Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/n8Cs42VC0r8JptQEhkEfHAYvnVY.roa
File: n8Cs42VC0r8JptQEhkEfHAYvnVY.roa (raw, json)
Hash identifier: axSifY8DsNkDMBMH6pwEIPQ3I353G2SOIh77fNGRYns=
Subject key identifier: 9F:C0:AC:E3:65:42:D2:BF:09:A6:D4:04:86:41:1F:1C:06:2F:9D:56
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0752
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/n8Cs42VC0r8JptQEhkEfHAYvnVY.roa
Signing time: Thu 23 Jan 2025 01:55:03 +0000
ROA not before: Thu 23 Jan 2025 01:55:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1874 (0x752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 01:55:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=9FC0ACE36542D2BF09A6D40486411F1C062F9D56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:5d:fc:2d:6d:4b:8e:13:e0:4c:7e:8e:79:
d9:51:88:c9:bc:64:bc:62:de:9e:25:8f:1e:1d:22:
99:c2:44:dc:d9:ba:d8:10:5f:49:d8:d5:b5:ba:95:
7d:11:bd:1c:99:a9:c0:80:4c:45:69:51:51:4b:97:
47:a3:27:65:3c:83:b3:13:aa:bd:b0:d4:d6:68:54:
d2:a7:61:93:09:a2:90:52:7b:cd:36:67:11:38:0e:
a2:77:66:26:5d:96:97:60:5d:a1:80:e4:e4:0d:97:
76:05:36:c6:0d:e5:4b:0c:9e:1a:f3:e5:05:aa:d2:
eb:a0:17:3b:12:fd:9a:b3:47:dd:b0:23:85:48:4e:
76:40:8b:6e:e8:7c:ff:c8:84:a7:58:87:12:79:4c:
e3:68:74:68:78:14:ae:54:8c:35:cd:12:51:de:a4:
4e:cb:e5:54:42:b4:2a:4a:87:7f:86:14:e5:4d:ea:
41:4f:8f:2b:09:d9:e9:19:9b:88:7e:41:d3:0b:35:
b0:e0:6f:0c:84:d5:77:16:ce:71:c6:b7:19:4b:5e:
9e:3e:18:51:85:05:2a:d6:f1:2e:b5:1e:9e:6a:95:
5e:28:87:a7:53:27:35:c1:e3:05:71:7b:de:6c:77:
ff:ca:dd:d0:dc:f9:94:6d:d1:a4:47:21:3f:15:d0:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C0:AC:E3:65:42:D2:BF:09:A6:D4:04:86:41:1F:1C:06:2F:9D:56
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/n8Cs42VC0r8JptQEhkEfHAYvnVY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0e:4e:89:74:15:7c:0f:43:5a:0e:e8:52:bb:38:dc:c2:83:39:
26:59:be:7a:91:7b:5a:3c:56:d7:17:50:5a:09:6b:7b:e1:1e:
4d:e2:12:b3:a5:03:b5:1d:28:e0:b5:b3:06:0a:21:b8:9e:0f:
db:31:55:83:0f:9b:6a:6b:f0:07:f8:85:d8:5a:07:8a:6c:48:
8d:5d:0a:c1:06:bc:64:c0:9b:80:11:89:d8:19:5f:13:41:ab:
97:a9:da:bc:07:28:f4:b4:d9:61:35:c2:5f:78:5a:1f:f9:e8:
32:4f:ab:72:d4:c8:d3:7e:d0:a5:9d:fb:f3:8c:53:b3:35:3f:
6c:a8:81:68:93:7b:ec:51:5e:29:4e:86:85:07:06:08:58:5c:
4e:c4:e6:7b:e3:02:29:4f:5f:61:d9:85:a5:7d:c3:ef:ad:2d:
10:6c:bf:f3:83:43:86:02:18:47:4c:09:f2:e2:95:9b:66:bc:
a0:53:cf:66:a4:57:20:be:94:20:69:4f:01:10:e7:23:80:8d:
cb:22:d6:9a:bd:6e:47:56:e0:16:ee:34:dc:9c:a8:e5:7b:7f:
57:54:42:87:1d:14:68:88:f0:d4:90:83:7d:7d:60:f8:c5:14:
a8:21:06:cd:b6:c4:59:06:06:3c:c1:81:ff:08:b3:d6:70:8b:
40:9c:1d:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:28 2025 by rpki-client