Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/vrROMrqJtOLkdQAZ1C3aCF3cd7o.roa
File: vrROMrqJtOLkdQAZ1C3aCF3cd7o.roa (raw, json)
Hash identifier: aCp/RWrBLYh5VD5cSG4rgLe6M1J/dXxj8KxCFurYM50=
Subject key identifier: BE:B4:4E:32:BA:89:B4:E2:E4:75:00:19:D4:2D:DA:08:5D:DC:77:BA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0590
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vrROMrqJtOLkdQAZ1C3aCF3cd7o.roa
Signing time: Sat 18 Jan 2025 09:24:46 +0000
ROA not before: Sat 18 Jan 2025 09:24:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1424 (0x590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 09:24:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BEB44E32BA89B4E2E4750019D42DDA085DDC77BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b9:34:95:2a:18:43:a2:cf:87:38:c3:9f:bc:
09:1a:2b:9b:ab:66:7f:8b:a7:ff:3f:9b:70:06:fb:
77:7e:b6:91:cd:48:e1:4f:0b:57:96:c5:30:75:05:
1f:5b:8f:e8:01:59:93:f9:ee:62:bf:0b:44:7e:a8:
a4:9f:3b:38:6c:ce:b1:44:60:80:a9:bf:58:61:83:
2b:20:4c:1a:73:3d:9c:a0:54:1a:77:2f:bd:2f:24:
68:2e:6a:31:59:00:f6:4f:74:50:a7:da:cc:eb:27:
dc:8b:1e:fd:66:51:1c:03:fb:fe:03:06:06:a9:d0:
15:e6:e6:f0:9c:38:c1:e8:0f:78:e1:b0:7b:9c:5e:
ec:1c:59:a4:ff:92:54:67:4a:05:00:1c:00:cd:82:
76:1a:c1:c0:c6:dc:4f:52:f5:47:40:b0:2d:8b:81:
da:58:73:7b:a1:4e:91:92:80:13:e0:0c:4d:cc:c1:
45:db:78:28:7b:8d:7d:38:c5:c7:40:e2:48:84:09:
f0:7a:d5:9a:17:a4:af:6b:04:a5:47:58:88:59:b8:
4a:40:eb:d6:9a:cc:fa:96:f5:a5:29:92:89:9c:e2:
6f:04:bf:46:92:14:03:7e:f4:ab:50:40:e6:7c:a6:
f5:17:be:8e:f5:f6:a2:4f:ac:94:96:1d:b4:cb:cc:
44:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B4:4E:32:BA:89:B4:E2:E4:75:00:19:D4:2D:DA:08:5D:DC:77:BA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vrROMrqJtOLkdQAZ1C3aCF3cd7o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:a7:5f:53:0c:d3:b8:2f:8f:5f:0b:2e:1d:80:1b:05:ef:63:
dd:01:ff:df:17:83:e7:1b:db:40:8e:2c:b1:10:5c:8a:00:0b:
b5:8d:29:f7:86:f4:20:6f:5f:7b:b0:49:3d:b3:45:11:11:d8:
cc:2d:1a:10:fe:07:d3:a9:6d:eb:58:00:db:cd:a0:e6:16:4e:
7c:bf:52:30:9b:b7:e7:f0:2f:d3:82:4c:b8:d6:c7:67:90:90:
24:c0:9f:1b:30:ce:de:ec:e5:64:ec:56:b4:19:50:ae:7d:c1:
95:5d:b9:ed:16:4a:c7:85:7e:1e:0a:c3:10:d7:9c:d5:37:0d:
90:43:62:2c:f5:2e:8e:69:ed:df:45:a2:f1:20:25:03:f1:ef:
ce:fe:af:aa:30:46:93:03:89:cd:22:b3:fd:d6:bf:9e:61:04:
ad:48:ca:77:49:8c:6a:e0:aa:57:02:e3:98:fa:6b:b0:2c:72:
15:36:63:95:22:46:16:13:f5:9e:a5:24:4d:1e:a6:a8:a9:bb:
c0:1a:0d:eb:4c:74:4c:5d:3a:26:b1:1c:aa:18:c3:1f:5b:7f:
7d:33:a4:7d:4b:ab:0b:7f:3b:27:86:fa:6b:0e:ea:49:76:5c:
ba:f5:30:f7:65:34:ba:7a:22:ee:b6:5b:d8:0c:90:62:69:19:
f6:7c:1b:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 02:01:37 2025 by rpki-client