Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/aUDJOxdKG7BHyAW265-l71d7YLw.roa
File: aUDJOxdKG7BHyAW265-l71d7YLw.roa (raw, json)
Hash identifier: 0AoJPZiM08Wmzr/HUxxOoMNY+L6oRqZUUccQCW3tbh8=
Subject key identifier: 69:40:C9:3B:17:4A:1B:B0:47:C8:05:B6:EB:9F:A5:EF:57:7B:60:BC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B3C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aUDJOxdKG7BHyAW265-l71d7YLw.roa
Signing time: Sun 02 Feb 2025 12:25:35 +0000
ROA not before: Sun 02 Feb 2025 12:25:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2876 (0xb3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 12:25:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6940C93B174A1BB047C805B6EB9FA5EF577B60BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7c:75:51:aa:fd:6b:4a:19:d3:82:7c:33:d0:
e6:da:d7:48:16:21:92:31:24:0c:a8:1c:19:a0:96:
ae:bd:ab:51:ee:74:3a:0b:0d:27:13:2a:0a:ca:b4:
3a:3d:b1:47:a7:2f:68:7d:66:a5:e7:f1:ff:5c:31:
67:38:0c:e7:b8:9a:5b:55:be:c9:87:8c:46:b6:3e:
cb:0e:b8:3d:f7:50:58:5c:e9:22:7d:7a:af:a3:d9:
e4:8e:a2:d1:28:95:7f:94:37:8a:54:fa:95:57:9d:
9e:ae:54:a2:22:d0:e2:6f:d4:96:cc:32:40:00:22:
f7:d7:7e:74:9c:ad:8f:34:8e:a5:c5:65:34:fc:3d:
22:84:66:a7:b6:11:1c:0e:c2:71:c0:1c:21:cf:86:
22:84:d8:10:bb:63:50:49:bb:c1:e5:5f:3e:85:89:
3e:36:97:ce:a0:5e:56:f5:8a:58:fb:4b:97:94:9c:
4e:fc:c8:ba:ab:63:c8:d9:9b:3d:dc:3b:bb:6c:b4:
7e:d9:d9:d0:05:f1:0a:1a:b7:62:97:05:73:f8:05:
ce:5d:c8:c6:c7:c4:4d:38:b5:db:f2:4a:ad:b9:8f:
ad:16:f1:bf:cd:8e:b6:aa:4f:f4:f1:b7:2a:b5:b3:
3c:23:e4:6b:b3:56:f3:e6:b8:95:44:47:27:49:82:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:40:C9:3B:17:4A:1B:B0:47:C8:05:B6:EB:9F:A5:EF:57:7B:60:BC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/aUDJOxdKG7BHyAW265-l71d7YLw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
45:e2:f8:fb:e4:99:2a:6c:ac:6b:2e:6a:f9:2f:0d:58:65:34:
5e:66:fe:34:ce:65:e0:f2:e3:29:a8:6c:ef:c7:2b:01:48:f0:
49:0d:da:39:92:bc:4f:54:f0:28:b6:ad:f1:3b:37:f0:df:fc:
79:a2:c4:7e:2b:43:89:b8:bc:fc:59:7d:f2:df:d0:18:4e:ba:
d2:cf:08:c5:ed:14:3a:61:46:e3:66:c3:db:62:97:4f:3a:16:
f3:6e:be:d3:f6:0d:7b:12:8c:eb:14:91:9c:e4:d4:8c:42:ad:
fe:cc:3f:ab:57:5c:a8:93:2f:72:af:65:2b:9a:1e:3e:78:b4:
d1:12:32:7d:a7:a1:cb:76:e8:68:a4:2e:6c:a4:61:cd:0c:8c:
27:d3:10:d0:23:4a:98:f0:2b:c4:a4:23:7f:c2:22:34:1f:82:
fb:d3:40:b2:00:35:6b:9d:0b:e7:91:cf:85:2f:f0:53:a4:28:
d2:46:fd:14:7e:f1:84:c4:3e:33:e2:b1:d5:5f:b3:87:c7:86:
73:7c:41:b7:73:c3:a2:6e:d6:b4:4d:72:46:76:d6:b0:6a:d5:
71:5d:df:8a:a3:f0:c7:8e:69:92:c2:e5:22:7b:a2:2e:0c:7b:
38:1b:0c:32:29:10:ae:28:c3:95:a7:fc:e6:90:56:7f:5a:f4:
61:05:5b:90
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCzwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDIx
MjI1MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDY5NDBDOTNCMTc0QTFC
QjA0N0M4MDVCNkVCOUZBNUVGNTc3QjYwQkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCYfHVRqv1rShnTgnwz0Oba10gWIZIxJAyoHBmglq69q1HudDoL
DScTKgrKtDo9sUenL2h9ZqXn8f9cMWc4DOe4mltVvsmHjEa2PssOuD33UFhc6SJ9
eq+j2eSOotEolX+UN4pU+pVXnZ6uVKIi0OJv1JbMMkAAIvfXfnScrY80jqXFZTT8
PSKEZqe2ERwOwnHAHCHPhiKE2BC7Y1BJu8HlXz6FiT42l86gXlb1ilj7S5eUnE78
yLqrY8jZmz3cO7tstH7Z2dAF8Qoat2KXBXP4Bc5dyMbHxE04tdvySq25j60W8b/N
jraqT/Txtyq1szwj5GuzVvPmuJVERydJggoPAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUaUDJOxdKG7BHyAW265+l71d7YLwwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2FVREpPeGRLRzdCSHlB
VzI2NS1sNzFkN1lMdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEXi+PvkmSpsrGsuavkvDVhl
NF5m/jTOZeDy4ymobO/HKwFI8EkN2jmSvE9U8Ci2rfE7N/Df/HmixH4rQ4m4vPxZ
ffLf0BhOutLPCMXtFDphRuNmw9til086FvNuvtP2DXsSjOsUkZzk1IxCrf7MP6tX
XKiTL3KvZSuaHj54tNESMn2noct26GikLmykYc0MjCfTENAjSpjwK8SkI3/CIjQf
gvvTQLIANWudC+eRz4Uv8FOkKNJG/RR+8YTEPjPisdVfs4fHhnN8Qbdzw6Ju1rRN
ckZ21rBq1XFd34qj8MeOaZLC5SJ7oi4MezgbDDIpEK4ow5Wn/OaQVn9a9GEFW5A=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:45 2025 by rpki-client