Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Unp4wpJXihWZ5kxx1SUEsw7wEac.roa
File: Unp4wpJXihWZ5kxx1SUEsw7wEac.roa (raw, json)
Hash identifier: U5oqD5UfhYgak6ZxHozlTzP+m3g4OSRrSGorq8V6hxw=
Subject key identifier: 52:7A:78:C2:92:57:8A:15:99:E6:4C:71:D5:25:04:B3:0E:F0:11:A7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BC8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Unp4wpJXihWZ5kxx1SUEsw7wEac.roa
Signing time: Mon 03 Feb 2025 23:25:38 +0000
ROA not before: Mon 03 Feb 2025 23:25:38 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3016 (0xbc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 23:25:38 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=527A78C292578A1599E64C71D52504B30EF011A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:e2:0c:ff:15:fa:24:0f:ac:7b:8d:4f:d6:
da:5a:39:c6:38:a8:85:fe:e7:bb:4a:94:4f:d7:d1:
76:64:93:96:8e:2c:c1:b0:00:17:90:fd:17:57:b8:
b9:3f:26:81:61:d1:33:5a:06:56:14:4f:a2:2a:e5:
df:d2:7d:b5:30:48:be:df:9d:ed:74:ca:de:9d:ab:
99:65:62:0e:56:4c:13:3b:ab:d4:7d:96:7a:e6:48:
f8:38:39:51:72:28:ce:32:3d:5c:74:c3:17:49:7e:
7b:bc:41:b5:21:91:7c:69:1a:89:21:b8:fa:5f:e0:
23:4c:63:11:32:84:fb:66:00:99:aa:56:b0:fc:30:
ea:50:1b:d9:71:7e:bf:ce:d0:ed:bf:49:b9:db:bf:
e2:6c:ca:94:8c:5c:74:4f:76:e0:ba:60:f6:55:09:
27:21:9e:20:cb:a7:4b:2b:c9:b5:f9:2a:bd:b1:3e:
62:0b:81:19:cf:ef:53:5e:75:db:2d:80:6e:4f:e0:
f6:57:37:fc:50:dd:fd:65:a0:ae:fc:54:5b:43:e0:
be:83:58:fc:00:75:5d:3e:56:19:0f:8b:5a:4a:3b:
ab:b7:97:d7:a1:78:41:9d:69:64:d0:fb:30:24:74:
81:34:5d:df:b8:09:59:53:c4:dc:a1:f2:f0:6f:e3:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7A:78:C2:92:57:8A:15:99:E6:4C:71:D5:25:04:B3:0E:F0:11:A7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Unp4wpJXihWZ5kxx1SUEsw7wEac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:38:67:d3:ae:ed:87:46:89:d5:28:c2:9b:df:c1:91:09:bf:
7e:8e:88:ae:0f:e5:12:06:c7:e5:7f:8b:9c:24:6b:bd:66:7f:
b3:ad:ca:d6:0b:03:d2:ff:1c:f6:ca:e1:94:bf:e3:f1:7a:f4:
9b:e0:3f:65:fd:3d:5d:e6:af:ed:9d:c8:a8:b0:40:33:a8:6b:
44:4a:bc:39:72:b2:8f:c0:06:8b:e2:39:68:09:11:54:3d:d0:
1a:4c:5d:13:29:d4:54:06:fb:b2:c8:5b:e4:27:be:47:20:4e:
56:02:a2:70:89:39:ed:d3:1b:a2:9f:b4:0a:e7:1c:2c:01:bb:
56:67:8e:6f:83:81:20:96:b3:ed:f2:88:54:a6:d7:58:ec:63:
ea:de:a7:bc:c6:ab:5e:3d:c3:99:69:f8:58:e4:99:50:54:56:
66:87:a4:43:14:84:5a:56:08:e7:b7:08:bc:d0:8d:14:f7:86:
a4:63:5d:57:7d:cd:cf:8c:a6:c8:c6:c7:10:23:54:dc:ca:e1:
50:bd:c9:a2:6b:ce:e1:be:aa:cc:0c:cc:5b:af:ed:2a:4b:dc:
dc:be:a8:3a:f8:28:e1:0d:04:a7:0f:a5:52:68:99:fb:11:fb:
4a:03:63:16:c8:6f:ac:43:e7:0b:1a:2d:0e:21:cd:3d:64:31:
1b:44:dd:90
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC8gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMy
MzI1MzhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUyN0E3OEMyOTI1NzhB
MTU5OUU2NEM3MUQ1MjUwNEIzMEVGMDExQTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK0eIM/xX6JA+se41P1tpaOcY4qIX+57tKlE/X0XZkk5aOLMGw
ABeQ/RdXuLk/JoFh0TNaBlYUT6Iq5d/SfbUwSL7fne10yt6dq5llYg5WTBM7q9R9
lnrmSPg4OVFyKM4yPVx0wxdJfnu8QbUhkXxpGokhuPpf4CNMYxEyhPtmAJmqVrD8
MOpQG9lxfr/O0O2/Sbnbv+JsypSMXHRPduC6YPZVCSchniDLp0srybX5Kr2xPmIL
gRnP71NeddstgG5P4PZXN/xQ3f1loK78VFtD4L6DWPwAdV0+VhkPi1pKO6u3l9eh
eEGdaWTQ+zAkdIE0Xd+4CVlTxNyh8vBv42+xAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUUnp4wpJXihWZ5kxx1SUEsw7wEacwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1VucDR3cEpYaWhXWjVr
eHgxU1VFc3c3d0VhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALU4Z9Ou7YdGidUowpvfwZEJ
v36OiK4P5RIGx+V/i5wka71mf7OtytYLA9L/HPbK4ZS/4/F69JvgP2X9PV3mr+2d
yKiwQDOoa0RKvDlyso/ABoviOWgJEVQ90BpMXRMp1FQG+7LIW+QnvkcgTlYConCJ
Oe3TG6KftArnHCwBu1Znjm+DgSCWs+3yiFSm11jsY+rep7zGq149w5lp+FjkmVBU
VmaHpEMUhFpWCOe3CLzQjRT3hqRjXVd9zc+MpsjGxxAjVNzK4VC9yaJrzuG+qswM
zFuv7SpL3Ny+qDr4KOENBKcPpVJomfsR+0oDYxbIb6xD5wsaLQ4hzT1kMRtE3ZA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:30 2025 by rpki-client