Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/fioJpLoHvKEdFEC1B8f2uyBdZu8.roa
File: fioJpLoHvKEdFEC1B8f2uyBdZu8.roa (raw, json)
Hash identifier: nsj6rZH6qaEoFItgE2KQSCiznvLpasyoOMg926wlgQc=
Subject key identifier: 7E:2A:09:A4:BA:07:BC:A1:1D:14:40:B5:07:C7:F6:BB:20:5D:66:EF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0628
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fioJpLoHvKEdFEC1B8f2uyBdZu8.roa
Signing time: Sun 19 Jan 2025 23:24:50 +0000
ROA not before: Sun 19 Jan 2025 23:24:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1576 (0x628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 23:24:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7E2A09A4BA07BCA11D1440B507C7F6BB205D66EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:09:91:12:ef:95:fc:e0:62:8f:0d:3a:3e:
d5:17:57:fa:61:40:a9:28:75:6f:3a:ac:75:d5:0f:
b1:3c:ba:3d:88:ee:3d:b4:c8:97:c4:ec:88:1f:f4:
f3:a5:ca:03:dd:62:6c:b1:2e:3c:95:1e:e6:fb:56:
93:e4:5c:c8:28:19:47:f0:8b:eb:39:9b:5f:45:6a:
75:91:15:e6:d1:ca:51:25:7f:ca:eb:bd:20:32:1c:
89:77:c4:bb:81:11:bc:2d:a7:13:5b:7d:1c:54:46:
9a:9a:7a:81:66:30:aa:08:66:5f:06:1c:7d:88:ad:
f1:68:9d:a0:74:d6:0f:36:c7:7d:ec:6b:f3:9b:9b:
98:d6:ef:11:50:83:c2:e8:84:ab:6c:9a:a7:b7:07:
19:53:e5:b0:73:39:e5:18:f5:a6:64:4f:9e:97:dc:
4c:96:82:e1:01:c3:8a:19:cb:65:ba:de:07:3d:87:
83:7d:ca:4a:ec:24:9d:39:5f:20:89:04:34:38:c9:
a7:31:3a:81:42:a1:74:2f:10:28:5c:29:98:05:85:
d5:6c:27:e9:7a:c3:d3:41:e8:e1:d5:49:ec:dc:55:
7d:e4:43:fd:77:1a:42:8f:76:68:20:4d:ac:17:68:
6d:98:14:96:60:64:a9:d5:4e:3f:44:95:6f:8f:be:
77:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2A:09:A4:BA:07:BC:A1:1D:14:40:B5:07:C7:F6:BB:20:5D:66:EF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fioJpLoHvKEdFEC1B8f2uyBdZu8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:c0:b4:ba:c3:76:a6:49:c9:1d:ac:9a:37:3c:ee:5c:e7:31:
1d:0a:8f:db:06:22:0e:8e:53:87:43:80:68:c9:8e:91:e7:7b:
f5:ce:1d:b1:49:9d:7a:d3:97:3a:58:1e:53:db:94:61:c3:96:
4c:45:9c:2c:5c:c3:b3:72:93:d3:c4:6b:de:da:34:13:57:90:
95:d1:9c:38:d1:93:ae:fe:86:79:f9:a3:e0:ac:8e:9f:d8:cc:
38:b6:62:ca:2c:f1:4d:e4:75:c9:c8:56:13:1c:fe:42:a2:07:
87:ae:63:49:52:fa:97:05:cc:47:ce:dc:ff:1f:cd:03:99:ae:
f4:cd:7e:4e:c0:80:0c:a7:be:f2:21:b6:ea:53:d7:c4:8f:63:
75:c6:a1:df:a9:41:4e:82:21:c7:31:a3:d0:d5:65:3b:a9:3a:
39:c4:91:11:7d:39:32:59:73:8d:d2:10:c4:55:98:12:bc:09:
9e:eb:d1:4f:2d:06:66:8f:7d:c6:dd:71:16:58:4b:4c:75:0e:
1b:69:cb:d7:b8:3d:b0:38:13:5e:21:dd:f8:a3:41:c4:8f:7c:
4a:b8:7e:9f:f9:ab:fd:45:5c:f7:7a:2e:93:09:7e:8b:e8:d6:
f0:7d:ae:16:35:7a:c3:43:ae:50:0c:44:44:16:1a:a6:e1:58:
f5:7b:3f:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:36 2025 by rpki-client