Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0B9TPUGH86wovwAwyrXyseXHSg0.roa
File: 0B9TPUGH86wovwAwyrXyseXHSg0.roa (raw, json)
Hash identifier: Qzh4eBWW+i86pE6Mkp9rYlawBQzyT/pSVMDyaIXVYEs=
Subject key identifier: D0:1F:53:3D:41:87:F3:AC:28:BF:00:30:CA:B5:F2:B1:E5:C7:4A:0D
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CE0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0B9TPUGH86wovwAwyrXyseXHSg0.roa
Signing time: Thu 06 Feb 2025 21:25:47 +0000
ROA not before: Thu 06 Feb 2025 21:25:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3296 (0xce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 21:25:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D01F533D4187F3AC28BF0030CAB5F2B1E5C74A0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:af:ed:c2:38:1a:85:4b:69:fb:03:42:12:
27:b1:5b:2c:11:6c:63:80:b0:f4:80:4f:58:c8:5b:
4e:1a:bb:ee:5e:7a:42:97:84:0c:9f:b5:7f:94:ce:
7e:85:d0:77:18:da:47:10:47:19:22:20:82:8d:12:
bf:be:82:c6:1f:97:b3:5d:12:20:04:04:4e:82:66:
08:14:ee:5c:75:2f:59:8c:ab:b5:d4:9d:40:11:dd:
63:37:24:a7:37:0b:c9:4f:aa:c5:b6:aa:cd:7b:21:
10:60:df:0b:64:8c:66:f7:ea:91:30:a1:d4:4e:8b:
ba:ed:85:ab:ed:82:ff:63:42:b0:3c:49:97:1f:44:
aa:a6:4f:81:c7:ef:42:95:8c:fc:c3:27:d7:cd:dd:
06:40:01:42:74:a3:08:c2:d0:39:56:4f:4a:77:8f:
67:bc:a5:88:29:ed:27:4c:02:f1:da:19:39:c4:6d:
d0:79:71:ec:7f:07:ce:e7:cd:13:da:70:d0:21:21:
70:86:93:0f:98:2f:26:b6:c6:8c:18:1a:b5:d2:15:
6f:70:1e:b0:11:66:13:66:65:c4:87:05:11:0d:26:
b0:79:f6:83:82:32:c7:e3:ef:34:b2:5d:91:6f:d2:
2e:02:9c:88:0d:4b:cd:f8:2e:f6:f3:1e:fa:4b:c8:
3b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:53:3D:41:87:F3:AC:28:BF:00:30:CA:B5:F2:B1:E5:C7:4A:0D
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0B9TPUGH86wovwAwyrXyseXHSg0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
34:39:29:14:da:ff:4b:dc:97:fa:ab:a7:4c:a6:75:3a:8f:5c:
a4:e3:55:c1:bf:e7:48:e7:5e:7d:24:b8:c4:80:dd:fc:fc:09:
e9:4e:f9:a4:4f:3f:3a:c1:8b:9a:1c:38:1b:cb:b1:97:09:cd:
07:e5:37:9b:91:42:d2:bf:fb:75:7e:08:86:fc:ae:4c:ab:64:
0f:c3:10:e0:57:5f:a0:11:70:11:27:07:f0:f5:c3:0c:3c:ea:
e9:a7:27:07:d6:62:88:6e:66:d3:ff:88:55:bc:25:8f:14:38:
d5:2e:54:1d:39:2f:9a:dc:dc:92:f5:e4:6b:83:d0:d3:bd:1d:
fc:cc:e8:bf:f0:da:96:f4:e6:78:41:1f:37:05:0f:1d:83:8a:
6d:42:58:f6:4d:12:f7:b2:aa:44:57:2d:d9:be:7d:25:a2:85:
a6:0c:aa:e5:f7:a5:54:55:e8:04:7a:3a:0e:f6:50:c9:d4:c5:
4b:e6:e4:59:a1:a3:91:bd:0d:47:6b:42:74:27:07:81:f0:ee:
54:83:33:95:b0:2b:28:9a:9e:0f:9f:87:fe:69:2e:0f:c6:a2:
ed:e1:be:24:63:b8:b2:74:f2:97:2f:96:38:95:cf:26:3a:14:
b0:0b:51:59:d5:7a:42:0a:cd:85:08:61:78:0a:4a:b4:61:76:
13:bf:05:bb
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDOAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDYy
MTI1NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQwMUY1MzNENDE4N0Yz
QUMyOEJGMDAzMENBQjVGMkIxRTVDNzRBMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvN6/twjgahUtp+wNCEiexWywRbGOAsPSAT1jIW04au+5eekKX
hAyftX+Uzn6F0HcY2kcQRxkiIIKNEr++gsYfl7NdEiAEBE6CZggU7lx1L1mMq7XU
nUAR3WM3JKc3C8lPqsW2qs17IRBg3wtkjGb36pEwodROi7rthavtgv9jQrA8SZcf
RKqmT4HH70KVjPzDJ9fN3QZAAUJ0owjC0DlWT0p3j2e8pYgp7SdMAvHaGTnEbdB5
cex/B87nzRPacNAhIXCGkw+YLya2xowYGrXSFW9wHrARZhNmZcSHBRENJrB59oOC
Msfj7zSyXZFv0i4CnIgNS834LvbzHvpLyDuJAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU0B9TPUGH86wovwAwyrXyseXHSg0wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzBCOVRQVUdIODZ3b3Z3
QXd5clh5c2VYSFNnMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBADQ5KRTa/0vcl/qrp0ymdTqP
XKTjVcG/50jnXn0kuMSA3fz8CelO+aRPPzrBi5ocOBvLsZcJzQflN5uRQtK/+3V+
CIb8rkyrZA/DEOBXX6ARcBEnB/D1www86umnJwfWYohuZtP/iFW8JY8UONUuVB05
L5rc3JL15GuD0NO9HfzM6L/w2pb05nhBHzcFDx2Dim1CWPZNEveyqkRXLdm+fSWi
haYMquX3pVRV6AR6Og72UMnUxUvm5Fmho5G9DUdrQnQnB4Hw7lSDM5WwKyiang+f
h/5pLg/Gou3hviRjuLJ08pcvljiVzyY6FLALUVnVekIKzYUIYXgKSrRhdhO/Bbs=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:22 2025 by rpki-client