Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/PzOeGhU9dB0SldHsZw2XLZL9os0.roa
File: PzOeGhU9dB0SldHsZw2XLZL9os0.roa (raw, json)
Hash identifier: 7U2gw2dlqxPPnNFly0gg7pqTgh50PtRRoxwWNNmdJDg=
Subject key identifier: 3F:33:9E:1A:15:3D:74:1D:12:95:D1:EC:67:0D:97:2D:92:FD:A2:CD
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B68
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PzOeGhU9dB0SldHsZw2XLZL9os0.roa
Signing time: Sun 02 Feb 2025 23:25:36 +0000
ROA not before: Sun 02 Feb 2025 23:25:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2920 (0xb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 23:25:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=3F339E1A153D741D1295D1EC670D972D92FDA2CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:3a:49:54:73:3d:e5:6b:9e:e9:e2:0d:2b:
95:b6:dd:88:a9:89:fc:2d:19:d4:e3:e3:2e:26:fc:
22:0d:76:df:f2:a6:e7:89:79:41:57:4c:78:d2:dd:
fa:d7:77:a0:40:11:2b:5a:1f:fe:2f:1d:2e:1f:69:
48:ec:48:e7:52:4c:7a:3b:ca:83:72:6b:02:11:89:
55:36:6a:1e:88:e0:a3:15:a6:83:0d:cd:af:20:cc:
b5:94:48:4e:6f:5b:e2:32:7e:31:6f:2a:2f:5a:2a:
0a:3e:63:ef:48:47:8d:c4:d4:a3:76:c8:a5:12:37:
2d:27:70:4c:3d:99:6e:65:db:90:d5:37:9f:4c:f2:
c5:77:25:38:f2:a8:e9:b2:89:68:01:cb:39:50:cb:
e9:3d:e1:9a:0e:3c:40:e9:8a:0b:88:46:cc:99:29:
f4:79:e7:8e:82:77:7e:9d:a1:91:27:6c:4b:3e:10:
ea:2d:97:4e:f0:36:a7:79:b5:de:49:29:4f:58:20:
94:b3:20:50:98:a6:df:14:67:37:c8:6e:6a:95:33:
9e:47:d8:f8:06:fc:ff:6c:83:2b:8b:06:74:94:cb:
99:fe:08:22:91:bf:f8:67:12:ff:c0:bc:39:7a:29:
d9:3a:91:5e:2f:95:e2:8b:08:ab:cc:3d:e8:a3:b2:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:33:9E:1A:15:3D:74:1D:12:95:D1:EC:67:0D:97:2D:92:FD:A2:CD
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/PzOeGhU9dB0SldHsZw2XLZL9os0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
14:89:28:b2:74:9e:29:6e:a0:cd:2f:84:db:3b:71:eb:9a:01:
7f:eb:d5:c6:19:51:4d:d8:07:0d:a9:5f:76:7c:0d:eb:13:83:
d8:90:7c:bd:3e:64:c7:65:6d:3b:f2:9a:6e:c2:74:4f:52:2a:
1f:35:d0:ea:67:14:7c:ea:5f:80:d7:3c:69:33:48:7e:05:28:
b6:9a:1c:db:90:df:f5:55:61:92:86:36:29:60:c0:1b:a1:fb:
55:a1:2b:a8:a8:4b:68:23:a2:76:63:c0:69:53:0a:72:4f:e3:
e5:a7:b5:4d:cf:c2:9f:85:01:b8:95:76:f0:fb:57:38:ee:33:
1f:81:ea:4b:4e:0e:e1:5a:77:fa:20:d8:01:56:4e:01:d6:13:
9f:ee:77:e7:9b:da:17:71:c0:70:7e:57:f2:ff:66:9c:2d:7d:
9d:f8:fd:d8:73:85:38:0f:af:77:22:ca:74:14:6a:7f:4d:13:
72:69:b5:a4:09:63:a8:56:32:ed:36:44:98:66:d5:21:65:4e:
2b:13:e8:fc:bf:2a:79:98:c3:79:5f:fc:9e:79:76:67:3f:a4:
ec:d4:b4:f2:f5:4f:9d:bf:64:aa:0b:7e:4d:86:84:fc:a8:35:
74:23:50:bb:b6:c2:8b:16:30:00:c4:29:62:d9:6d:57:a1:c7:
e6:b7:c0:46
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC2gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDIy
MzI1MzZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDNGMzM5RTFBMTUzRDc0
MUQxMjk1RDFFQzY3MEQ5NzJEOTJGREEyQ0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRuDpJVHM95Wue6eINK5W23YipifwtGdTj4y4m/CINdt/ypueJ
eUFXTHjS3frXd6BAEStaH/4vHS4faUjsSOdSTHo7yoNyawIRiVU2ah6I4KMVpoMN
za8gzLWUSE5vW+IyfjFvKi9aKgo+Y+9IR43E1KN2yKUSNy0ncEw9mW5l25DVN59M
8sV3JTjyqOmyiWgByzlQy+k94ZoOPEDpiguIRsyZKfR5546Cd36doZEnbEs+EOot
l07wNqd5td5JKU9YIJSzIFCYpt8UZzfIbmqVM55H2PgG/P9sgyuLBnSUy5n+CCKR
v/hnEv/AvDl6Kdk6kV4vleKLCKvMPeijsjnXAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUPzOeGhU9dB0SldHsZw2XLZL9os0wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1B6T2VHaFU5ZEIwU2xk
SHNadzJYTFpMOW9zMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBABSJKLJ0niluoM0vhNs7ceua
AX/r1cYZUU3YBw2pX3Z8DesTg9iQfL0+ZMdlbTvymm7CdE9SKh810OpnFHzqX4DX
PGkzSH4FKLaaHNuQ3/VVYZKGNilgwBuh+1WhK6ioS2gjonZjwGlTCnJP4+WntU3P
wp+FAbiVdvD7VzjuMx+B6ktODuFad/og2AFWTgHWE5/ud+eb2hdxwHB+V/L/Zpwt
fZ34/dhzhTgPr3ciynQUan9NE3JptaQJY6hWMu02RJhm1SFlTisT6Py/KnmYw3lf
/J55dmc/pOzUtPL1T52/ZKoLfk2GhPyoNXQjULu2wosWMADEKWLZbVehx+a3wEY=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:32:28 2025 by rpki-client