Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/z6tGWd6B8y5E9Oop4R8-KJ4cfWo.roa
File: z6tGWd6B8y5E9Oop4R8-KJ4cfWo.roa (raw, json)
Hash identifier: 2C61+3k/JcjFNcRC3r6OFlpHe98Rh+O6n3GFgkPx5WQ=
Subject key identifier: CF:AB:46:59:DE:81:F3:2E:44:F4:EA:29:E1:1F:3E:28:9E:1C:7D:6A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0850
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z6tGWd6B8y5E9Oop4R8-KJ4cfWo.roa
Signing time: Sat 25 Jan 2025 17:25:10 +0000
ROA not before: Sat 25 Jan 2025 17:25:10 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2128 (0x850)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 17:25:10 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CFAB4659DE81F32E44F4EA29E11F3E289E1C7D6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:47:da:b3:82:43:9a:f9:84:b8:b1:99:da:4e:
59:ef:d7:36:ba:2d:c2:a8:11:73:d0:91:36:71:45:
dc:ff:e4:98:ff:cf:c3:ac:a7:0b:5c:eb:28:2f:22:
0a:ae:25:0d:6f:66:01:cb:ac:f7:63:3f:e3:b0:10:
f2:0c:3f:86:ac:e0:81:1a:52:f4:39:1b:58:74:83:
53:ba:27:e4:17:66:4c:82:be:5e:9f:1a:1d:76:c6:
f8:c1:51:61:72:54:52:98:68:9b:84:57:9d:c8:77:
9b:90:46:cc:9e:bc:b9:4e:34:58:53:04:e1:9f:65:
1f:e1:42:63:1b:90:28:d2:ca:85:c3:65:a7:04:f6:
0c:97:02:08:fe:dc:df:de:d3:68:77:39:2f:be:54:
3e:09:da:67:2c:30:6e:2e:30:a4:a8:4e:58:dc:3c:
33:a2:84:68:99:e7:96:41:60:dc:52:b3:dd:d4:67:
5b:4c:17:ee:05:45:71:29:41:15:eb:01:1a:67:25:
6f:08:e4:d8:cb:2a:e9:79:dc:7f:18:61:aa:6a:04:
3b:e9:84:e0:7a:19:e8:fc:a5:aa:fc:0b:3b:3c:df:
8f:22:0f:b4:1b:a6:9b:01:29:3f:78:ad:af:c9:12:
db:c8:7b:bb:5c:cc:c0:9b:8b:24:f1:a6:50:f2:88:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:46:59:DE:81:F3:2E:44:F4:EA:29:E1:1F:3E:28:9E:1C:7D:6A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/z6tGWd6B8y5E9Oop4R8-KJ4cfWo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
86:7c:da:59:7f:84:b4:47:d1:22:2d:a7:2a:3b:cd:62:6e:d7:
a4:bc:83:53:bb:bd:dd:cb:1c:a7:c5:32:ab:90:e7:69:14:0a:
41:18:ed:af:87:1a:b2:e6:76:7c:e5:17:e2:6b:a2:14:16:a7:
8a:7c:47:b9:89:07:d7:27:ff:b2:c7:ee:c7:52:5a:83:a6:f2:
7d:f1:5f:e5:99:52:28:6e:35:8a:c1:9f:76:c8:83:5e:f6:3b:
5a:00:8b:26:83:5e:04:bb:b6:f6:6d:56:4e:74:fe:28:03:68:
4c:9d:22:a8:40:19:4a:bb:28:37:23:c5:3a:ad:bb:88:8f:7d:
f4:67:9e:eb:1e:5d:40:06:51:00:70:60:2b:59:13:df:52:43:
fc:18:6d:46:d2:f3:c6:71:c5:ec:0e:22:cd:d1:83:b2:2e:69:
ad:71:7e:2a:75:a5:27:e8:2d:0b:73:eb:3a:d2:9f:f6:ba:ee:
dc:1d:6c:07:c2:3f:f1:4b:b4:12:4f:9b:a0:ae:16:45:a7:97:
d8:a6:1c:67:27:4c:d5:fc:76:b6:3e:13:59:83:53:c9:a2:41:
7b:8c:20:ca:be:68:e2:91:07:d1:3b:06:8c:2c:a9:2c:bf:6f:
0f:58:76:17:40:c5:fe:15:c2:11:76:45:1c:bc:9e:e2:09:56:
c5:f5:20:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 19:39:03 2025 by rpki-client