Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/4dyzM6rIA9P8fAiQy80EVbPAm9Y.roa
File: 4dyzM6rIA9P8fAiQy80EVbPAm9Y.roa (raw, json)
Hash identifier: YnszsA9IvtR2cesFg/jR8TvJi9f/EK3N7UI8odansm0=
Subject key identifier: E1:DC:B3:33:AA:C8:03:D3:FC:7C:08:90:CB:CD:04:55:B3:C0:9B:D6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05E0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4dyzM6rIA9P8fAiQy80EVbPAm9Y.roa
Signing time: Sun 19 Jan 2025 05:24:47 +0000
ROA not before: Sun 19 Jan 2025 05:24:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1504 (0x5e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 05:24:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E1DCB333AAC803D3FC7C0890CBCD0455B3C09BD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:ac:be:af:ea:cb:e2:31:1d:2d:49:41:61:
6b:fd:b9:ae:49:b3:bb:a1:c8:a5:c2:ed:11:51:15:
bb:10:f6:47:33:7e:2c:f4:27:41:8e:c5:24:24:16:
ed:2a:0c:1e:33:47:33:09:43:f5:a7:1e:94:bd:06:
6c:ca:85:90:aa:08:41:95:c0:9f:6b:5c:ac:d3:60:
4c:90:bd:71:60:cc:7a:29:74:6f:cf:23:a4:f7:ff:
ee:67:ad:67:ac:87:32:75:86:03:17:30:bd:7a:20:
fe:4a:cc:b1:ea:b3:7f:5d:ef:e3:da:94:04:46:ee:
27:2d:98:e5:a0:95:e2:51:bb:49:70:7d:13:4a:fb:
da:3e:cf:40:1d:81:64:0d:89:af:81:47:0e:d0:e5:
4f:d8:39:8f:46:53:75:00:26:7b:7c:fc:a6:8c:f9:
64:98:01:3b:5c:e1:51:6c:0d:27:7f:f0:bc:c6:95:
c2:39:7e:50:16:90:3e:31:12:e3:5e:6c:3d:0e:dc:
3b:a9:44:d8:3d:11:83:15:4e:20:45:74:3d:0a:67:
b3:8a:a1:8a:7d:e0:e1:c8:82:24:bc:9d:94:56:cf:
d5:b1:45:58:61:6c:45:e0:dc:d8:36:10:3e:e0:a4:
42:b6:32:8d:b2:79:ba:bd:33:28:04:5b:37:84:93:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:B3:33:AA:C8:03:D3:FC:7C:08:90:CB:CD:04:55:B3:C0:9B:D6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4dyzM6rIA9P8fAiQy80EVbPAm9Y.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
24:24:f2:ea:15:78:c1:c0:48:d2:29:c6:03:98:4b:af:62:e1:
81:42:c5:fb:f1:19:df:2f:96:9e:98:52:18:3f:75:ec:b2:a7:
4c:8b:7b:83:68:e7:e2:9d:3a:71:63:1c:ec:5b:d0:3c:ef:70:
dd:75:c7:19:78:76:1e:b9:6c:70:b4:58:ef:54:b7:d4:a9:32:
ea:c8:06:c2:a8:4a:aa:96:e9:08:79:b2:79:b8:bf:7b:2b:87:
23:66:86:26:d3:6b:66:a2:50:e1:d1:10:71:2d:51:ab:25:0d:
50:9a:c9:95:8c:5d:e4:57:9a:44:ed:20:db:b3:73:bd:84:39:
1e:15:12:46:e7:52:11:e9:f2:9f:92:92:0c:31:52:13:1d:27:
e6:1b:d8:c8:93:0b:8e:de:31:c6:df:6c:7f:ea:16:24:42:af:
be:0c:f7:37:d2:fd:e5:84:f2:d5:8a:30:8e:22:44:cf:0a:d2:
ad:8c:13:f4:fd:7e:1f:24:2b:90:6b:64:d5:35:2e:e3:da:22:
0b:81:9c:5b:cf:68:47:92:5d:03:c4:5a:b9:10:20:b4:5d:8f:
57:9e:89:0d:e4:6d:a4:b3:35:73:92:35:02:4e:9c:7d:23:7e:
35:99:eb:89:f3:62:a5:da:6a:7d:94:6b:82:0b:e0:4e:61:f2:
92:86:05:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 22 01:03:15 2025 by rpki-client