Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/P1iVo4zsa2y7jVvwwrH7rITSQz4.roa
File: P1iVo4zsa2y7jVvwwrH7rITSQz4.roa (raw, json)
Hash identifier: WNMgVuWOorboeklB6po8Jo0qpyhjY5ayUpyPdC7hdFY=
Subject key identifier: 3F:58:95:A3:8C:EC:6B:6C:BB:8D:5B:F0:C2:B1:FB:AC:84:D2:43:3E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D06
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/P1iVo4zsa2y7jVvwwrH7rITSQz4.roa
Signing time: Fri 07 Feb 2025 06:57:42 +0000
ROA not before: Fri 07 Feb 2025 06:57:42 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3334 (0xd06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 06:57:42 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3F5895A38CEC6B6CBB8D5BF0C2B1FBAC84D2433E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:c9:7d:c8:6d:6f:d4:0c:d4:91:6b:d9:a3:
99:47:59:0b:b7:60:cf:76:70:aa:5b:8e:8f:74:43:
3c:af:ee:d4:22:77:b7:ff:9b:59:97:c0:bb:8f:b1:
ce:6e:7f:24:f0:54:a2:ea:8b:84:96:76:56:52:db:
50:13:91:9f:06:85:4e:78:f2:51:19:44:2c:da:de:
51:46:7b:c3:02:12:83:92:d4:0a:a4:f7:36:a2:2f:
cd:21:01:6b:bf:8e:27:e9:51:a2:ef:5c:3e:92:3a:
ee:9c:6e:ca:60:fa:20:51:1c:1c:19:c0:b8:98:13:
09:cc:8c:d7:4a:42:94:9c:24:20:e2:7e:38:79:f5:
62:f4:61:8e:65:a0:dd:ea:bf:15:d2:cc:33:dd:b0:
91:ed:ad:e0:73:05:b5:bb:72:90:31:44:4f:5e:1b:
11:b1:0b:89:b4:63:aa:3f:c0:46:df:57:3a:ac:1e:
96:f1:e2:01:0e:69:f9:b4:61:eb:75:b2:00:8f:65:
66:2d:5a:18:5b:67:ea:5c:34:7b:07:a7:49:cf:06:
40:71:06:81:e5:75:38:74:f2:79:bd:d9:ff:b7:2f:
a4:41:05:fb:6c:23:c2:e3:1e:6e:26:38:a3:c7:9b:
50:9b:ca:4b:33:19:57:a4:dc:19:56:b8:77:3f:93:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:95:A3:8C:EC:6B:6C:BB:8D:5B:F0:C2:B1:FB:AC:84:D2:43:3E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/P1iVo4zsa2y7jVvwwrH7rITSQz4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
90:35:67:cc:e5:a6:76:e5:19:53:73:ba:72:55:8f:49:d8:70:
12:71:f8:ef:89:77:57:d7:8f:59:3b:95:3a:0c:b0:e6:9e:64:
a3:db:ab:b5:45:6b:c5:0b:ad:45:02:6e:b5:20:2f:2a:ab:8a:
4f:65:a6:b3:7a:ff:d9:3e:20:78:0d:11:96:15:84:54:4d:07:
65:2f:c3:9c:ca:1f:11:af:ed:06:78:80:db:cf:61:bb:cc:39:
9c:45:76:ec:bd:73:44:5a:e6:22:89:26:42:f2:a5:3c:da:42:
6d:ab:01:5e:9f:60:49:0c:dd:f6:0a:5c:67:a5:a4:ca:11:08:
7f:3e:b5:ac:3c:98:ad:c9:f2:6c:2c:14:a1:8a:23:05:58:8a:
e1:5b:b1:d0:74:17:dd:da:2f:7c:5a:e8:d9:f5:5a:1f:11:67:
bd:53:a1:2f:63:82:4e:fe:48:bb:5f:d3:29:c0:16:5f:cd:d0:
64:4d:6a:bd:e7:22:3c:bd:82:50:db:97:e3:a4:65:89:17:54:
35:00:35:b5:b5:4c:fb:fd:98:ee:9a:6a:a8:66:13:f7:c3:ca:
bb:49:49:1e:af:05:83:dd:d9:cb:87:9d:2e:e0:01:93:69:f9:
2c:90:3e:50:4f:47:fb:47:2c:71:5a:5c:2d:09:f8:2a:fb:21:
5c:5a:b8:ae
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDcw
NjU3NDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNGNTg5NUEzOENFQzZC
NkNCQjhENUJGMEMyQjFGQkFDODREMjQzM0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIEsl9yG1v1AzUkWvZo5lHWQu3YM92cKpbjo90Qzyv7tQid7f/
m1mXwLuPsc5ufyTwVKLqi4SWdlZS21ATkZ8GhU548lEZRCza3lFGe8MCEoOS1Aqk
9zaiL80hAWu/jifpUaLvXD6SOu6cbspg+iBRHBwZwLiYEwnMjNdKQpScJCDifjh5
9WL0YY5loN3qvxXSzDPdsJHtreBzBbW7cpAxRE9eGxGxC4m0Y6o/wEbfVzqsHpbx
4gEOafm0Yet1sgCPZWYtWhhbZ+pcNHsHp0nPBkBxBoHldTh08nm92f+3L6RBBfts
I8LjHm4mOKPHm1CbykszGVek3BlWuHc/kyDbAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUP1iVo4zsa2y7jVvwwrH7rITSQz4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1AxaVZvNHpzYTJ5N2pW
dnd3ckg3cklUU1F6NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAJA1Z8zlpnblGVNzunJVj0nY
cBJx+O+Jd1fXj1k7lToMsOaeZKPbq7VFa8ULrUUCbrUgLyqrik9lprN6/9k+IHgN
EZYVhFRNB2Uvw5zKHxGv7QZ4gNvPYbvMOZxFduy9c0Ra5iKJJkLypTzaQm2rAV6f
YEkM3fYKXGelpMoRCH8+taw8mK3J8mwsFKGKIwVYiuFbsdB0F93aL3xa6Nn1Wh8R
Z71ToS9jgk7+SLtf0ynAFl/N0GRNar3nIjy9glDbl+OkZYkXVDUANbW1TPv9mO6a
aqhmE/fDyrtJSR6vBYPd2cuHnS7gAZNp+SyQPlBPR/tHLHFaXC0J+Cr7IVxauK4=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:41:40 2025 by rpki-client