Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/cU_5Cc_-AY0V_agmtNzM8uNYsvY.roa
File: cU_5Cc_-AY0V_agmtNzM8uNYsvY.roa (raw, json)
Hash identifier: 8p8tcOakYa4hxUy2duYbVOwnppx3C6r4lGdoQL5eflQ=
Subject key identifier: 71:4F:F9:09:CF:FE:01:8D:15:FD:A8:26:B4:DC:CC:F2:E3:58:B2:F6
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 096E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cU_5Cc_-AY0V_agmtNzM8uNYsvY.roa
Signing time: Tue 28 Jan 2025 16:55:21 +0000
ROA not before: Tue 28 Jan 2025 16:55:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 28 16:55:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=714FF909CFFE018D15FDA826B4DCCCF2E358B2F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6d:92:c6:4c:e8:8d:a1:89:d9:ea:d3:7a:d3:
a4:62:2d:80:54:4f:03:90:70:3e:63:52:c8:bb:1e:
1e:18:6f:07:4a:01:ec:d6:f3:52:5b:6b:6a:58:b7:
e8:44:fe:d9:e3:ba:0c:8b:2c:43:64:1c:c5:7c:98:
a0:98:9e:fe:84:44:e0:bc:e8:6d:f5:40:c8:b0:b2:
ff:b4:63:46:52:e5:9d:5c:6c:92:39:35:2e:58:1f:
7c:76:96:ad:e1:31:32:28:34:de:a6:26:7b:79:0c:
61:2f:94:b4:e1:d7:3b:d7:01:95:70:15:3f:23:89:
2c:eb:36:18:7a:ab:cb:74:47:e5:a1:13:39:5e:c4:
b0:b5:81:5b:f2:94:27:53:e2:92:94:f9:11:74:a4:
89:3f:c7:00:82:31:32:6d:c6:66:35:92:fc:bb:28:
5e:76:52:d7:ea:ae:ef:56:c6:65:0f:e0:00:fe:32:
d1:ec:2c:aa:44:0d:7b:73:24:77:92:a2:ce:df:93:
b8:8b:40:0b:6c:66:26:c0:a4:d2:6e:c1:11:18:40:
e7:4f:88:1f:fb:99:66:87:ec:04:69:85:1a:a4:e5:
8e:15:62:d7:15:8d:83:fa:e0:5a:c9:27:ba:cd:49:
f6:42:04:79:26:99:8f:8c:f7:39:ec:bc:94:35:96:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:F9:09:CF:FE:01:8D:15:FD:A8:26:B4:DC:CC:F2:E3:58:B2:F6
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cU_5Cc_-AY0V_agmtNzM8uNYsvY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6c:fd:00:02:09:71:a7:20:7c:13:f2:42:a2:25:36:9b:d1:59:
99:6c:d8:3b:37:66:a6:75:d4:9c:40:e0:60:d4:9f:f8:f5:8b:
40:ac:61:0a:71:7f:33:89:95:f5:da:8c:a9:a1:08:68:7e:91:
cb:b6:de:79:29:ef:bb:ab:04:f6:6f:d6:f6:2f:48:3c:8a:c8:
f8:27:1b:4c:4a:ba:33:db:c8:c6:d9:b5:ed:17:e1:69:70:c5:
f2:0b:3c:5a:0a:9c:41:1c:4c:ce:da:a0:48:0a:43:f0:4f:23:
c4:80:01:59:b1:47:02:5d:cf:6a:a9:2f:01:ba:40:6c:04:2a:
25:c0:f2:4a:ca:8e:ee:1e:7b:4c:0e:be:c9:52:23:77:03:2e:
a1:aa:43:80:71:19:b0:98:c2:13:1b:dd:91:17:a9:2c:af:75:
04:25:54:f8:83:ae:9a:6a:ce:8c:3a:b6:e3:38:8e:80:11:d7:
2d:c1:fa:29:d0:8f:39:67:55:e2:d4:09:de:61:fd:1d:a1:6c:
f6:86:0c:14:a5:17:17:65:2e:5b:65:f5:ad:02:4c:d3:e2:eb:
b6:69:b3:01:ac:ae:ca:c7:bf:3a:b8:34:16:88:46:70:37:05:
e0:69:95:dd:23:a0:67:62:96:42:6f:9c:0d:82:30:5e:8a:49:
f4:87:1e:78
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:48 2025 by rpki-client