Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/A5EOFx9N7UqogDiJEmssfAGbW94.roa
File: A5EOFx9N7UqogDiJEmssfAGbW94.roa (raw, json)
Hash identifier: j0o1XYPJGymKuXljbUxg3SLKlJdeEoDwXCh9HbOSo+8=
Subject key identifier: 03:91:0E:17:1F:4D:ED:4A:A8:80:38:89:12:6B:2C:7C:01:9B:5B:DE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 09A2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A5EOFx9N7UqogDiJEmssfAGbW94.roa
Signing time: Wed 29 Jan 2025 05:55:24 +0000
ROA not before: Wed 29 Jan 2025 05:55:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2466 (0x9a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 29 05:55:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=03910E171F4DED4AA8803889126B2C7C019B5BDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b0:5f:9d:a9:ba:d0:71:ad:aa:ff:0b:f2:d2:
a9:a9:4d:ac:c8:89:3b:1e:59:db:ba:13:1c:0f:4d:
77:c9:b5:8a:da:d4:f3:66:77:45:b5:1e:38:7d:0a:
95:0b:73:6a:d6:23:a7:ab:53:27:8e:9d:8b:28:46:
a2:ac:b9:b1:1f:43:ec:dc:da:d5:ae:8f:db:75:5a:
b8:17:ef:b1:2a:32:02:f0:d7:0f:97:ba:01:dd:47:
36:b9:12:0b:61:bc:4d:82:39:29:da:7d:df:a0:6e:
c7:98:13:02:e6:b5:b7:38:ea:84:ac:0a:a4:de:6c:
c1:7d:20:5c:86:c4:cd:f6:0e:79:e4:ae:bf:b8:97:
af:a4:99:3d:41:92:a9:eb:54:76:e8:34:cb:31:ea:
08:5e:84:f2:ea:5d:f4:6e:ca:18:41:65:06:f5:e9:
19:f6:c2:81:44:71:7f:d3:66:97:be:3a:0f:e8:7e:
02:f0:23:37:5e:be:a3:95:08:bd:81:57:3e:36:76:
f1:0e:ef:0b:0b:df:34:30:7f:aa:80:14:7f:41:41:
86:ef:d6:b4:49:82:6c:60:d0:d5:b1:62:fa:80:90:
6a:54:e2:87:c6:b0:41:76:91:81:96:16:8c:2c:59:
82:f7:c6:15:99:a4:a3:b0:18:6a:5b:a5:99:f4:27:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:91:0E:17:1F:4D:ED:4A:A8:80:38:89:12:6B:2C:7C:01:9B:5B:DE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/A5EOFx9N7UqogDiJEmssfAGbW94.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a6:c8:16:fb:f6:ac:7f:c6:8d:14:bd:10:be:aa:2c:8e:6a:b5:
a3:60:41:58:db:4b:e0:0c:a9:e2:63:3d:d1:06:ea:ee:1e:38:
60:00:c4:ed:18:2f:7a:fa:98:fd:08:7f:a4:d7:8c:31:7a:ac:
76:95:f2:8f:8a:37:11:fc:b5:69:64:d4:32:50:62:20:18:4b:
9d:ef:ff:63:c6:f5:45:59:cd:86:ac:bc:02:23:97:a6:36:bf:
8f:22:6f:26:86:a2:57:bb:9f:71:b7:d9:62:3d:8c:4c:01:08:
dd:96:b9:59:41:dc:14:76:a8:14:f0:20:05:e0:9e:17:64:7d:
56:59:8c:2f:93:97:9f:fe:f0:18:e2:b4:04:66:f0:fd:ad:32:
74:3a:7f:ba:4c:3c:2d:56:d4:21:41:67:5c:30:3f:f3:56:76:
d2:8a:0a:12:2c:24:fb:c7:be:47:e8:d5:1b:e8:f2:ce:d6:d7:
1b:8f:03:67:03:dc:5c:b1:ef:71:f6:d4:10:97:28:d9:33:84:
20:97:61:a5:c6:cd:b6:ae:bd:d5:3e:20:e1:cc:03:6a:ba:9f:
68:9a:5a:26:ed:aa:18:5e:4b:ad:8d:26:a5:d4:b2:02:dd:bd:
10:a9:2f:4f:1a:05:ac:3b:f2:5f:6a:9a:e6:e9:2b:53:c9:b1:
cd:44:63:55
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjkw
NTU1MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAzOTEwRTE3MUY0REVE
NEFBODgwMzg4OTEyNkIyQzdDMDE5QjVCREUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCusF+dqbrQca2q/wvy0qmpTazIiTseWdu6ExwPTXfJtYra1PNm
d0W1Hjh9CpULc2rWI6erUyeOnYsoRqKsubEfQ+zc2tWuj9t1WrgX77EqMgLw1w+X
ugHdRza5EgthvE2COSnafd+gbseYEwLmtbc46oSsCqTebMF9IFyGxM32Dnnkrr+4
l6+kmT1BkqnrVHboNMsx6ghehPLqXfRuyhhBZQb16Rn2woFEcX/TZpe+Og/ofgLw
IzdevqOVCL2BVz42dvEO7wsL3zQwf6qAFH9BQYbv1rRJgmxg0NWxYvqAkGpU4ofG
sEF2kYGWFowsWYL3xhWZpKOwGGpbpZn0J4MHAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUA5EOFx9N7UqogDiJEmssfAGbW94wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0E1RU9GeDlON1Vxb2dE
aUpFbXNzZkFHYlc5NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKbIFvv2rH/GjRS9EL6qLI5q
taNgQVjbS+AMqeJjPdEG6u4eOGAAxO0YL3r6mP0If6TXjDF6rHaV8o+KNxH8tWlk
1DJQYiAYS53v/2PG9UVZzYasvAIjl6Y2v48ibyaGole7n3G32WI9jEwBCN2WuVlB
3BR2qBTwIAXgnhdkfVZZjC+Tl5/+8BjitARm8P2tMnQ6f7pMPC1W1CFBZ1wwP/NW
dtKKChIsJPvHvkfo1Rvo8s7W1xuPA2cD3Fyx73H21BCXKNkzhCCXYaXGzbauvdU+
IOHMA2q6n2iaWibtqhheS62NJqXUsgLdvRCpL08aBaw78l9qmubpK1PJsc1EY1U=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:34:11 2025 by rpki-client