Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yOZ2lg_ehQuqUSabsqacN0qjIx4.roa
File: yOZ2lg_ehQuqUSabsqacN0qjIx4.roa (raw, json)
Hash identifier: 2XmbEBgQI7pg56sirGz3nWFdkTwRBSEDn1zQskqy2/o=
Subject key identifier: C8:E6:76:96:0F:DE:85:0B:AA:51:26:9B:B2:A6:9C:37:4A:A3:23:1E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A9C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yOZ2lg_ehQuqUSabsqacN0qjIx4.roa
Signing time: Fri 31 Jan 2025 20:27:33 +0000
ROA not before: Fri 31 Jan 2025 20:27:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2716 (0xa9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 20:27:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C8E676960FDE850BAA51269BB2A69C374AA3231E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:9b:68:f9:11:fa:45:35:85:43:e2:4d:90:
87:11:4a:6f:dc:e0:84:a5:02:38:63:4a:73:4d:3e:
08:68:cc:d0:3d:32:f1:2a:ff:80:77:e6:78:ff:c4:
92:2d:f5:d5:f2:89:5b:9d:73:4d:9c:3a:27:c5:82:
7d:5b:e8:47:a2:01:94:cb:ef:e5:b2:ef:6a:1e:bd:
db:b1:15:fd:77:d4:13:57:70:9e:d5:4f:16:c2:33:
47:4c:38:f3:05:0e:49:ef:4a:a3:73:59:61:da:f7:
36:8c:fb:43:89:af:b8:49:45:30:bb:80:2e:68:86:
cf:8e:a1:86:ca:fd:df:e3:98:79:62:04:77:af:59:
15:e7:ea:d8:ba:de:89:b8:08:ab:d3:97:a7:cc:2a:
95:d8:88:a8:b0:1c:ca:5d:07:b9:f0:8f:11:24:09:
de:67:ce:99:1e:b4:00:40:a0:96:63:a1:13:47:4d:
63:de:fe:ef:c5:75:61:84:f3:fd:bc:ba:d8:7d:61:
e1:6e:96:f2:cd:9c:2b:e0:e8:58:a9:cd:6b:fd:60:
68:8a:8b:bc:14:6c:b5:8e:ec:aa:f4:54:13:f8:fa:
55:d7:0b:52:a2:ba:7c:e4:d2:30:9f:61:ae:dd:ff:
a5:65:f8:4c:1e:79:22:66:2b:8d:04:9a:f3:56:c8:
b1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E6:76:96:0F:DE:85:0B:AA:51:26:9B:B2:A6:9C:37:4A:A3:23:1E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yOZ2lg_ehQuqUSabsqacN0qjIx4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:9e:da:b8:58:61:59:9a:e9:81:80:48:9e:d6:7e:0c:7c:1a:
a6:d4:26:13:f9:9e:95:77:86:88:42:ec:e8:ce:b5:77:c2:fa:
b6:9c:87:13:07:d4:ab:41:fd:b6:6a:c5:4f:1d:2c:0a:d9:2a:
fb:9b:73:2a:26:4f:18:a4:5d:ab:a2:d4:2e:e0:fb:8c:ed:39:
a3:d1:b4:f6:62:68:8c:c6:e7:da:82:ed:f4:7d:85:05:58:5c:
94:b2:c6:c1:79:53:40:70:c8:90:91:5b:be:ce:56:dd:d7:61:
55:7c:ae:c3:97:b9:54:db:0a:68:ca:9a:ea:d4:78:86:da:43:
59:1b:3f:d3:94:9a:54:d8:39:3a:6c:83:dc:23:4f:30:1e:c7:
ac:3e:57:37:f0:08:df:21:ce:27:66:27:63:86:74:60:b2:5a:
ca:74:44:e6:6c:eb:17:ec:b2:cd:79:0b:f5:92:78:ad:99:3e:
73:22:8b:1e:92:81:8b:44:4e:f6:f1:d3:9f:f5:2b:24:9b:53:
03:74:d1:c7:07:61:26:dc:6c:0b:08:20:91:b6:fd:7c:e9:04:
27:e5:a3:22:ac:f5:c2:bf:74:cd:3d:fc:bb:8b:75:ce:1d:af:
23:35:94:b5:48:41:3a:2e:c3:65:5a:b0:0d:84:dc:f0:04:20:
f6:56:84:3b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzEy
MDI3MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM4RTY3Njk2MEZERTg1
MEJBQTUxMjY5QkIyQTY5QzM3NEFBMzIzMUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp75to+RH6RTWFQ+JNkIcRSm/c4ISlAjhjSnNNPghozNA9MvEq
/4B35nj/xJIt9dXyiVudc02cOifFgn1b6EeiAZTL7+Wy72oevduxFf131BNXcJ7V
TxbCM0dMOPMFDknvSqNzWWHa9zaM+0OJr7hJRTC7gC5ohs+OoYbK/d/jmHliBHev
WRXn6ti63om4CKvTl6fMKpXYiKiwHMpdB7nwjxEkCd5nzpketABAoJZjoRNHTWPe
/u/FdWGE8/28uth9YeFulvLNnCvg6FipzWv9YGiKi7wUbLWO7Kr0VBP4+lXXC1Ki
unzk0jCfYa7d/6Vl+EweeSJmK40EmvNWyLF5AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUyOZ2lg/ehQuqUSabsqacN0qjIx4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3lPWjJsZ19laFF1cVVT
YWJzcWFjTjBxakl4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKWe2rhYYVma6YGASJ7Wfgx8
GqbUJhP5npV3hohC7OjOtXfC+rachxMH1KtB/bZqxU8dLArZKvubcyomTxikXaui
1C7g+4ztOaPRtPZiaIzG59qC7fR9hQVYXJSyxsF5U0BwyJCRW77OVt3XYVV8rsOX
uVTbCmjKmurUeIbaQ1kbP9OUmlTYOTpsg9wjTzAex6w+VzfwCN8hzidmJ2OGdGCy
Wsp0ROZs6xfsss15C/WSeK2ZPnMiix6SgYtETvbx05/1KySbUwN00ccHYSbcbAsI
IJG2/XzpBCfloyKs9cK/dM09/LuLdc4dryM1lLVIQTouw2VasA2E3PAEIPZWhDs=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:35:48 2025 by rpki-client