Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/uemidWvW724b8t6b0Zsm9fx6j3Y.roa
File: uemidWvW724b8t6b0Zsm9fx6j3Y.roa (raw, json)
Hash identifier: JM4fwdVy20AT0j+ErWqQexh60Yzv8KotykeLo4FXVyQ=
Subject key identifier: B9:E9:A2:75:6B:D6:EF:6E:1B:F2:DE:9B:D1:9B:26:F5:FC:7A:8F:76
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AAC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uemidWvW724b8t6b0Zsm9fx6j3Y.roa
Signing time: Sat 01 Feb 2025 00:25:31 +0000
ROA not before: Sat 01 Feb 2025 00:25:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2732 (0xaac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 00:25:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B9E9A2756BD6EF6E1BF2DE9BD19B26F5FC7A8F76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:1f:bc:25:99:43:4c:7e:c5:3a:34:9f:9e:
8c:58:4e:3b:c6:af:15:2a:dd:75:63:0a:6c:1a:77:
ff:57:b1:60:90:70:75:d9:8a:4d:64:38:ef:0b:c8:
e7:b1:23:e9:1a:2f:bf:8d:89:d6:4f:67:51:29:cd:
8c:23:de:84:10:e1:0e:92:60:52:19:c2:d7:33:73:
76:d0:e9:bd:ce:48:4e:3d:be:1b:cd:e1:36:b6:3b:
ec:0f:aa:cc:1e:ba:be:3e:61:7c:68:a0:83:d4:67:
ac:b8:c0:46:dc:60:4a:1d:87:6c:46:e9:cc:ce:78:
dd:76:9b:17:30:5b:74:b4:c7:65:8f:f9:9c:e3:6a:
7b:43:e3:fa:48:24:18:fa:34:fe:93:c1:e1:3a:9f:
43:84:7c:33:e8:39:e4:a8:f9:c4:df:05:c7:47:99:
f5:85:22:10:d3:6a:2e:71:80:aa:b0:3c:b1:bf:1b:
a3:66:17:8d:6e:90:c4:49:8e:04:a9:bc:b7:02:66:
c5:0f:23:64:6f:f6:32:eb:b5:e2:13:10:82:ef:c0:
10:e6:e1:67:19:92:de:b1:9f:f4:a0:eb:a7:c2:91:
43:ba:93:9a:2c:3c:ce:c5:d1:97:f2:d4:5d:f5:27:
57:36:03:f9:dc:f0:84:cd:13:cb:1f:d9:3d:de:f8:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E9:A2:75:6B:D6:EF:6E:1B:F2:DE:9B:D1:9B:26:F5:FC:7A:8F:76
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/uemidWvW724b8t6b0Zsm9fx6j3Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:78:bc:e2:3a:f4:c2:6c:99:76:ca:c1:59:13:93:6b:0a:5f:
90:7e:a0:9d:42:f0:16:33:1a:97:a4:20:d6:d5:e4:8d:b5:97:
05:8e:de:fb:0a:18:45:db:10:1e:9c:46:9e:67:41:e0:e0:69:
b0:2a:a5:b4:33:ca:b4:cd:c8:38:c6:1c:57:e9:f4:0c:50:2e:
5f:6a:cf:ab:84:34:01:4a:51:e7:74:ed:d5:90:03:91:6d:94:
5e:87:99:91:54:39:a4:d1:d2:51:0e:3c:0d:34:d9:d9:eb:28:
59:17:e1:94:f7:9e:7f:a8:f7:ac:e1:73:ec:6b:b9:6e:8e:67:
34:df:05:78:cd:5f:2d:53:e7:ab:ee:94:5c:7b:72:31:22:ea:
50:6a:16:e7:ad:e9:48:62:de:fe:b7:ed:05:f8:00:78:f0:6a:
2f:9e:1a:79:50:3f:e7:30:14:2a:1c:e0:67:88:7c:bb:a1:da:
28:2f:f6:d2:eb:5a:6b:78:01:9f:8c:a2:8e:8b:76:f4:71:4b:
71:87:29:d9:38:3b:b7:d6:48:2e:2b:64:a5:fe:2a:16:ee:a4:
e9:73:3f:48:28:62:5d:45:3b:47:be:6b:6e:30:97:68:01:86:
b4:e1:9c:bf:47:78:0f:cc:15:53:d9:c2:1b:ab:01:ee:13:7a:
0f:f8:70:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 23:18:58 2025 by rpki-client