Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/jo0KnL__yVVVQjVFKX2axIYkK4w.roa
File: jo0KnL__yVVVQjVFKX2axIYkK4w.roa (raw, json)
Hash identifier: Wud7qKq/IlQNiy1ihkJlXg0dmc/cOZVOi+RqJNehJSE=
Subject key identifier: 8E:8D:0A:9C:BF:FF:C9:55:55:42:35:45:29:7D:9A:C4:86:24:2B:8C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A08
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jo0KnL__yVVVQjVFKX2axIYkK4w.roa
Signing time: Thu 30 Jan 2025 07:25:28 +0000
ROA not before: Thu 30 Jan 2025 07:25:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2568 (0xa08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 07:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=8E8D0A9CBFFFC95555423545297D9AC486242B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b7:55:48:27:f3:7c:02:bc:2c:26:dc:eb:38:
ec:1a:58:3e:8c:01:69:a2:b2:53:03:45:bc:c9:4f:
0f:1d:30:9d:bf:76:08:d4:40:c4:5e:c8:85:a1:ec:
86:83:a7:3c:b1:0a:98:f7:23:dd:2e:01:30:5e:82:
d2:b5:f7:d1:0d:1a:e8:e6:aa:b2:e2:67:99:75:9c:
c5:b2:1c:0f:d4:60:e3:e5:c2:f6:8f:60:14:54:41:
30:03:23:c6:ea:d4:8b:12:b4:bc:5c:b9:15:7d:f0:
6f:91:16:62:0e:88:23:03:36:99:8b:45:7e:71:0d:
b4:bb:a3:53:43:1e:99:bc:7a:eb:21:c9:05:50:a9:
ac:67:75:69:d5:b5:91:c8:7b:13:e5:98:98:44:91:
d1:25:83:e3:46:0b:d7:70:57:6b:79:e8:84:88:d9:
06:dc:35:28:ac:bd:57:e7:0f:d6:d3:11:a3:9a:d3:
32:a5:8b:e2:e3:8e:fa:5d:e1:2f:43:ee:1a:89:53:
37:ec:c6:f2:99:d3:d0:44:4f:8f:ab:58:50:db:4a:
ac:fa:1b:27:54:14:58:cf:97:da:7f:eb:94:19:c8:
7d:6e:0a:c1:12:2d:c4:be:ad:96:1d:83:57:f7:f9:
a2:d1:3c:ea:2f:21:9a:65:07:82:17:dd:66:22:15:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:0A:9C:BF:FF:C9:55:55:42:35:45:29:7D:9A:C4:86:24:2B:8C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/jo0KnL__yVVVQjVFKX2axIYkK4w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:c8:91:31:2b:70:2e:fa:3e:a0:22:20:97:ca:73:b1:43:ab:
21:af:06:1c:59:3f:4d:d4:43:10:f9:d7:24:ca:10:10:48:73:
22:e7:a6:00:c4:5e:bf:b7:f5:b1:92:24:2a:e3:7a:52:2c:eb:
5f:38:ba:7a:a4:6b:39:af:8f:01:be:00:c6:94:ec:32:4f:51:
c5:ee:78:ed:28:a9:4e:26:52:f4:5c:c7:0b:f6:86:67:67:22:
6a:48:46:20:5a:9a:7f:14:dd:91:f0:e0:91:11:04:bc:ed:09:
56:6c:33:3d:0c:f0:2b:03:82:a6:0f:b9:64:61:21:77:64:46:
4b:cd:00:46:5d:64:0a:34:48:cf:fb:ef:9e:40:c4:52:1e:6d:
9b:6a:15:8e:e6:5c:1e:a7:74:54:e7:74:cf:1a:ba:fc:ac:a6:
c6:e1:47:04:2e:aa:b9:27:d9:19:d4:31:df:f3:89:b5:0d:2b:
27:bb:af:43:f2:e1:fd:d7:27:5c:0b:e2:d7:f2:74:ea:e7:3b:
e1:c2:fa:0a:de:aa:df:a7:a8:01:e8:87:95:6a:83:a8:82:2a:
94:a7:ba:4f:c6:e9:b0:00:d9:0e:e1:e4:dc:6d:0c:87:70:ad:
83:46:5e:57:6f:72:84:5a:c8:04:39:7f:4b:95:53:35:12:7d:
37:29:7f:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:36:38 2025 by rpki-client