Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/B_szDtKLIErzHJQM_e4hsX5Rix8.roa
File: B_szDtKLIErzHJQM_e4hsX5Rix8.roa (raw, json)
Hash identifier: FK6NJ4pl09KaC82ZJ4uIQL1/1ZyrlVXzNVE7nN+4hZg=
Subject key identifier: 07:FB:33:0E:D2:8B:20:4A:F3:1C:94:0C:FD:EE:21:B1:7E:51:8B:1F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BA4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_szDtKLIErzHJQM_e4hsX5Rix8.roa
Signing time: Mon 03 Feb 2025 14:25:38 +0000
ROA not before: Mon 03 Feb 2025 14:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2980 (0xba4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 14:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=07FB330ED28B204AF31C940CFDEE21B17E518B1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:5b:a8:29:45:0d:5f:a0:81:a8:58:f7:57:d5:
c4:22:5c:ae:70:09:4d:46:8e:89:70:be:85:14:ac:
e4:98:97:0e:ab:d9:f9:53:3c:6f:50:99:53:5e:3b:
49:f7:d2:80:c7:c3:fd:8e:bc:d2:cf:54:45:6c:08:
01:87:c3:5b:0d:7b:0f:7f:ae:07:db:fc:07:6a:03:
c9:80:97:5a:1f:26:56:63:aa:a5:38:dd:36:6f:43:
ae:b6:6b:9d:8d:37:11:ee:07:db:59:70:8e:61:b5:
53:ee:07:44:f7:86:91:d2:53:6f:a8:4b:ed:23:c2:
9a:26:9c:85:70:f4:b9:df:c1:85:1a:03:92:a3:d0:
58:6c:50:10:29:7b:08:79:2f:ca:76:c8:01:fe:16:
d0:36:ea:f5:71:eb:78:cc:41:83:6a:f6:f8:0f:66:
43:fe:1e:f7:ff:6d:f3:ac:4c:41:68:26:bb:9c:12:
8e:c3:f9:82:29:a8:ad:43:ee:71:98:a6:66:e4:ad:
0f:c8:13:12:19:72:68:78:a5:a1:b8:63:ae:f2:eb:
04:b2:6b:f7:66:bc:0f:8b:c7:88:e3:8a:11:fc:f8:
91:5f:c0:8e:90:3e:c5:fc:71:cc:b3:e9:1b:20:49:
47:3d:2a:58:4f:90:7e:f7:0e:40:96:dd:66:b6:15:
d0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FB:33:0E:D2:8B:20:4A:F3:1C:94:0C:FD:EE:21:B1:7E:51:8B:1F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/B_szDtKLIErzHJQM_e4hsX5Rix8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:2b:aa:5b:c1:1e:40:ea:6e:ff:05:d6:17:c1:d3:6d:39:91:
11:42:71:45:30:35:e7:4c:62:42:5a:e6:eb:20:5b:7d:12:91:
a7:de:5b:79:43:cc:89:88:1e:bb:47:ed:8e:ce:ba:2c:f3:15:
37:1d:9b:d0:ba:cf:8d:a5:bf:f9:bb:84:b1:38:82:3b:20:a6:
09:0f:c2:e2:c1:34:d2:c7:75:5b:f7:04:78:b2:73:cc:fa:d8:
49:f6:61:8a:1e:9a:5b:30:00:49:e5:c9:1e:bc:2b:fa:68:27:
a2:b8:b6:62:41:1f:bc:9e:3d:8b:41:7b:f0:1b:69:2f:21:b6:
ff:8a:69:0f:2f:b2:1c:7b:b3:a0:32:df:11:bf:74:6c:53:07:
f7:78:68:ce:9f:09:92:4a:15:a7:4a:5e:23:7c:2a:93:64:04:
d3:b2:b1:25:28:5a:9e:20:bb:06:1f:6a:3b:31:a8:52:77:ee:
39:0f:44:00:c1:9e:e8:8e:46:dd:09:34:78:ac:f3:58:bc:b2:
5f:6d:09:f5:37:5e:3f:e5:00:4f:01:54:c8:07:32:ed:28:ec:
69:1d:f2:49:f9:c3:c8:f8:6e:5f:0c:f6:ea:d7:cb:72:41:db:
ba:07:9a:6e:e9:37:78:c7:20:13:7c:6f:99:df:6f:0f:ba:41:
a4:22:12:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 15 10:17:30 2025 by rpki-client