Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/5EzPiw0dJGtioIVItwJsJvwLfC8.roa
File: 5EzPiw0dJGtioIVItwJsJvwLfC8.roa (raw, json)
Hash identifier: 9S30bsYo3z4Xdu0itUmFkINBipE4wMmcyUWlMNUS1KE=
Subject key identifier: E4:4C:CF:8B:0D:1D:24:6B:62:A0:85:48:B7:02:6C:26:FC:0B:7C:2F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D9A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/5EzPiw0dJGtioIVItwJsJvwLfC8.roa
Signing time: Sat 08 Feb 2025 19:55:54 +0000
ROA not before: Sat 08 Feb 2025 19:55:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3482 (0xd9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 19:55:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E44CCF8B0D1D246B62A08548B7026C26FC0B7C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:8d:25:e2:c3:09:e5:bb:45:5c:95:93:d8:
50:45:0f:f7:6f:2a:ff:6b:de:69:92:05:63:f0:96:
88:58:77:75:fc:bc:20:ef:f7:15:66:2b:1c:21:c8:
75:7c:d6:d7:c6:b0:1d:63:d4:61:fc:65:23:51:c9:
d2:31:09:22:5d:fc:9c:fd:b7:24:3c:fe:81:d7:4c:
dd:67:41:c7:96:db:1d:2e:bd:3a:2f:92:a0:d5:f8:
3e:a0:e8:97:05:32:b9:2d:2d:a7:fe:e3:d7:e5:d6:
18:94:dc:e5:75:e1:c1:db:40:ee:7b:07:14:1d:7a:
c5:85:8a:19:59:44:16:bb:9a:11:9e:0d:96:02:5b:
29:36:61:51:a4:70:1d:40:2c:10:ac:0f:83:c0:89:
a9:29:61:0a:3a:59:6b:cf:4f:e1:16:f2:80:e8:0e:
6e:90:a1:0d:b4:7a:f4:ea:6c:6e:59:4f:70:11:56:
ea:94:13:23:8f:dd:58:3e:2c:8f:2a:12:57:89:1f:
28:a8:df:93:76:7d:20:ed:52:ea:bc:90:20:8d:96:
7a:ed:44:9b:d6:70:86:eb:0e:2d:fd:55:c6:84:4c:
9e:3d:87:e8:af:58:88:f2:86:84:81:39:f5:f1:a1:
e2:74:c1:5b:90:c7:b7:57:4d:2c:a8:67:e6:de:e4:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4C:CF:8B:0D:1D:24:6B:62:A0:85:48:B7:02:6C:26:FC:0B:7C:2F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/5EzPiw0dJGtioIVItwJsJvwLfC8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:ef:bb:75:65:5d:92:6d:8d:4a:b1:f0:c6:e8:75:77:af:3f:
80:e0:c0:b7:1a:c2:fe:7a:b6:f4:80:99:39:9f:0c:b3:0a:0a:
1a:fc:95:83:8b:f3:68:29:a5:d8:f8:e0:ef:f6:93:1a:4c:17:
30:ff:4d:1b:2f:5f:a9:72:43:09:88:e8:c6:b4:66:24:97:66:
6c:37:a7:be:aa:a6:00:c7:af:29:8a:93:1d:c1:b2:73:9a:42:
68:41:05:2c:dc:40:b4:6e:6e:73:a8:eb:f7:a1:ec:44:68:22:
52:79:1c:5c:95:84:88:ea:bd:a7:27:3d:b9:d4:78:79:9d:d3:
9e:2b:0b:0c:b2:8c:6b:cd:0e:fa:a0:db:31:9f:b8:b3:6e:62:
ab:65:e8:35:24:5b:40:8c:74:be:98:3b:4e:19:68:0e:58:3e:
e7:20:8b:00:bc:b8:f0:9d:28:76:f8:b6:30:11:80:1b:67:ff:
d4:c4:04:4e:0f:8a:6b:62:46:61:da:02:fd:b8:17:c7:0e:13:
9d:85:b3:5a:bd:8c:91:27:4f:6b:ac:dc:b5:f0:31:fd:cd:ca:
84:af:ce:9d:7a:9d:98:7e:c8:e6:6f:e4:8d:7f:8c:22:49:66:
b5:16:9c:e2:2c:71:32:1b:13:0b:e4:94:00:94:4f:43:3b:f2:
0c:20:f0:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:05:35 2025 by rpki-client