Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Zbvq1s4Y8vHAe5aMqGn-d4C2QJQ.roa
File: Zbvq1s4Y8vHAe5aMqGn-d4C2QJQ.roa (raw, json)
Hash identifier: 2cQCY20nmGOnMm1FyB+ZI5NmwKvtNUSTQ6k1VX+CYSM=
Subject key identifier: 65:BB:EA:D6:CE:18:F2:F1:C0:7B:96:8C:A8:69:FE:77:80:B6:40:94
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 07D2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Zbvq1s4Y8vHAe5aMqGn-d4C2QJQ.roa
Signing time: Fri 24 Jan 2025 09:56:28 +0000
ROA not before: Fri 24 Jan 2025 09:56:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2002 (0x7d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 09:56:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=65BBEAD6CE18F2F1C07B968CA869FE7780B64094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:56:2b:60:e9:06:1d:46:7b:d0:e4:f2:c1:
32:e3:c4:c1:e5:17:9f:3b:93:02:f6:be:88:71:c3:
fd:6d:fe:de:2e:49:33:91:2b:f9:62:7c:31:73:15:
88:68:66:c8:c9:ec:51:88:66:67:88:55:0f:9e:20:
1d:2e:b3:fc:4f:d4:43:42:89:a6:9a:b9:52:ff:a1:
95:5b:68:28:a0:2d:9e:d1:48:cd:1c:62:39:72:11:
a6:cb:63:8d:d7:22:a1:c3:dd:3d:f8:52:1c:a3:8a:
6b:5b:c4:ea:7b:4c:d0:c6:b8:4d:1a:1c:8e:42:9f:
3a:5b:2d:65:08:ed:e1:41:c2:60:68:b9:96:c5:78:
44:c8:53:9c:dd:c0:a2:f4:03:7e:36:9c:0c:12:35:
27:71:5d:86:b8:de:59:55:7a:d2:f5:09:10:73:bd:
84:38:44:70:ae:2e:44:77:cb:62:57:f5:23:5f:60:
61:a6:7c:38:92:0f:7e:2b:09:83:d7:62:d9:2e:4f:
f4:3a:50:37:f0:0f:a8:7c:8c:86:b3:39:49:e2:a3:
95:ba:0e:ca:c1:c2:47:c4:d1:0b:67:81:9d:a1:4d:
f1:f0:42:aa:48:17:59:5c:73:e9:a2:95:48:fb:ca:
76:cb:df:24:1d:9d:ea:25:53:79:65:5d:2b:48:ea:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:EA:D6:CE:18:F2:F1:C0:7B:96:8C:A8:69:FE:77:80:B6:40:94
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Zbvq1s4Y8vHAe5aMqGn-d4C2QJQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:35:69:55:73:05:95:ca:ac:98:a7:7b:0f:58:33:4b:cc:ce:
d9:ab:d9:5c:45:ab:d0:71:bb:9d:7f:a1:de:56:3b:05:32:95:
24:c4:c2:3d:b4:61:66:45:85:b7:89:88:45:97:29:85:56:e6:
7b:b8:4b:38:53:56:0c:5e:e4:db:fb:5f:d8:4b:46:3e:1a:a2:
bb:4d:06:31:89:44:03:30:58:a3:9d:33:23:8a:d2:65:7a:2c:
39:37:8b:40:67:9e:59:20:c5:b1:4f:9a:ed:a2:5f:54:3b:48:
e0:0c:a8:1a:0f:4f:c4:3b:59:26:10:a6:d0:9b:50:ac:52:50:
d6:3b:54:13:4f:2f:99:7f:ad:2f:59:ae:63:05:08:d9:87:62:
03:59:5f:40:b7:33:d1:b8:58:18:d6:64:9f:ec:cf:c1:5d:84:
28:8b:f1:07:4d:4a:7c:1a:5e:85:d0:aa:35:b2:26:d7:93:85:
28:fd:23:f6:81:e3:3a:33:6b:60:df:f4:7b:76:5c:9d:fc:ec:
ab:99:6d:a4:a6:03:39:f2:3f:c7:b1:59:0e:e1:d4:2c:44:3a:
d6:df:30:ae:2b:f7:c8:0e:08:d3:d2:74:50:fe:72:14:f1:cc:
92:95:e6:35:28:4a:2d:bb:86:c2:8f:8e:d4:d1:89:64:ad:07:
f6:f2:be:7c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:05 2025 by rpki-client