Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/es2S1jmGQcTZrjhi_0pPVFk6WrI.roa
File: es2S1jmGQcTZrjhi_0pPVFk6WrI.roa (raw, json)
Hash identifier: Yjw4Op/Mv11/OKvLA6ZMFBQR1+6TwA7KhHAQt+tv7Sw=
Subject key identifier: 7A:CD:92:D6:39:86:41:C4:D9:AE:38:62:FF:4A:4F:54:59:3A:5A:B2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BA8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/es2S1jmGQcTZrjhi_0pPVFk6WrI.roa
Signing time: Mon 03 Feb 2025 15:26:20 +0000
ROA not before: Mon 03 Feb 2025 15:26:20 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2984 (0xba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 15:26:20 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7ACD92D6398641C4D9AE3862FF4A4F54593A5AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:24:72:bc:72:01:cf:15:4a:7c:2f:07:0f:
a1:d8:6c:3c:e9:c5:f7:2c:7e:8c:a0:c4:6b:63:5a:
10:3f:65:d0:96:c6:58:80:13:4d:5c:70:fd:79:01:
c6:60:5f:20:9d:28:2c:37:6d:e8:c1:ca:f8:9b:ef:
b1:9e:e0:42:a8:72:95:cc:e0:e6:19:41:6b:22:e9:
17:8f:5a:0f:01:cf:7e:c3:9e:89:0a:e7:be:3c:9f:
c1:34:ae:33:bd:60:c7:6b:64:f3:65:7a:c4:66:f4:
e2:01:04:0a:b9:bc:5e:42:63:3d:b8:24:74:f7:ca:
5e:ad:fc:bf:7b:8f:09:70:e1:71:37:57:8f:6f:c8:
48:f8:49:e5:37:3c:a9:e5:bf:d1:0e:b5:ed:0d:43:
53:18:fa:51:21:99:1b:3e:64:d7:e0:32:a7:0b:93:
2b:31:26:44:f9:f1:fe:a7:25:61:0f:1c:d0:75:d9:
17:38:e3:4b:14:e0:0d:17:ab:de:7e:76:7d:24:93:
9d:97:d2:f8:31:3b:a9:e0:6c:59:59:37:88:56:19:
6b:ef:40:5a:19:01:f7:6b:83:bd:24:72:9d:b8:9b:
36:7d:7a:e0:aa:2c:5f:98:76:a1:f8:d1:33:3d:da:
24:ae:d6:f2:f9:7d:e7:1d:01:87:38:89:c5:8b:5f:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CD:92:D6:39:86:41:C4:D9:AE:38:62:FF:4A:4F:54:59:3A:5A:B2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/es2S1jmGQcTZrjhi_0pPVFk6WrI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:75:44:15:2f:92:5e:cb:18:00:49:e5:3e:74:6e:86:20:ad:
fb:77:9d:45:2d:17:fe:55:16:fd:be:33:f4:23:2a:63:aa:91:
3c:02:86:8a:f3:01:8c:55:ba:ea:be:71:9b:6b:07:1d:59:eb:
93:14:cb:60:ae:53:d5:b7:7e:b0:19:ed:63:1e:d3:b2:aa:8a:
2f:05:ef:c5:fc:39:68:48:41:64:0a:46:84:ae:bb:d2:3b:15:
71:70:7c:5a:65:ef:46:ff:70:e8:a2:a8:e2:8e:3f:f9:d5:c2:
f2:62:66:dd:00:cf:c7:40:63:09:1e:b7:53:c9:3c:aa:70:fb:
35:43:62:69:8d:6b:25:f0:84:db:b8:cc:ce:bc:44:d0:10:2a:
a4:7c:5b:8e:00:0d:71:8f:dc:f6:17:88:7d:04:34:a9:1c:75:
99:83:ee:03:d9:4a:3c:20:bb:10:2b:09:59:2b:25:3b:6b:14:
31:54:95:dc:7e:c1:7f:97:2f:a1:f2:55:60:cb:1c:7b:ec:f1:
66:8b:1e:69:9c:24:7c:02:24:2f:a2:f5:d3:01:50:91:8f:04:
28:9d:6e:4c:95:62:28:43:0c:9c:87:94:f4:a0:49:3a:0c:11:
c8:d8:83:79:63:fd:a5:ef:20:2c:36:d0:33:55:46:96:71:94:
28:9f:1e:36
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:41:55 2025 by rpki-client