Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/r7M502ORFUzlDisX2ZpldPR40Mg.roa
File: r7M502ORFUzlDisX2ZpldPR40Mg.roa (raw, json)
Hash identifier: Nxv5taALrIjc0ELs7LK5Ryc12EqWYHcSNxI6SxlyxfE=
Subject key identifier: AF:B3:39:D3:63:91:15:4C:E5:0E:2B:17:D9:9A:65:74:F4:78:D0:C8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 064E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/r7M502ORFUzlDisX2ZpldPR40Mg.roa
Signing time: Mon 20 Jan 2025 08:54:50 +0000
ROA not before: Mon 20 Jan 2025 08:54:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1614 (0x64e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 08:54:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AFB339D36391154CE50E2B17D99A6574F478D0C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:00:0b:cf:d0:3e:78:12:84:f4:d7:38:cf:2a:
30:18:e9:f5:1e:79:d4:4e:95:5c:0a:ef:2c:87:de:
66:a0:a8:5b:28:80:d6:8e:6d:22:d0:e9:23:b8:9f:
1e:c9:34:5b:ec:c1:69:f0:31:ba:dc:61:7d:f8:02:
45:d5:70:a9:05:69:d3:51:4d:d9:ac:5d:6c:43:65:
f1:49:8e:08:5e:b1:1c:07:79:e0:bd:8e:f7:c4:f0:
b4:0d:3f:42:37:db:d9:08:62:15:90:70:b3:ff:97:
48:0a:97:fc:5d:d2:23:da:0a:7e:24:d3:d9:e8:7e:
18:bf:97:16:37:8e:63:24:7d:cc:26:d4:69:31:e8:
d0:25:e1:f6:ad:cd:24:04:b3:b8:ca:92:c3:b8:d1:
cd:97:77:07:b3:b0:3a:f2:9b:bd:09:6a:10:97:de:
bc:eb:67:04:5a:ce:c9:22:cd:5a:30:56:03:7f:14:
07:e5:90:de:a0:5b:17:d3:7d:f9:52:53:f3:b3:0e:
07:fa:1b:92:f1:40:23:10:04:cb:ac:34:e3:05:4e:
a2:de:f1:ac:89:4d:04:a0:ad:b6:a0:89:a8:b0:da:
a8:c0:1f:48:81:a1:a7:22:08:a1:71:c3:69:81:96:
e3:38:ce:48:08:94:7a:b4:38:10:c4:cb:f8:61:78:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:39:D3:63:91:15:4C:E5:0E:2B:17:D9:9A:65:74:F4:78:D0:C8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/r7M502ORFUzlDisX2ZpldPR40Mg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
48:0b:ca:81:54:6a:ad:99:6f:44:d0:d4:55:74:ce:2d:68:2a:
73:d2:f4:a6:b3:73:62:50:62:b7:09:e4:8b:8b:33:31:a0:f4:
ed:12:30:1c:dc:8d:3d:fe:1a:a2:df:63:64:67:f8:3d:7c:93:
54:43:7b:60:d4:35:06:6d:23:2f:2f:8a:94:13:a0:1b:86:5f:
e6:a5:71:87:8e:81:e3:4b:46:7e:de:3b:81:0d:8f:d3:e2:26:
04:bc:57:f6:52:9d:a3:52:89:54:c4:33:9f:68:ef:c2:87:e9:
13:a5:10:04:56:ba:72:72:de:19:2e:a7:f0:9a:b3:f3:ec:32:
cc:d1:f0:0a:5a:51:d6:2a:0c:75:62:29:7f:c7:8b:84:92:10:
65:df:2d:82:09:cf:19:e7:41:02:ac:15:64:94:34:ec:b3:ff:
01:60:be:00:c1:40:2c:57:7e:90:68:2c:7b:a9:9d:9c:62:96:
80:f9:3f:a7:be:dd:b6:04:f7:e9:11:d9:be:b6:55:de:69:af:
3f:68:9f:15:0a:08:bf:d3:d5:15:5b:e6:c8:28:ef:a1:ce:b6:
ed:95:2e:34:11:d5:8d:d6:04:c3:a2:cf:b4:70:6f:eb:f4:dc:
0e:1c:d5:d4:f3:56:b4:7e:2a:92:d5:40:04:48:87:9d:9d:80:
b5:1d:61:e5
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjAw
ODU0NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEFGQjMzOUQzNjM5MTE1
NENFNTBFMkIxN0Q5OUE2NTc0RjQ3OEQwQzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5AAvP0D54EoT01zjPKjAY6fUeedROlVwK7yyH3magqFsogNaO
bSLQ6SO4nx7JNFvswWnwMbrcYX34AkXVcKkFadNRTdmsXWxDZfFJjghesRwHeeC9
jvfE8LQNP0I329kIYhWQcLP/l0gKl/xd0iPaCn4k09nofhi/lxY3jmMkfcwm1Gkx
6NAl4fatzSQEs7jKksO40c2XdwezsDrym70JahCX3rzrZwRazskizVowVgN/FAfl
kN6gWxfTfflSU/OzDgf6G5LxQCMQBMusNOMFTqLe8ayJTQSgrbagiaiw2qjAH0iB
oaciCKFxw2mBluM4zkgIlHq0OBDEy/hheNB1AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUr7M502ORFUzlDisX2ZpldPR40MgwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3I3TTUwMk9SRlV6bERp
c1gyWnBsZFBSNDBNZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEgLyoFUaq2Zb0TQ1FV0zi1o
KnPS9Kazc2JQYrcJ5IuLMzGg9O0SMBzcjT3+GqLfY2Rn+D18k1RDe2DUNQZtIy8v
ipQToBuGX+alcYeOgeNLRn7eO4ENj9PiJgS8V/ZSnaNSiVTEM59o78KH6ROlEARW
unJy3hkup/Cas/PsMszR8ApaUdYqDHViKX/Hi4SSEGXfLYIJzxnnQQKsFWSUNOyz
/wFgvgDBQCxXfpBoLHupnZxiloD5P6e+3bYE9+kR2b62Vd5prz9onxUKCL/T1RVb
5sgo76HOtu2VLjQR1Y3WBMOiz7Rwb+v03A4c1dTzVrR+KpLVQARIh52dgLUdYeU=
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:03 2025 by rpki-client