Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/NhIsOQIZtdHC52ntchcOjIrLO30.roa
File: NhIsOQIZtdHC52ntchcOjIrLO30.roa (raw, json)
Hash identifier: lqKuW64G1lKA8s3qvJWmy8mT6yd+DyK2nfDH0yzxRL4=
Subject key identifier: 36:12:2C:39:02:19:B5:D1:C2:E7:69:ED:72:17:0E:8C:8A:CB:3B:7D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 059A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NhIsOQIZtdHC52ntchcOjIrLO30.roa
Signing time: Sat 18 Jan 2025 11:54:45 +0000
ROA not before: Sat 18 Jan 2025 11:54:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 11:54:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=36122C390219B5D1C2E769ED72170E8C8ACB3B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6c:13:0d:73:a3:46:30:73:92:f3:86:5b:27:
4e:39:e9:1e:fe:3d:0f:f2:1f:76:6d:73:61:af:47:
53:b2:cb:50:70:f1:27:04:18:28:09:37:59:40:0d:
23:6c:f6:46:37:cb:18:fc:c2:44:72:07:77:07:dd:
dc:00:34:71:d2:ab:4b:b4:1a:22:a0:bb:95:d6:e2:
21:2e:c9:30:80:f5:97:87:f8:9c:1e:ad:c3:82:67:
f6:87:d7:99:6d:e6:e9:25:d3:0b:04:68:76:f0:4e:
46:a4:a3:8b:17:61:92:93:fb:ab:93:b8:0f:d6:9d:
e6:ba:69:68:37:e0:1d:5f:65:7b:a9:c9:62:2e:a5:
a3:0f:dd:bc:48:16:27:d8:07:6a:23:61:e4:c3:14:
ec:be:a3:03:70:e8:64:1a:68:55:c2:a0:5e:de:71:
df:10:7f:4f:00:c8:07:c0:39:77:48:0b:06:61:62:
d8:68:01:40:fe:a1:5e:7d:a7:e7:c3:57:4e:ae:22:
54:5c:58:ca:e9:64:3b:c4:50:60:53:04:28:74:c7:
62:65:4f:30:76:5f:4d:68:87:46:d2:1b:4e:f8:b1:
ac:6a:42:13:f8:38:3b:17:19:0d:a0:90:26:a2:20:
88:d3:ff:12:aa:c3:14:f3:e2:0f:eb:1a:70:58:45:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:12:2C:39:02:19:B5:D1:C2:E7:69:ED:72:17:0E:8C:8A:CB:3B:7D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/NhIsOQIZtdHC52ntchcOjIrLO30.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
19:94:42:14:c5:90:fb:1e:bb:83:c9:eb:aa:79:e6:e4:1b:da:
18:ce:b4:97:1e:b3:9f:9e:15:fc:9b:16:15:a4:3f:d9:65:d2:
88:a0:e3:30:31:c8:8e:ba:11:a0:1c:3c:a4:07:6e:d4:78:2b:
69:29:a9:e3:53:b7:29:71:dd:d3:4d:6e:66:e0:1c:fe:cd:c9:
ef:c3:5c:de:2a:ce:36:87:9b:01:27:b3:c1:3d:67:a7:ef:5c:
b4:01:af:c4:dd:7a:92:4b:db:54:bb:d3:e8:21:8c:a3:3c:9d:
40:49:71:ba:b9:9c:b9:1f:33:e4:f9:a0:d2:9f:ba:5c:2e:4a:
0a:49:9b:92:20:30:55:d9:b3:22:84:b0:d3:70:50:d9:da:7b:
be:fa:77:97:e2:c9:78:42:8e:0d:f4:d4:07:c2:88:ed:f2:3e:
67:0f:6c:32:b3:8a:77:86:7e:d8:25:25:97:1f:6d:3a:34:f9:
8f:0d:0b:13:a8:56:f5:c4:36:b6:b6:e0:d4:4e:c4:c5:f0:df:
4a:52:48:f4:6c:e8:30:78:1d:ad:d8:6b:94:f2:96:7d:5d:e0:
c8:96:52:49:af:2a:da:d5:de:c2:a2:0b:cb:6b:19:2f:6a:bc:
06:10:b8:86:4f:a3:fc:75:c5:ec:65:1c:c5:8e:a7:bf:4e:a7:
38:62:24:32
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:35 2025 by rpki-client