be:6b:a1:38:80:c4:7b:48:e1:93:af:
7c:1c:0b:9c:81:2f:29:38:10:87:a7:22:2d:52:7b:
2c:bc:36:dd:5d:27:12:51:31:8a:0e:a0:2b:a3:5f:
d8:2a:47:d0:e1:ef:75:73:cc:33:6f:d5:db:d8:65:
e5:76:f9:bc:d8:6e:91:ec:45:69:de:f6:49:cc:2f:
04:bc:1f:59:48:42:b1:ce:85:6c:d3:5d:60:49:ac:
81:ee:25:95:f8:1d:2c:49:1b:dd:b5:57:d6:41:37:
37:13:8b:99:cc:77:f7:31:d7:7a:57:a5:52:70:83:
f6:5d:6d:9e:72:dd:8a:2f:ba:a8:df:d6:8d:a7:9e:
1e:39:8b:79:05:6f:0e:b7:94:f1:3a:68:76:f2:39:
9a:44:a6:63:ec:fd:b8:72:66:17:a2:fd:9e:97:0a:
37:0f:ab:64:e8:b5:5d:44:3d:d8:8d:1c:ac:63:50:
6f:7a:3f:07:98:56:ab:b7:b2:d6:31:db:b2:4a:45:
c3:de:b6:70:91:49:5b:8b:0e:df:fc:33:e4:36:d3:
32:3d:37:69:fa:34:d5:ba:31:93:27:bb:12:24:8b:
58:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:63:27:40:A3:BD:98:FC:3A:A3:75:A5:AC:DB:FC:AC:6E:33:27:5A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/iWMnQKO9mPw6o3WlrNv8rG4zJ1o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2a:00:b3:ec:21:b0:1e:b4:70:ab:ca:24:69:7a:c1:1f:e5:16:
ee:63:52:df:1c:0f:94:4e:cc:a6:6f:64:8c:00:e4:6a:24:01:
95:f0:cb:38:b7:d4:1d:0b:3f:35:9f:da:9b:a6:2f:99:55:6e:
df:ac:2b:33:f5:3b:16:52:c2:4e:10:5c:dc:ca:37:a1:a6:9b:
31:2a:24:0f:dd:02:75:d2:e5:40:19:3d:82:ab:e2:7c:fd:b2:
c5:05:64:20:0b:bb:24:58:9a:85:e4:a4:2d:4d:33:1e:94:ce:
d8:b2:63:ac:f4:e4:74:bd:e2:3c:76:57:b7:9a:78:c5:bc:30:
59:d2:1b:36:6f:d5:4b:ea:3e:ea:8c:70:94:84:c0:fa:ba:84:
15:fd:d6:c1:a6:db:37:c2:19:0a:f2:e2:bb:9e:19:11:c4:7c:
f5:66:80:d1:72:4d:df:b2:b3:8f:57:1d:a4:c2:aa:4d:4a:90:
db:1e:e2:5c:fc:f7:fc:6e:8d:3f:6b:f4:de:71:c7:59:1e:c2:
00:85:ec:64:1f:73:71:ce:18:f5:94:e1:8a:28:f9:67:63:cd:
3a:38:d0:63:04:3b:ab:14:40:0b:d9:6f:c8:73:ee:7b:96:c7:
53:1f:30:f0:01:1a:c6:e6:0d:a9:65:04:31:15:aa:dd:d7:37:
67:be:82:b0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:34:03 2025 by rpki-client