Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/sqggwiw37i9AMvA4SDn7CrTaZGk.roa
File: sqggwiw37i9AMvA4SDn7CrTaZGk.roa (raw, json)
Hash identifier: DuZNacqJJMjxmSI1OOKuvu7DqqlrkAakwtSCocxsDyQ=
Subject key identifier: B2:A8:20:C2:2C:37:EE:2F:40:32:F0:38:48:39:FB:0A:B4:DA:64:69
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0978
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sqggwiw37i9AMvA4SDn7CrTaZGk.roa
Signing time: Tue 28 Jan 2025 19:25:24 +0000
ROA not before: Tue 28 Jan 2025 19:25:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2424 (0x978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 19:25:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B2A820C22C37EE2F4032F0384839FB0AB4DA6469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:54:fe:e3:e6:45:04:e0:35:da:65:96:dd:99:
13:24:5f:19:69:d8:2f:1a:eb:03:cc:8a:ad:8a:6d:
7e:8e:5c:6a:6d:f2:22:08:98:c8:93:fc:ca:9b:40:
46:b5:9e:ca:34:be:56:20:80:97:58:75:0a:98:61:
2b:65:ef:27:96:19:71:af:03:dc:96:75:98:62:0f:
2c:2d:2b:7d:c1:f1:7c:a2:1a:39:e2:51:d4:84:9e:
da:a5:95:1b:f7:36:f4:5b:62:19:1a:00:28:ab:2b:
f3:b8:4b:43:17:80:05:28:1c:18:a1:39:ec:20:bc:
59:db:23:55:7c:76:0f:88:38:35:6a:a7:d6:9f:2c:
89:71:55:14:62:bf:f6:e9:a4:e1:e1:7d:e5:f6:f4:
13:b4:9e:4a:3e:5b:65:90:91:d3:88:ae:60:fb:a8:
d1:7c:51:89:0e:78:3e:ac:3b:9b:60:5e:ca:d3:0f:
2f:2e:bf:d0:35:f2:47:75:6a:f3:74:73:7f:3e:cb:
af:ee:eb:db:68:03:39:39:0d:eb:ed:38:47:23:fb:
6d:bf:a3:87:97:c4:69:eb:6b:69:50:63:ab:f8:76:
ee:70:9e:8c:35:79:ef:93:c1:0b:2a:c9:90:c1:7d:
7b:3d:4d:23:c8:4b:1d:b0:89:4d:e8:39:ef:8a:0e:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A8:20:C2:2C:37:EE:2F:40:32:F0:38:48:39:FB:0A:B4:DA:64:69
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sqggwiw37i9AMvA4SDn7CrTaZGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
94:ac:0a:63:6e:c1:5b:cd:b0:ef:1e:ba:63:3f:ce:94:86:ff:
70:06:9c:05:7c:3f:02:f4:24:3c:c5:27:6a:6a:70:f4:8b:22:
ed:fc:fd:70:9a:3c:e3:99:c7:76:3e:2d:b0:83:11:91:75:e6:
99:1b:85:47:e1:b4:db:81:de:e7:6a:eb:5c:26:61:8c:81:7a:
6c:d1:f7:de:08:01:50:bb:28:d4:01:0d:22:d1:58:ae:1a:d4:
6e:f0:00:19:5b:5f:07:73:ef:e3:5f:68:37:c1:f8:f5:09:75:
0a:d4:ae:d4:9e:d8:f3:3d:56:1b:c4:da:01:61:43:56:06:a2:
06:4e:80:2a:05:2d:1f:35:89:57:d6:6b:f0:9a:6d:95:e0:eb:
b7:21:3e:90:7b:2c:ae:32:36:f1:37:df:f4:5c:06:de:95:2b:
42:e5:e2:86:3e:c7:34:39:fe:f0:16:1e:f1:18:e4:da:39:60:
74:35:7c:83:ac:40:72:29:07:67:e9:4a:cb:ce:b2:26:b2:db:
d4:4a:47:85:eb:d6:c3:e4:c9:bf:ae:b9:8b:03:e3:0c:9c:10:
77:09:cc:5e:6d:c2:d0:6e:32:33:85:95:0a:45:2f:51:ea:e2:
b2:4d:46:92:2f:11:3c:b9:44:77:50:5e:ab:00:35:ef:c6:fa:
e2:dc:4b:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 21:23:44 2025 by rpki-client