Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/IxJFisSFhJlyDW9UfhzBSpKgk84.roa
File: IxJFisSFhJlyDW9UfhzBSpKgk84.roa (raw, json)
Hash identifier: sQhn1KL5H00Ny0lhtw0cRyM+ILW3E1VGUoriBkYjoZo=
Subject key identifier: 23:12:45:8A:C4:85:84:99:72:0D:6F:54:7E:1C:C1:4A:92:A0:93:CE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0506
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IxJFisSFhJlyDW9UfhzBSpKgk84.roa
Signing time: Thu 16 Jan 2025 22:56:32 +0000
ROA not before: Thu 16 Jan 2025 22:56:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1286 (0x506)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 16 22:56:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2312458AC4858499720D6F547E1CC14A92A093CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:65:de:0a:96:cb:c2:7d:d9:ac:dc:b2:07:
26:c8:08:cc:09:cd:e8:2e:5a:5e:fd:05:74:64:d4:
34:90:d6:eb:24:64:05:55:81:8e:86:4b:50:86:6a:
63:42:60:f0:b3:54:3d:d2:a5:26:da:9c:e3:10:af:
99:63:96:99:cc:ea:e4:90:42:df:cb:52:3b:b1:7e:
7d:46:7e:44:f7:26:32:b0:44:06:22:39:20:c2:26:
2a:2a:fb:ca:b2:d3:9a:c3:30:49:06:0b:cb:2c:4c:
3b:4b:df:c3:3a:f2:cc:30:43:5b:a0:f2:4c:2d:a8:
25:40:b2:2b:f6:d9:ed:04:b0:88:88:d7:06:00:d3:
b1:88:63:66:02:f2:9b:cc:37:a8:2c:fb:d5:dc:26:
17:f4:45:a8:96:63:a8:7e:f9:1e:b8:18:ea:df:bc:
b0:79:fb:a6:d1:b3:10:29:01:7f:da:50:8d:8f:9a:
ec:ad:7d:42:e6:83:43:6a:90:51:b7:b2:42:ff:47:
b9:a4:94:cf:81:94:f6:46:0b:e5:e3:1a:5c:cf:f2:
3f:34:47:4c:1e:99:06:54:18:d0:ae:32:11:7e:f6:
f3:fa:9b:5f:59:b0:92:46:73:69:88:84:52:de:33:
ea:67:a0:7b:74:e1:c5:06:ac:0c:88:92:64:0d:c2:
fe:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:12:45:8A:C4:85:84:99:72:0D:6F:54:7E:1C:C1:4A:92:A0:93:CE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/IxJFisSFhJlyDW9UfhzBSpKgk84.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:d6:3e:22:03:b0:31:22:a4:1f:8d:8c:5d:cf:a8:bd:c8:36:
8d:c1:ef:1f:98:a9:55:dc:eb:33:7f:0c:21:b8:86:a6:98:99:
f0:56:42:d8:10:cc:e6:3d:02:0c:00:da:c9:c5:fe:e0:cb:b8:
99:65:0f:cb:6c:13:63:0f:83:ba:68:f8:4f:39:97:36:39:cc:
de:7d:c7:18:50:63:cb:e1:db:12:04:01:94:3a:ae:b3:50:53:
8c:99:46:b7:30:b0:13:51:fd:43:a9:87:57:a0:38:6a:09:20:
29:92:09:89:31:fb:65:cf:cc:76:7c:eb:7c:86:08:2a:3c:0b:
12:26:51:46:7d:41:b8:e6:4d:69:17:7f:c4:7b:8a:39:fe:e0:
c1:31:7f:03:04:d4:62:f2:dc:c1:58:e6:10:af:63:c2:87:50:
50:8e:70:ce:85:83:76:96:e6:76:58:25:3d:d5:53:ae:41:6a:
74:a6:84:61:d7:39:75:98:ef:49:3b:51:0f:a4:1e:59:5f:a5:
36:ac:e7:3a:99:cc:c6:e4:fc:7b:fd:0c:b4:d7:ae:e1:ca:34:
47:2f:cb:b9:1c:02:e7:51:57:17:c4:06:f5:0c:93:ef:20:d7:
d6:7c:b4:f4:96:32:7c:8c:ac:f6:04:11:47:ce:a7:93:19:fe:
5f:46:b9:4c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTYy
MjU2MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIzMTI0NThBQzQ4NTg0
OTk3MjBENkY1NDdFMUNDMTRBOTJBMDkzQ0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCztGXeCpbLwn3ZrNyyBybICMwJzeguWl79BXRk1DSQ1uskZAVV
gY6GS1CGamNCYPCzVD3SpSbanOMQr5ljlpnM6uSQQt/LUjuxfn1GfkT3JjKwRAYi
OSDCJioq+8qy05rDMEkGC8ssTDtL38M68swwQ1ug8kwtqCVAsiv22e0EsIiI1wYA
07GIY2YC8pvMN6gs+9XcJhf0RaiWY6h++R64GOrfvLB5+6bRsxApAX/aUI2Pmuyt
fULmg0NqkFG3skL/R7mklM+BlPZGC+XjGlzP8j80R0wemQZUGNCuMhF+9vP6m19Z
sJJGc2mIhFLeM+pnoHt04cUGrAyIkmQNwv6pAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUIxJFisSFhJlyDW9UfhzBSpKgk84wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0l4SkZpc1NGaEpseURX
OVVmaHpCU3BLZ2s4NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKXWPiIDsDEipB+NjF3PqL3I
No3B7x+YqVXc6zN/DCG4hqaYmfBWQtgQzOY9AgwA2snF/uDLuJllD8tsE2MPg7po
+E85lzY5zN59xxhQY8vh2xIEAZQ6rrNQU4yZRrcwsBNR/UOph1egOGoJICmSCYkx
+2XPzHZ863yGCCo8CxImUUZ9QbjmTWkXf8R7ijn+4MExfwME1GLy3MFY5hCvY8KH
UFCOcM6Fg3aW5nZYJT3VU65BanSmhGHXOXWY70k7UQ+kHllfpTas5zqZzMbk/Hv9
DLTXruHKNEcvy7kcAudRVxfEBvUMk+8g19Z8tPSWMnyMrPYEEUfOp5MZ/l9GuUw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:47:23 2025 by rpki-client