Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Au9EO3bANKNsS5kzmDxL0HydbLo.roa
File: Au9EO3bANKNsS5kzmDxL0HydbLo.roa (raw, json)
Hash identifier: Sm3u8kbsn08kYWqHC39ibpBY2TCtd/0IXCMsLXHzZZQ=
Subject key identifier: 02:EF:44:3B:76:C0:34:A3:6C:4B:99:33:98:3C:4B:D0:7C:9D:6C:BA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0554
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Au9EO3bANKNsS5kzmDxL0HydbLo.roa
Signing time: Fri 17 Jan 2025 18:24:44 +0000
ROA not before: Fri 17 Jan 2025 18:24:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1364 (0x554)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 18:24:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=02EF443B76C034A36C4B9933983C4BD07C9D6CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:8f:31:32:a8:5b:92:6b:78:a4:82:30:10:
05:e1:ae:8f:e7:64:3d:46:92:09:b6:61:9d:fa:91:
66:a2:18:eb:98:f9:d4:cd:d3:fa:46:6d:75:c2:c4:
66:c7:11:5a:d4:33:8d:e1:ab:ea:09:1f:c8:d9:9c:
1d:65:0e:2f:ed:39:70:9b:48:c5:b6:80:17:03:80:
97:08:33:a1:7f:52:e0:09:9e:f7:32:e7:14:12:09:
37:57:86:b0:3c:46:29:36:49:6b:b5:ec:0f:9a:7c:
71:7e:98:d3:5d:81:48:50:5b:a8:4b:59:9e:09:03:
69:a9:74:e5:b3:b0:42:fc:d0:41:21:34:60:51:26:
7a:b1:a5:4e:ca:6f:04:37:eb:b2:c5:fe:7c:f7:8e:
d9:cf:42:ff:85:70:8b:2a:15:82:26:e7:d5:57:48:
83:83:bb:ae:33:53:d3:ef:cf:e3:d3:c6:7d:2c:74:
1e:ad:13:43:37:08:23:11:3b:0d:d2:1f:39:39:28:
09:75:4a:79:ad:82:33:f3:a6:bc:04:ef:48:30:41:
9c:6b:ce:72:d2:b6:34:bc:c3:ce:04:b6:e1:9d:1d:
f8:92:51:80:09:33:41:35:8c:8a:a9:51:27:13:cf:
7b:9d:3f:f4:5e:56:31:5f:aa:ec:87:aa:4f:e1:32:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:EF:44:3B:76:C0:34:A3:6C:4B:99:33:98:3C:4B:D0:7C:9D:6C:BA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Au9EO3bANKNsS5kzmDxL0HydbLo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
05:ff:76:c1:f3:12:f9:45:e8:5b:95:1a:d7:22:e9:69:7c:d2:
43:51:ac:72:3b:1e:c7:18:30:bd:bd:7c:37:e9:cf:12:e7:87:
8b:cf:1f:0b:ea:1f:2e:73:50:66:78:18:61:e0:a3:0c:0d:1b:
e9:94:41:60:cc:18:1d:9d:84:46:6e:04:ea:3f:8b:51:b3:82:
34:50:25:c2:4f:98:a0:84:d9:43:9d:3d:02:3c:1f:4e:57:5d:
a9:a0:45:c5:4a:56:94:99:c0:0e:36:f2:e8:01:24:27:27:e7:
cb:70:73:e2:5f:be:03:7a:95:fa:76:97:78:13:c5:6b:c5:d9:
54:1b:51:8d:19:12:77:c8:61:07:10:af:9d:d3:5f:e6:9f:7b:
20:1b:7f:74:3d:bb:5f:4e:52:f5:a4:0c:8a:f7:68:0c:8f:ae:
d3:a9:66:25:94:59:ad:0b:69:7a:e0:db:bb:f8:13:8b:22:22:
c9:99:0b:08:69:58:5a:f2:61:cf:3a:c6:31:cc:c6:b9:03:97:
3c:17:c6:25:5b:4f:9f:a0:5a:cb:e6:4d:3c:63:83:3c:a6:36:
62:e8:ee:61:af:de:68:16:bb:35:95:ae:ca:fd:e3:35:68:a8:
5d:ad:d0:f2:7f:db:c4:d6:d1:a8:d1:68:be:f9:20:d7:b4:f2:
1e:51:a9:99
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTcx
ODI0NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAyRUY0NDNCNzZDMDM0
QTM2QzRCOTkzMzk4M0M0QkQwN0M5RDZDQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm748xMqhbkmt4pIIwEAXhro/nZD1Gkgm2YZ36kWaiGOuY+dTN
0/pGbXXCxGbHEVrUM43hq+oJH8jZnB1lDi/tOXCbSMW2gBcDgJcIM6F/UuAJnvcy
5xQSCTdXhrA8Rik2SWu17A+afHF+mNNdgUhQW6hLWZ4JA2mpdOWzsEL80EEhNGBR
JnqxpU7KbwQ367LF/nz3jtnPQv+FcIsqFYIm59VXSIODu64zU9Pvz+PTxn0sdB6t
E0M3CCMROw3SHzk5KAl1SnmtgjPzprwE70gwQZxrznLStjS8w84EtuGdHfiSUYAJ
M0E1jIqpUScTz3udP/ReVjFfquyHqk/hMg7PAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUAu9EO3bANKNsS5kzmDxL0HydbLowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0F1OUVPM2JBTktOc1M1
a3ptRHhMMEh5ZGJMby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAAX/dsHzEvlF6FuVGtci6Wl8
0kNRrHI7HscYML29fDfpzxLnh4vPHwvqHy5zUGZ4GGHgowwNG+mUQWDMGB2dhEZu
BOo/i1GzgjRQJcJPmKCE2UOdPQI8H05XXamgRcVKVpSZwA428ugBJCcn58twc+Jf
vgN6lfp2l3gTxWvF2VQbUY0ZEnfIYQcQr53TX+afeyAbf3Q9u19OUvWkDIr3aAyP
rtOpZiWUWa0LaXrg27v4E4siIsmZCwhpWFryYc86xjHMxrkDlzwXxiVbT5+gWsvm
TTxjgzymNmLo7mGv3mgWuzWVrsr94zVoqF2t0PJ/28TW0ajRaL75INe08h5RqZk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:20 2025 by rpki-client