Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/424tNwpoJjKcev5GltRMViLl3i4.roa
File: 424tNwpoJjKcev5GltRMViLl3i4.roa (raw, json)
Hash identifier: vCpEVNVYMRAleu76uhMR4bE+dqNNtozTLubAGmHB1lo=
Subject key identifier: E3:6E:2D:37:0A:68:26:32:9C:7A:FE:46:96:D4:4C:56:22:E5:DE:2E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A4A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/424tNwpoJjKcev5GltRMViLl3i4.roa
Signing time: Thu 30 Jan 2025 23:55:31 +0000
ROA not before: Thu 30 Jan 2025 23:55:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2634 (0xa4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 23:55:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E36E2D370A6826329C7AFE4696D44C5622E5DE2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:90:ae:20:df:ce:3b:c2:82:b2:4a:5c:78:
c2:cd:c3:77:9a:8f:3a:b9:97:dc:52:a1:cb:3d:65:
3d:68:b2:ca:a3:3f:b4:f1:72:1b:ce:3d:20:9c:77:
cd:af:62:69:6b:0d:fd:1d:e5:21:07:27:8f:9a:dd:
45:bc:7f:90:25:82:0c:f7:73:fa:ed:b9:5b:13:a4:
fc:c4:46:19:b2:52:1e:7c:c6:7a:95:11:a0:f8:f2:
08:ef:67:f7:a4:7c:b4:a5:a0:b9:70:56:7d:8e:c4:
6c:36:e7:58:ee:e5:76:5c:d0:e4:f7:1e:fd:35:b1:
eb:65:2d:3b:22:5c:fd:c7:4e:a9:6e:b0:18:d2:dd:
b9:8e:36:77:e3:58:da:89:08:33:0c:18:8e:fe:f6:
19:f0:bd:b5:bb:66:ab:21:40:9c:69:37:fc:cd:60:
b4:9c:21:8d:2b:7a:ec:5a:f8:15:0f:33:33:db:1e:
6f:87:fa:db:05:9e:e4:23:b7:dd:99:46:73:c7:d2:
36:45:e5:0b:eb:71:e5:68:51:e9:59:d8:e2:67:00:
7d:58:2e:fb:53:88:08:e1:7c:ba:7b:df:f2:e8:62:
6f:65:4b:49:15:8f:ba:a9:10:d8:70:18:36:47:48:
c2:d5:f0:a3:03:d4:e3:a8:ca:1c:d3:f4:00:11:9b:
bd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6E:2D:37:0A:68:26:32:9C:7A:FE:46:96:D4:4C:56:22:E5:DE:2E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/424tNwpoJjKcev5GltRMViLl3i4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7e:7a:92:e1:70:5a:87:0b:3f:76:51:fa:cc:97:89:19:ca:78:
0b:1e:a1:65:58:04:72:34:06:94:d0:df:4b:97:5d:59:0d:ad:
c7:bf:0d:b0:e4:09:c8:42:af:e1:cf:62:8c:10:1a:c6:dc:54:
5a:1f:ee:af:f7:1b:c6:63:d7:48:0d:14:8e:b9:f4:bf:61:16:
3b:65:04:ed:d5:49:4c:a7:a5:c4:2f:65:b0:39:35:73:35:18:
52:9b:36:45:b2:79:6a:7f:55:1e:20:4b:64:75:72:a8:11:84:
a6:9f:68:29:57:17:5b:01:64:70:19:7d:d0:b7:95:44:c3:a7:
c4:96:1e:ee:07:e9:87:37:2d:18:17:ad:c6:b4:a4:1b:64:96:
e8:07:76:1f:65:9c:77:10:8e:b1:d5:24:88:94:db:c5:b6:f9:
13:0b:f7:14:ec:d2:05:fe:39:2c:af:9f:9d:87:28:3d:74:dd:
5f:f9:61:81:35:90:6b:85:93:76:20:73:ab:02:bf:c7:0c:f4:
28:ab:3a:00:a2:55:54:cf:f8:9a:9f:6a:aa:fa:ce:32:36:27:
28:ad:6c:f3:be:41:c9:04:b5:1d:c4:d7:b0:1a:ae:78:5f:68:
28:d1:fb:8c:53:3a:db:eb:01:47:6f:0c:8d:b7:c7:9f:a6:10:
4c:f0:64:f3
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCkowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzAy
MzU1MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEUzNkUyRDM3MEE2ODI2
MzI5QzdBRkU0Njk2RDQ0QzU2MjJFNURFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWB5CuIN/OO8KCskpceMLNw3eajzq5l9xSocs9ZT1ossqjP7Tx
chvOPSCcd82vYmlrDf0d5SEHJ4+a3UW8f5Alggz3c/rtuVsTpPzERhmyUh58xnqV
EaD48gjvZ/ekfLSloLlwVn2OxGw251ju5XZc0OT3Hv01setlLTsiXP3HTqlusBjS
3bmONnfjWNqJCDMMGI7+9hnwvbW7ZqshQJxpN/zNYLScIY0reuxa+BUPMzPbHm+H
+tsFnuQjt92ZRnPH0jZF5QvrceVoUelZ2OJnAH1YLvtTiAjhfLp73/LoYm9lS0kV
j7qpENhwGDZHSMLV8KMD1OOoyhzT9AARm71jAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU424tNwpoJjKcev5GltRMViLl3i4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzQyNHROd3BvSmpLY2V2
NUdsdFJNVmlMbDNpNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAH56kuFwWocLP3ZR+syXiRnK
eAseoWVYBHI0BpTQ30uXXVkNrce/DbDkCchCr+HPYowQGsbcVFof7q/3G8Zj10gN
FI659L9hFjtlBO3VSUynpcQvZbA5NXM1GFKbNkWyeWp/VR4gS2R1cqgRhKafaClX
F1sBZHAZfdC3lUTDp8SWHu4H6Yc3LRgXrca0pBtklugHdh9lnHcQjrHVJIiU28W2
+RML9xTs0gX+OSyvn52HKD103V/5YYE1kGuFk3Ygc6sCv8cM9CirOgCiVVTP+Jqf
aqr6zjI2JyitbPO+QckEtR3E17AarnhfaCjR+4xTOtvrAUdvDI23x5+mEEzwZPM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:33:56 2025 by rpki-client