Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Nl5RTPF78kc8P-TaSjuQWdCNEdk.roa
File: Nl5RTPF78kc8P-TaSjuQWdCNEdk.roa (raw, json)
Hash identifier: Fp9II0Cp8Ba5XU9XwA14pPYAuSE5T7u+OENUhg3y0A0=
Subject key identifier: 36:5E:51:4C:F1:7B:F2:47:3C:3F:E4:DA:4A:3B:90:59:D0:8D:11:D9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B74
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Nl5RTPF78kc8P-TaSjuQWdCNEdk.roa
Signing time: Mon 03 Feb 2025 02:26:39 +0000
ROA not before: Mon 03 Feb 2025 02:26:39 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2932 (0xb74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 02:26:39 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=365E514CF17BF2473C3FE4DA4A3B9059D08D11D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:32:6f:6a:df:a4:e0:55:dd:df:b0:ae:20:59:
d6:22:9d:0b:90:51:9e:dd:c1:e6:bb:5a:14:fe:de:
88:a4:19:59:b6:32:5c:ef:ed:c0:67:cb:d3:08:be:
73:c4:94:8f:bb:8a:2c:33:39:f1:1b:e5:9f:4f:dd:
36:66:69:ed:c6:a2:7a:55:da:2c:c4:8d:44:84:c0:
ee:e4:cd:f8:f2:fb:ac:5e:f2:a4:47:8f:91:16:62:
49:6c:64:06:58:91:e0:b6:be:26:fa:d8:e5:1c:1b:
14:64:37:da:42:b3:03:1b:8b:57:94:bd:0f:94:c8:
f2:a4:1a:98:09:77:62:16:49:70:f4:c1:ee:78:78:
cd:f0:56:40:09:90:f6:d9:ab:7e:62:8c:b5:4d:00:
65:32:9b:d1:ca:b9:9e:9a:97:19:cc:e4:c5:bc:2f:
35:65:61:68:5a:f8:85:76:97:41:60:31:c6:70:8e:
4e:55:94:d3:15:48:4d:fd:70:12:42:58:18:e1:96:
cb:64:52:53:06:19:46:14:8f:27:df:64:d9:72:3b:
48:7f:a7:bf:79:df:ef:c0:13:cd:99:09:1a:e8:56:
bd:f8:8c:9d:6d:ad:df:4e:93:5c:ce:67:3d:72:f1:
5a:a1:7f:6f:e4:d3:67:42:a2:3c:5f:6b:ac:2c:80:
4f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5E:51:4C:F1:7B:F2:47:3C:3F:E4:DA:4A:3B:90:59:D0:8D:11:D9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Nl5RTPF78kc8P-TaSjuQWdCNEdk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b2:4c:81:a1:24:f7:90:e4:63:db:7a:f1:67:5c:e5:72:25:a1:
9b:9c:f5:92:4b:42:37:d1:c4:1c:81:b2:e0:91:83:db:8d:44:
6c:ae:6b:ce:72:26:85:2f:3d:72:47:84:8c:32:66:36:28:f2:
d7:43:af:2e:1a:4e:e5:29:8b:9a:06:af:c5:f2:0a:4c:ef:4b:
8c:8f:23:24:57:fd:59:04:f5:81:36:5f:bd:f0:7d:d7:00:c9:
d2:e4:97:35:33:68:bc:e0:f6:09:ab:b6:4b:06:e1:22:55:3f:
b9:48:c8:b9:d4:23:4d:50:ec:d8:be:27:40:cc:f0:7c:9a:9f:
b9:2b:8d:f3:9a:12:30:78:ab:d3:18:bb:b8:76:20:f7:1f:99:
1f:4a:4d:ae:60:80:9b:97:d0:98:70:d8:fb:b4:7b:2c:78:21:
21:39:42:22:73:0a:f0:1a:ee:62:af:3a:d8:41:a1:80:ba:a5:
7e:c5:09:27:bf:e2:10:88:7c:a3:01:51:f0:7a:fe:02:44:9d:
bf:5e:ec:c5:7a:41:8d:f2:45:bd:24:d0:ea:1b:c6:7b:ca:21:
82:45:33:48:19:2d:2f:0f:1a:11:0d:5c:b6:74:be:06:d8:e7:
7b:ff:25:f2:0a:5f:7f:13:c5:97:9b:22:85:25:17:61:aa:77:
4e:af:e6:08
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC3QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
MjI2MzlaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDM2NUU1MTRDRjE3QkYy
NDczQzNGRTREQTRBM0I5MDU5RDA4RDExRDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3Mm9q36TgVd3fsK4gWdYinQuQUZ7dwea7WhT+3oikGVm2Mlzv
7cBny9MIvnPElI+7iiwzOfEb5Z9P3TZmae3GonpV2izEjUSEwO7kzfjy+6xe8qRH
j5EWYklsZAZYkeC2vib62OUcGxRkN9pCswMbi1eUvQ+UyPKkGpgJd2IWSXD0we54
eM3wVkAJkPbZq35ijLVNAGUym9HKuZ6alxnM5MW8LzVlYWha+IV2l0FgMcZwjk5V
lNMVSE39cBJCWBjhlstkUlMGGUYUjyffZNlyO0h/p7953+/AE82ZCRroVr34jJ1t
rd9Ok1zOZz1y8Vqhf2/k02dCojxfa6wsgE9BAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUNl5RTPF78kc8P+TaSjuQWdCNEdkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL05sNVJUUEY3OGtjOFAt
VGFTanVRV2RDTkVkay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALJMgaEk95DkY9t68Wdc5XIl
oZuc9ZJLQjfRxByBsuCRg9uNRGyua85yJoUvPXJHhIwyZjYo8tdDry4aTuUpi5oG
r8XyCkzvS4yPIyRX/VkE9YE2X73wfdcAydLklzUzaLzg9gmrtksG4SJVP7lIyLnU
I01Q7Ni+J0DM8Hyan7krjfOaEjB4q9MYu7h2IPcfmR9KTa5ggJuX0Jhw2Pu0eyx4
ISE5QiJzCvAa7mKvOthBoYC6pX7FCSe/4hCIfKMBUfB6/gJEnb9e7MV6QY3yRb0k
0OobxnvKIYJFM0gZLS8PGhENXLZ0vgbY53v/JfIKX38TxZebIoUlF2Gqd06v5gg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 14:53:50 2025 by rpki-client