Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ZNsua_kveRR-yrqMkJtrluJG7i4.roa
File: ZNsua_kveRR-yrqMkJtrluJG7i4.roa (raw, json)
Hash identifier: 48kqSP8fbv4smANlvC3zb9SJQ36+H+FG34m+1JCM7vg=
Subject key identifier: 64:DB:2E:6B:F9:2F:79:14:7E:CA:BA:8C:90:9B:6B:96:E2:46:EE:2E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BB0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ZNsua_kveRR-yrqMkJtrluJG7i4.roa
Signing time: Mon 03 Feb 2025 17:25:38 +0000
ROA not before: Mon 03 Feb 2025 17:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2992 (0xbb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 17:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=64DB2E6BF92F79147ECABA8C909B6B96E246EE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a1:50:56:7b:0a:83:d8:f2:4c:bb:c2:5a:a6:
8d:61:f6:70:0e:13:09:fb:06:cb:82:77:b1:a3:11:
a1:95:a0:b3:19:a2:65:00:02:52:e2:bd:47:49:32:
08:11:d0:f8:a6:b7:e9:3d:90:46:9d:f0:81:32:1e:
4e:46:9b:df:7b:ff:2d:54:a6:b0:db:76:07:54:5a:
cb:e0:b1:08:04:fe:68:c5:b3:bb:31:af:bc:6c:6d:
c2:9e:86:cd:a2:ee:e1:11:94:05:a4:37:75:b9:3f:
65:6c:2c:e5:b7:a4:3d:2a:26:72:d9:71:a8:0b:c0:
76:9b:ed:16:b7:05:61:66:1f:36:b5:8d:ca:e6:e0:
65:2a:69:25:b6:47:7e:92:9c:5e:c7:44:88:38:0d:
bb:60:d3:cd:36:b5:e1:73:13:b7:ee:18:d5:f6:2c:
f4:cb:c6:07:ee:bf:1b:84:9d:81:5a:25:90:d4:54:
48:e4:c2:9c:70:7c:d1:47:6f:8f:7d:8d:22:f9:ed:
8f:3b:df:fc:8b:ea:41:d2:98:ae:52:57:f1:13:e0:
fb:a9:85:3e:96:de:9c:22:e2:37:65:28:8f:21:eb:
2b:40:7e:30:6f:50:06:66:8d:49:04:b6:db:00:fd:
21:b3:9a:91:3c:d4:5d:f1:d3:93:72:4f:91:21:c6:
d2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:2E:6B:F9:2F:79:14:7E:CA:BA:8C:90:9B:6B:96:E2:46:EE:2E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ZNsua_kveRR-yrqMkJtrluJG7i4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
67:93:e2:24:0f:b9:ab:f1:3c:d5:8c:c9:fa:dc:22:b9:9a:43:
ec:f3:cd:2c:8b:6f:68:c5:5e:1f:52:13:71:11:a9:6d:3c:b7:
49:c5:be:64:f5:0a:45:c0:d0:4d:d1:d0:24:1e:9e:d5:74:a6:
a4:25:c1:ad:68:96:1b:2a:0c:9d:50:3e:cc:90:a1:ab:a2:ce:
5f:64:54:b2:c7:02:4c:ff:13:b3:30:0c:ed:ec:5f:11:c4:5d:
5d:e1:44:6e:34:87:2f:bf:82:9d:2c:61:df:96:9a:a1:12:3c:
c9:bb:54:84:6e:64:e7:64:c8:af:9d:fd:95:cd:a2:69:ce:46:
06:ac:69:56:f0:ba:6e:db:d7:71:ba:c3:b3:c2:f3:1e:07:cb:
ad:97:11:9a:0b:b8:ba:39:c4:51:b5:cf:0c:e2:2d:f8:4b:b6:
4b:56:6e:4e:a6:44:16:81:08:fa:c0:39:0d:58:e4:13:16:4b:
fe:c5:90:be:9e:ee:67:31:63:d1:af:18:f7:71:bc:cc:15:9f:
6e:8b:c0:d6:43:a4:cd:36:a5:82:95:57:ba:23:f5:23:83:86:
df:68:76:b3:4b:31:59:fb:c2:c2:57:1b:ac:19:27:d4:88:64:
2b:63:17:f7:4d:b0:84:5d:61:56:d3:8c:4d:6d:4b:b3:ab:6b:
71:61:52:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:25:34 2025 by rpki-client