Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/F15SKbyrT2XTfJAOYZgHO4I5Lio.roa
File: F15SKbyrT2XTfJAOYZgHO4I5Lio.roa (raw, json)
Hash identifier: IeauKHC21Ojwmx5+YxW5eI7Ej4nSzXps5mivL+UBIvw=
Subject key identifier: 17:5E:52:29:BC:AB:4F:65:D3:7C:90:0E:61:98:07:3B:82:39:2E:2A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0744
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/F15SKbyrT2XTfJAOYZgHO4I5Lio.roa
Signing time: Wed 22 Jan 2025 22:25:44 +0000
ROA not before: Wed 22 Jan 2025 22:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1860 (0x744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 22:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=175E5229BCAB4F65D37C900E6198073B82392E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:aa:ff:88:cd:e8:15:20:64:20:f4:f5:12:
31:d4:bf:00:e7:5e:24:6d:ed:24:9a:f9:b6:00:f1:
bf:9f:63:b3:ca:bb:ee:16:79:8b:11:0f:66:14:45:
69:4d:4e:25:1c:f7:b5:6c:c8:3c:fe:6a:f2:f3:8a:
14:4f:b1:a4:e1:ac:f8:04:59:47:99:1d:f3:1d:6f:
ee:46:a2:75:cf:c2:3f:ef:6f:81:72:d8:72:4d:8e:
84:05:a0:51:d8:b6:ca:37:5b:0d:73:38:38:5a:33:
a3:6d:4c:1d:db:89:92:d3:09:48:6b:20:ca:44:f1:
13:7d:93:dd:4b:c6:f2:12:fe:ca:f4:2d:3e:8b:62:
ef:c0:03:a9:75:f2:6b:ab:88:5a:0b:f8:a3:ba:33:
0e:68:77:8c:70:81:ec:4e:de:b0:c9:30:6b:79:b5:
0a:27:37:f7:cc:b7:21:a3:fc:e5:89:09:19:be:42:
6c:51:92:60:76:8a:c2:6b:3f:13:8d:d4:1b:66:1f:
e2:d7:f2:ce:8a:75:23:7d:2f:b3:9e:7c:1f:71:7e:
04:db:5a:d9:40:2a:ae:ab:e2:38:c1:8e:a0:80:03:
b2:d9:cc:f0:39:e4:b6:af:a5:66:07:18:17:14:f1:
b1:33:a7:83:a4:5e:e8:84:b2:b1:fe:37:1e:52:06:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5E:52:29:BC:AB:4F:65:D3:7C:90:0E:61:98:07:3B:82:39:2E:2A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/F15SKbyrT2XTfJAOYZgHO4I5Lio.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
50:0a:b8:99:64:b8:a8:5a:4e:6b:d0:72:d7:f6:29:ae:03:a0:
94:c1:df:65:d8:91:48:01:aa:5b:46:04:15:11:81:a5:56:3e:
9e:1f:4b:0c:c0:5a:9d:2f:31:c3:bc:aa:7e:3a:f7:35:9e:01:
74:0f:f0:92:d7:ff:79:36:33:dc:04:b8:33:61:00:2e:10:af:
77:ec:37:d1:90:c9:bb:21:48:d7:f6:84:31:93:84:4a:b1:38:
fe:5c:a9:dc:46:00:ea:21:52:19:9f:0a:b7:e6:df:55:76:0f:
57:a0:11:c1:71:bb:d0:8b:8f:51:f2:8d:82:b3:1c:6c:80:7c:
d7:05:ab:a3:19:1e:a6:01:ab:fd:74:89:0a:a1:cc:cd:28:34:
fb:22:75:82:1d:77:d1:5b:34:15:c3:bc:74:76:5a:75:3f:e7:
45:46:2a:70:35:f6:7f:fc:3f:03:60:a9:e0:97:23:c3:40:74:
3c:8a:6e:5a:c4:db:48:8f:62:0a:61:b8:d4:84:9d:8b:f9:b3:
54:68:9b:a8:94:97:56:fa:5b:fc:c5:bc:62:17:a1:90:7f:3a:
99:b7:42:ae:13:84:dc:64:7e:d8:19:58:38:62:98:b0:2b:03:
19:cd:5d:bd:f3:63:48:e6:44:c8:1f:7b:b3:b9:b9:1a:5e:4a:
c5:fe:b4:b3
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjIy
MjI1NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE3NUU1MjI5QkNBQjRG
NjVEMzdDOTAwRTYxOTgwNzNCODIzOTJFMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY4Kr/iM3oFSBkIPT1EjHUvwDnXiRt7SSa+bYA8b+fY7PKu+4W
eYsRD2YURWlNTiUc97VsyDz+avLzihRPsaThrPgEWUeZHfMdb+5GonXPwj/vb4Fy
2HJNjoQFoFHYtso3Ww1zODhaM6NtTB3biZLTCUhrIMpE8RN9k91LxvIS/sr0LT6L
Yu/AA6l18muriFoL+KO6Mw5od4xwgexO3rDJMGt5tQonN/fMtyGj/OWJCRm+QmxR
kmB2isJrPxON1BtmH+LX8s6KdSN9L7OefB9xfgTbWtlAKq6r4jjBjqCAA7LZzPA5
5LavpWYHGBcU8bEzp4OkXuiEsrH+Nx5SBkVTAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUF15SKbyrT2XTfJAOYZgHO4I5LiowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0YxNVNLYnlyVDJYVGZK
QU9ZWmdITzRJNUxpby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFAKuJlkuKhaTmvQctf2Ka4D
oJTB32XYkUgBqltGBBURgaVWPp4fSwzAWp0vMcO8qn469zWeAXQP8JLX/3k2M9wE
uDNhAC4Qr3fsN9GQybshSNf2hDGThEqxOP5cqdxGAOohUhmfCrfm31V2D1egEcFx
u9CLj1HyjYKzHGyAfNcFq6MZHqYBq/10iQqhzM0oNPsidYIdd9FbNBXDvHR2WnU/
50VGKnA19n/8PwNgqeCXI8NAdDyKblrE20iPYgphuNSEnYv5s1Rom6iUl1b6W/zF
vGIXoZB/Opm3Qq4ThNxkftgZWDhimLArAxnNXb3zY0jmRMgfe7O5uRpeSsX+tLM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:54 2025 by rpki-client