Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Rdu6o8KmTBuvh_DWEekbrpYXEmQ.roa
File: Rdu6o8KmTBuvh_DWEekbrpYXEmQ.roa (raw, json)
Hash identifier: tpIo6bahstWr0W6DLiFTg6yw44jFV5RpAT1elyC+uYA=
Subject key identifier: 45:DB:BA:A3:C2:A6:4C:1B:AF:87:F0:D6:11:E9:1B:AE:96:17:12:64
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B84
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Rdu6o8KmTBuvh_DWEekbrpYXEmQ.roa
Signing time: Mon 03 Feb 2025 06:25:37 +0000
ROA not before: Mon 03 Feb 2025 06:25:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2948 (0xb84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 06:25:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=45DBBAA3C2A64C1BAF87F0D611E91BAE96171264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:fe:3b:fb:81:51:6f:a4:6d:09:4c:a9:be:
b8:d9:32:81:79:8b:ba:83:79:c6:7b:95:02:fc:30:
a0:4b:a7:09:b1:d7:f4:48:6c:a3:ed:5a:0c:ca:b9:
12:a8:d3:aa:6a:56:86:56:f5:31:27:6e:6a:a5:37:
a0:8f:e0:71:d1:25:9c:ca:5f:46:bf:d7:b3:e3:ba:
ce:a1:f2:53:f6:24:e3:99:3b:c9:23:e4:7d:e3:14:
d5:6a:9c:4d:9a:b6:84:e1:e4:23:2f:74:da:a9:a1:
51:55:62:b1:2b:39:9b:76:0b:9b:ac:9f:d3:97:68:
18:4a:8d:01:17:bf:75:ed:c1:3e:b0:ae:62:2d:ef:
4b:89:9a:47:47:8c:e3:d5:f4:e4:a7:ad:5a:92:f3:
f4:b6:c2:34:84:85:56:78:28:26:70:b7:1e:f8:49:
47:31:b3:bf:70:b8:c3:a2:3e:99:01:a6:08:20:57:
b1:b3:34:2b:39:49:4a:dc:e5:03:d6:7e:6f:bc:89:
aa:49:94:86:71:c0:22:3c:ad:e2:94:87:d8:37:25:
a8:6b:b1:41:57:96:8f:41:9c:f7:da:b5:f9:02:26:
72:c7:e7:f6:bd:f6:a1:df:bc:3d:98:6f:a4:99:f3:
02:a0:7b:d5:dc:69:78:49:65:86:c1:bb:ef:9a:05:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DB:BA:A3:C2:A6:4C:1B:AF:87:F0:D6:11:E9:1B:AE:96:17:12:64
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Rdu6o8KmTBuvh_DWEekbrpYXEmQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:81:f0:46:4f:05:9f:69:e0:6c:a9:40:10:ae:b1:5a:fa:59:
b0:f4:e3:e9:19:1c:3a:58:ad:67:d5:92:fc:93:75:ca:4d:9a:
00:ce:a0:9f:ae:f7:17:c4:d7:54:da:67:cf:32:be:2b:ee:9d:
3d:a0:8a:f1:21:7d:b0:52:ed:52:38:6c:1b:1f:24:86:85:5c:
ba:b5:d6:87:da:dc:6e:fc:2c:eb:a9:cb:aa:24:ca:64:3b:e5:
e3:c5:48:45:aa:29:19:99:97:5b:3e:bf:8d:03:9a:83:e4:04:
9c:6a:e3:35:c6:92:11:58:b9:1a:c2:3a:aa:bf:36:d6:c3:66:
72:c5:ce:b7:92:b2:92:4b:15:ca:6f:bb:b6:7a:c8:d9:04:bf:
6b:e1:ac:dd:33:5a:60:de:9e:97:4a:f1:20:a1:8f:67:70:fb:
2d:2a:ee:5c:cb:99:da:c2:15:b0:f0:c1:ed:08:0e:6f:25:8f:
6c:ea:00:40:15:50:be:5d:e7:a0:0f:93:bb:2a:2f:be:06:75:
6c:a6:ea:9d:a1:5e:05:01:52:f0:f6:9a:c9:b8:f6:80:c9:d0:
70:ec:52:e4:2a:92:a9:2e:06:72:dd:fd:71:85:2a:78:da:5a:
40:48:9d:a4:f6:4f:99:54:68:ed:6e:86:94:e6:df:a0:e0:c4:
75:e7:84:9c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC4QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
NjI1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ1REJCQUEzQzJBNjRD
MUJBRjg3RjBENjExRTkxQkFFOTYxNzEyNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDM7v47+4FRb6RtCUypvrjZMoF5i7qDecZ7lQL8MKBLpwmx1/RI
bKPtWgzKuRKo06pqVoZW9TEnbmqlN6CP4HHRJZzKX0a/17Pjus6h8lP2JOOZO8kj
5H3jFNVqnE2atoTh5CMvdNqpoVFVYrErOZt2C5usn9OXaBhKjQEXv3XtwT6wrmIt
70uJmkdHjOPV9OSnrVqS8/S2wjSEhVZ4KCZwtx74SUcxs79wuMOiPpkBpgggV7Gz
NCs5SUrc5QPWfm+8iapJlIZxwCI8reKUh9g3JahrsUFXlo9BnPfatfkCJnLH5/a9
9qHfvD2Yb6SZ8wKge9XcaXhJZYbBu++aBRwPAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQURdu6o8KmTBuvh/DWEekbrpYXEmQwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1JkdTZvOEttVEJ1dmhf
RFdFZWticnBZWEVtUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIyB8EZPBZ9p4GypQBCusVr6
WbD04+kZHDpYrWfVkvyTdcpNmgDOoJ+u9xfE11TaZ88yvivunT2givEhfbBS7VI4
bBsfJIaFXLq11ofa3G78LOupy6okymQ75ePFSEWqKRmZl1s+v40DmoPkBJxq4zXG
khFYuRrCOqq/NtbDZnLFzreSspJLFcpvu7Z6yNkEv2vhrN0zWmDenpdK8SChj2dw
+y0q7lzLmdrCFbDwwe0IDm8lj2zqAEAVUL5d56APk7sqL74GdWym6p2hXgUBUvD2
msm49oDJ0HDsUuQqkqkuBnLd/XGFKnjaWkBInaT2T5lUaO1uhpTm36DgxHXnhJw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:48:32 2025 by rpki-client