Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A4Wtd-I8z8bFEzHRhvape9NFnUw.roa
File: A4Wtd-I8z8bFEzHRhvape9NFnUw.roa (raw, json)
Hash identifier: FFn6OI6zle35t/ntjmusxrQc2/ZRN/AJ86JdHTFHH3I=
Subject key identifier: 03:85:AD:77:E2:3C:CF:C6:C5:13:31:D1:86:F6:A9:7B:D3:45:9D:4C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C02
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A4Wtd-I8z8bFEzHRhvape9NFnUw.roa
Signing time: Tue 04 Feb 2025 13:55:40 +0000
ROA not before: Tue 04 Feb 2025 13:55:40 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3074 (0xc02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 13:55:40 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0385AD77E23CCFC6C51331D186F6A97BD3459D4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:70:48:83:40:82:95:f0:f7:a2:1f:e6:ed:
6e:1e:62:4c:7f:42:05:70:39:61:cf:a3:6c:35:15:
f2:dc:0a:12:71:db:ea:ca:d8:31:f2:d9:38:75:f7:
77:87:94:87:8a:b4:6b:53:60:b1:f9:9c:0f:8c:a6:
a8:46:63:6e:9c:71:2e:ff:2d:c2:e9:ba:39:91:57:
4c:b7:d1:9d:db:6d:e1:3a:b1:0e:7a:e5:0a:49:5c:
6a:b6:b3:71:bb:64:94:3f:eb:8c:db:14:7a:18:27:
7f:82:bf:4b:b5:3f:56:6a:6f:2d:b1:d1:5e:91:73:
4e:10:7f:62:f9:a9:26:67:87:fa:2e:f2:e3:7e:6b:
26:5a:7b:75:26:98:a2:1f:b4:50:11:34:a1:08:01:
df:ea:c8:0c:a6:a7:da:67:79:29:ad:7f:cb:fe:fe:
e1:b5:94:40:1f:bf:ad:a2:df:4b:37:64:18:52:da:
70:9a:7c:a8:ba:ab:d8:36:8c:31:2a:eb:b0:03:03:
b0:7f:d1:da:3c:9f:58:fb:b8:df:ee:93:af:df:78:
8c:d1:7e:1d:e4:cc:66:20:c3:af:10:c7:2e:73:34:
01:47:0b:9f:38:58:d9:45:6b:24:cc:4a:e9:3a:bd:
b2:52:ba:e5:f5:5d:2d:d3:d6:cf:36:96:15:96:a0:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:85:AD:77:E2:3C:CF:C6:C5:13:31:D1:86:F6:A9:7B:D3:45:9D:4C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A4Wtd-I8z8bFEzHRhvape9NFnUw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:d4:b6:92:e9:c8:9c:00:5e:d3:36:b9:94:0f:f6:13:0a:7f:
ee:b2:62:f7:4c:ca:85:1e:2e:e3:1c:28:b1:99:6d:8b:74:27:
6c:bc:e1:ac:45:87:85:af:cc:eb:9a:36:9a:56:6f:e1:bd:0c:
1a:44:07:98:70:a2:d7:bf:72:ac:5f:79:ab:6f:3f:43:a8:86:
b4:d8:93:8d:cc:4a:0a:11:18:ad:eb:c9:d6:97:28:53:71:96:
5c:6b:e9:f2:71:20:72:ae:19:c0:7a:ee:0f:62:02:65:e1:31:
90:25:ed:8e:8e:75:0e:f0:66:7e:bc:c8:17:ce:21:b9:1f:23:
92:9d:24:1d:71:2d:cc:a3:4b:74:7f:e5:f3:41:06:09:b8:9b:
58:d7:3a:70:d5:7d:2e:20:79:a0:4d:c1:e2:f2:a1:06:6c:82:
41:9e:2e:eb:ae:bc:cf:02:6b:4c:37:54:91:1e:98:f4:9a:2a:
6a:ca:71:10:cb:64:38:e0:50:a3:27:63:80:56:48:4b:65:1b:
64:8d:3b:e4:1e:9d:1b:03:56:0d:b1:40:53:f1:64:d1:99:bf:
c1:44:07:68:65:7b:25:20:9e:af:61:02:2b:74:4c:98:af:42:
af:da:01:8f:7b:8c:39:b8:38:b1:14:89:49:0e:a5:cc:b5:1e:
04:11:b7:c3
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDAIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDQx
MzU1NDBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzODVBRDc3RTIzQ0NG
QzZDNTEzMzFEMTg2RjZBOTdCRDM0NTlENEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsknBIg0CClfD3oh/m7W4eYkx/QgVwOWHPo2w1FfLcChJx2+rK
2DHy2Th193eHlIeKtGtTYLH5nA+MpqhGY26ccS7/LcLpujmRV0y30Z3bbeE6sQ56
5QpJXGq2s3G7ZJQ/64zbFHoYJ3+Cv0u1P1Zqby2x0V6Rc04Qf2L5qSZnh/ou8uN+
ayZae3UmmKIftFARNKEIAd/qyAymp9pneSmtf8v+/uG1lEAfv62i30s3ZBhS2nCa
fKi6q9g2jDEq67ADA7B/0do8n1j7uN/uk6/feIzRfh3kzGYgw68Qxy5zNAFHC584
WNlFayTMSuk6vbJSuuX1XS3T1s82lhWWoDDlAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUA4Wtd+I8z8bFEzHRhvape9NFnUwwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0E0V3RkLUk4ejhiRkV6
SFJodmFwZTlORm5Vdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBACXUtpLpyJwAXtM2uZQP9hMK
f+6yYvdMyoUeLuMcKLGZbYt0J2y84axFh4WvzOuaNppWb+G9DBpEB5hwote/cqxf
eatvP0OohrTYk43MSgoRGK3rydaXKFNxllxr6fJxIHKuGcB67g9iAmXhMZAl7Y6O
dQ7wZn68yBfOIbkfI5KdJB1xLcyjS3R/5fNBBgm4m1jXOnDVfS4geaBNweLyoQZs
gkGeLuuuvM8Ca0w3VJEemPSaKmrKcRDLZDjgUKMnY4BWSEtlG2SNO+QenRsDVg2x
QFPxZNGZv8FEB2hleyUgnq9hAit0TJivQq/aAY97jDm4OLEUiUkOpcy1HgQRt8M=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:47:26 2025 by rpki-client