Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/I1WPIurjWLAuy6fJJarfKnWfSxw.roa
File: I1WPIurjWLAuy6fJJarfKnWfSxw.roa (raw, json)
Hash identifier: zKwT+/PZyWEKjc6PCYFYLxgUkiCT6gGk+aTsy1d6oZU=
Subject key identifier: 23:55:8F:22:EA:E3:58:B0:2E:CB:A7:C9:25:AA:DF:2A:75:9F:4B:1C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0646
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I1WPIurjWLAuy6fJJarfKnWfSxw.roa
Signing time: Mon 20 Jan 2025 06:54:49 +0000
ROA not before: Mon 20 Jan 2025 06:54:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1606 (0x646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 06:54:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=23558F22EAE358B02ECBA7C925AADF2A759F4B1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:23:47:b1:75:d6:e2:27:52:bc:a0:78:82:
9a:f8:f5:f8:a8:20:67:87:67:a4:46:c6:4c:fa:c9:
84:94:d1:a9:0c:1a:22:70:26:d9:01:5f:97:89:6f:
9d:5f:71:94:74:1a:c2:1e:7b:a7:00:84:cf:4f:1f:
49:bf:b5:92:82:e7:b6:fb:6e:dc:5a:92:ec:ce:40:
c1:2a:0e:0d:b9:67:39:c0:2a:f4:4a:a1:e8:96:d9:
ca:68:06:2f:20:74:b3:e8:21:1f:3e:dc:e6:45:e6:
b4:25:5a:98:14:d8:94:d0:2c:c1:22:42:87:7d:25:
c9:9e:23:d0:df:88:cc:7a:b1:dc:f7:01:e5:61:6e:
fc:ef:83:85:3e:9e:68:58:10:2f:48:75:ca:77:91:
81:76:7c:3f:01:d4:6b:33:c0:08:d4:f9:f0:f3:8d:
22:49:aa:b8:12:45:8d:ae:e1:55:18:c8:c4:50:fc:
db:51:93:f8:03:76:a4:cf:e9:df:67:f2:e8:51:b0:
33:74:4c:eb:c2:66:dc:e1:3d:0e:85:7d:f9:b8:6d:
a5:49:ff:72:e7:d8:97:33:95:0d:b8:96:97:e2:05:
9e:9e:b0:66:8f:a9:c1:04:65:4f:42:0a:d6:f8:8e:
0b:04:71:ba:79:a5:33:64:97:06:17:db:7b:1c:e9:
e4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:55:8F:22:EA:E3:58:B0:2E:CB:A7:C9:25:AA:DF:2A:75:9F:4B:1C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I1WPIurjWLAuy6fJJarfKnWfSxw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:4b:f1:1f:11:bc:21:d6:75:cc:4c:78:0f:37:5d:bf:11:dc:
a7:66:8b:74:e5:b9:f7:6c:73:dd:96:10:d4:b1:53:c1:9e:4d:
cb:16:f2:08:4b:32:b9:62:d7:0c:16:cf:13:38:1e:e4:3f:e8:
e4:87:ce:5c:54:6e:bb:9e:50:22:75:94:5c:0a:34:22:9d:d3:
e2:5b:ea:58:5f:ed:f5:64:ac:fb:bf:06:d5:79:9d:c6:88:92:
e3:95:13:5f:5b:6b:87:18:c1:2e:53:b8:50:bc:f3:25:ee:98:
97:10:a3:eb:3e:a1:f8:61:6f:ae:cc:60:35:77:36:d3:c5:28:
82:a9:f2:29:0a:dc:6a:d7:f9:02:46:40:04:23:56:00:92:1e:
72:e1:48:33:77:01:46:c0:18:f2:19:64:dc:c0:52:d5:b2:c4:
d4:ee:52:82:66:6e:d6:9a:eb:9b:40:d7:20:9e:ea:3b:91:35:
0b:e9:93:1a:5b:35:35:ed:64:13:d1:8a:a8:8b:f0:0c:a5:1e:
37:b7:9b:a9:5b:0b:4c:eb:00:da:2a:88:c7:18:4f:f0:06:dc:
ac:df:fb:ba:3e:43:22:58:cc:25:d1:ab:2e:4f:e6:86:dc:50:
e3:72:d1:5a:dd:6a:b7:e2:ca:44:ec:76:f9:cc:68:51:c3:31:
93:d4:5a:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:13:08 2025 by rpki-client