Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/_eaWpEDKLjg1geq6S5fcle1nxvk.roa
File: _eaWpEDKLjg1geq6S5fcle1nxvk.roa (raw, json)
Hash identifier: 65wfNU7t+QXzv5kDKI/A/soTOOPJ1vgfpbS9itbwSJ4=
Subject key identifier: FD:E6:96:A4:40:CA:2E:38:35:81:EA:BA:4B:97:DC:95:ED:67:C6:F9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C34
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_eaWpEDKLjg1geq6S5fcle1nxvk.roa
Signing time: Wed 05 Feb 2025 02:25:43 +0000
ROA not before: Wed 05 Feb 2025 02:25:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3124 (0xc34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 02:25:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=FDE696A440CA2E383581EABA4B97DC95ED67C6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:e2:57:aa:f3:e6:8e:9e:f2:38:33:24:fb:
d7:a7:39:37:35:97:8b:e0:28:cc:13:b7:a9:6c:ad:
4f:ba:28:24:7e:37:99:df:0c:3d:48:b0:c1:cf:fd:
2e:49:59:37:f1:57:8e:2a:84:1f:7c:71:d1:c9:88:
7d:54:05:ea:c6:ad:48:61:d5:3f:3c:9a:a6:36:b7:
1a:31:b2:ca:50:99:e9:cf:b4:19:32:b1:04:06:f1:
06:77:76:39:b4:f5:66:fd:df:fb:2e:a8:69:cc:54:
97:bb:49:05:4d:5f:09:49:59:1e:f9:2a:63:e6:75:
06:94:93:5d:67:23:f3:e4:34:cc:74:8c:ca:88:b2:
98:aa:2b:55:49:f5:bb:83:52:21:e8:cc:2c:05:66:
d7:3a:03:11:a2:c1:24:3f:21:53:35:a1:e8:9a:1f:
42:18:9f:c2:7f:a5:20:4a:2f:42:ae:9f:74:6f:d8:
be:bc:c0:a5:bc:8b:97:39:30:48:3d:10:61:f9:6c:
f9:76:1e:14:f5:af:f0:bd:b3:5f:fe:19:b2:c5:c9:
51:e1:f5:05:df:e5:de:05:57:a8:cb:30:71:b9:36:
7d:1c:0b:73:19:6f:15:ba:33:d5:70:12:71:b5:08:
66:0d:99:93:ab:2e:ba:15:79:2a:5f:d2:3b:31:e5:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:96:A4:40:CA:2E:38:35:81:EA:BA:4B:97:DC:95:ED:67:C6:F9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/_eaWpEDKLjg1geq6S5fcle1nxvk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
88:ad:08:e1:91:82:96:df:26:c8:7b:8c:5c:93:f3:59:98:b4:
2e:da:85:c2:28:02:f2:da:c8:cf:54:25:23:46:90:e5:f3:a3:
c7:5a:16:9f:95:f7:ce:aa:7b:99:a8:22:c9:8a:3a:fd:b3:97:
90:a2:d3:2c:6a:6d:02:de:95:0e:a4:fd:95:27:b3:f4:48:01:
6d:80:61:ea:c6:78:0e:3d:18:0e:ae:17:44:4f:d0:ba:0d:b3:
81:e9:a0:b6:cf:c0:32:90:23:03:e0:56:63:51:b8:f2:7e:39:
be:54:28:cb:7f:0e:76:c9:b0:34:7c:ac:6a:c1:43:e6:52:db:
ff:f1:f1:b6:4c:a3:aa:41:c1:25:12:7c:c5:cc:fe:8d:92:02:
43:03:4f:e1:9e:c7:91:96:07:58:ed:16:8e:73:63:ed:3a:11:
02:c3:21:0b:37:0d:06:cc:1d:f9:44:51:90:da:47:1d:8a:de:
00:79:95:7f:24:a2:0b:93:5c:40:b8:08:f2:60:60:c3:33:5a:
6a:b7:6e:a8:6b:b2:28:4c:4c:db:77:18:38:82:73:15:a8:d2:
f8:b3:b6:69:6a:52:7e:2b:c9:f6:1c:ab:f2:9a:aa:db:bb:2f:
e1:0f:be:07:d9:71:77:97:1e:0a:3c:48:db:30:1c:f7:5e:a3:
5a:65:66:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:09:29 2025 by rpki-client