Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/IRlPJZz66ciGKO621wSZ-DkzOX4.roa
File: IRlPJZz66ciGKO621wSZ-DkzOX4.roa (raw, json)
Hash identifier: pYOdwIdhj0BOfHOVS0LFrGFJSCLBG8zINnt9seUuAzg=
Subject key identifier: 21:19:4F:25:9C:FA:E9:C8:86:28:EE:B6:D7:04:99:F8:39:33:39:7E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D96
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IRlPJZz66ciGKO621wSZ-DkzOX4.roa
Signing time: Sat 08 Feb 2025 18:55:53 +0000
ROA not before: Sat 08 Feb 2025 18:55:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3478 (0xd96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 18:55:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=21194F259CFAE9C88628EEB6D70499F83933397E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:68:1d:13:bd:83:7c:c9:bd:60:6d:28:0b:35:
03:21:79:30:03:97:f8:40:ca:f6:5d:fa:e2:6e:8a:
eb:3f:a5:f0:a7:4f:74:fb:56:5b:01:1b:6a:f4:6b:
bb:2c:cd:17:4a:17:c1:75:7b:9e:28:d1:63:08:a3:
51:97:43:b5:4b:19:ae:e5:bc:c7:e6:fe:af:4f:1a:
c1:29:b4:f8:79:e1:85:c2:45:31:89:53:57:44:80:
b6:ce:21:0a:8a:1d:e3:c4:7a:f6:d4:50:25:3d:ec:
91:ed:66:42:75:3d:2b:34:ef:6d:80:55:a0:ee:66:
e2:64:c8:d2:4f:4f:2e:21:7d:18:47:ad:ad:22:1e:
7f:2f:e7:e1:8f:0e:cd:70:77:2c:c0:30:55:ea:16:
ec:0b:42:dc:3f:ba:dc:8a:06:c3:54:e0:3c:2b:fd:
9f:b9:e2:76:43:99:81:9f:bb:3c:05:dc:62:53:4f:
c8:d5:2a:bd:79:27:a9:0b:0e:e7:8d:e7:64:09:b2:
03:d1:a0:5a:c6:a8:98:60:a9:66:c1:d0:1a:12:a0:
ce:e6:9e:b4:d8:82:ea:61:22:84:7f:a8:c7:e0:60:
1e:af:65:16:b8:e0:28:41:05:0a:6b:67:f2:08:a0:
85:97:12:b9:98:56:6f:f4:28:7a:7f:aa:0d:0c:c6:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:19:4F:25:9C:FA:E9:C8:86:28:EE:B6:D7:04:99:F8:39:33:39:7E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IRlPJZz66ciGKO621wSZ-DkzOX4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
40:ec:5d:50:b9:9f:25:b3:b5:66:d4:bc:b8:ab:99:fb:d9:b9:
f7:cf:ab:52:c5:41:07:a7:df:93:53:89:16:d8:d2:04:60:da:
51:40:e0:03:28:a9:6d:b1:76:42:ec:81:55:82:e1:2e:15:f6:
53:18:a4:30:e2:e1:49:d1:c4:7e:65:8f:d9:33:e0:6b:80:da:
80:d7:cc:9d:da:d7:de:06:8a:52:e9:0d:30:45:3c:86:7b:99:
38:fb:d2:1e:73:4b:87:76:b2:66:b7:67:eb:9c:10:b9:0a:ad:
80:ec:f0:35:7e:6c:91:4a:67:38:92:90:47:c9:c4:18:5f:d2:
62:e9:64:9d:3f:60:0c:ff:ef:e0:9e:9f:71:c2:47:64:86:c9:
63:cb:aa:35:b8:26:09:38:58:87:49:a5:34:69:e5:a6:d7:4d:
57:76:4c:62:32:c5:cd:e3:61:0e:da:97:c2:de:eb:54:0f:ac:
87:f1:10:2f:60:b3:cf:8f:1e:78:d8:74:0f:24:e5:e3:fe:f2:
53:1c:4d:66:e7:8b:1d:02:09:11:9f:c6:5d:3f:34:f5:db:d7:
b9:25:ec:25:f4:60:fc:9f:93:ea:54:e1:61:15:f5:06:f4:76:
c6:1a:26:fe:aa:0b:21:b8:53:73:e0:b6:35:4d:6d:e7:21:87:
96:f2:0d:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:31:38 2025 by rpki-client