Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/d-oH7ypxdCS4oW4YPQF8wLsWjZs.roa
File: d-oH7ypxdCS4oW4YPQF8wLsWjZs.roa (raw, json)
Hash identifier: A3uq/XLhv+2wlSaYWyP3jpPp3NFcgblaND6aWP3z8qc=
Subject key identifier: 77:EA:07:EF:2A:71:74:24:B8:A1:6E:18:3D:01:7C:C0:BB:16:8D:9B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D6E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d-oH7ypxdCS4oW4YPQF8wLsWjZs.roa
Signing time: Sat 08 Feb 2025 08:55:51 +0000
ROA not before: Sat 08 Feb 2025 08:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3438 (0xd6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 8 08:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=77EA07EF2A717424B8A16E183D017CC0BB168D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:07:25:e9:1b:45:34:bf:3e:a5:b1:57:7d:
41:dc:9d:e1:7c:8c:66:c4:eb:07:a6:73:fc:b4:bb:
7b:85:50:f2:e4:d1:04:0f:8d:ff:07:2b:5a:e1:55:
96:46:6c:b8:48:4c:71:7d:c8:5c:0d:26:63:72:f6:
09:21:69:4f:80:05:20:55:d6:0e:05:d8:27:f2:10:
3b:d4:7c:c6:c2:a5:87:92:22:03:95:ac:0c:9a:48:
c5:ef:5f:b2:84:52:6f:05:46:32:5d:c3:81:de:6c:
75:09:95:72:98:9e:0d:a3:f0:68:47:9e:cf:88:ad:
38:5d:a7:0a:4c:14:f6:bf:91:b8:3f:ae:48:cc:cf:
3a:12:08:e6:95:2a:99:eb:8f:db:90:3d:2a:e8:98:
5b:be:f7:df:e3:7c:7e:7c:42:28:e1:ec:a1:c9:6b:
a9:db:90:f3:c4:e3:ed:65:39:13:e2:2b:9b:98:9c:
f2:cd:f4:79:7d:d8:80:34:9b:6e:b3:c8:f1:b1:29:
3e:72:7d:1c:59:78:0b:7f:21:8f:90:6b:e4:5c:1c:
f8:3a:00:99:92:3e:aa:8c:67:b8:11:4e:3b:e7:cf:
09:25:2e:30:80:f4:85:53:c8:11:a8:32:e5:46:81:
7d:53:35:1a:6d:96:cc:02:f8:93:92:e4:d7:ab:60:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:07:EF:2A:71:74:24:B8:A1:6E:18:3D:01:7C:C0:BB:16:8D:9B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d-oH7ypxdCS4oW4YPQF8wLsWjZs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
59:6a:dc:15:40:46:08:41:00:5f:2c:1e:ff:c7:fd:ce:d1:22:
78:12:e4:f3:d5:f0:d1:31:1f:1b:38:42:8e:b0:1d:3f:7e:62:
30:2c:23:ee:36:1d:3d:de:f0:2c:3f:f3:61:e6:d4:e9:bb:cb:
9c:1a:bb:79:64:ee:54:8e:a5:be:47:d1:2a:3e:27:68:d0:f9:
4e:bb:18:32:2e:49:a2:0e:1d:3a:0b:f3:a9:6d:b8:f7:78:83:
13:b8:12:bb:cd:26:8f:55:16:97:61:06:50:4b:af:95:ef:5b:
b2:40:e1:f4:71:da:e1:bb:05:ea:e3:1f:ac:72:53:8a:ce:4c:
fc:34:e0:fd:9e:d1:f7:c2:ce:29:6b:22:81:f4:c1:64:6f:07:
f6:a6:01:f8:0d:44:19:e9:c4:65:1d:5f:ac:b6:e8:b2:e7:7c:
06:71:d9:d7:4e:e1:04:bb:3c:ca:94:75:58:ba:36:ca:6e:0e:
7e:c4:72:cc:9a:cd:9b:9e:03:c3:dc:d1:c4:ad:88:58:e6:17:
9c:54:bb:3f:85:a0:70:74:2a:54:5e:56:e3:df:f4:e8:9c:d5:
82:d3:65:e1:90:d0:0c:10:a2:52:c4:4e:92:d8:cf:4c:c9:32:
36:aa:d8:02:db:51:d9:0c:1b:c4:15:55:9d:aa:b1:96:8f:1e:
2c:80:5e:4a
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDgw
ODU1NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc3RUEwN0VGMkE3MTc0
MjRCOEExNkUxODNEMDE3Q0MwQkIxNjhEOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDF1wcl6RtFNL8+pbFXfUHcneF8jGbE6wemc/y0u3uFUPLk0QQP
jf8HK1rhVZZGbLhITHF9yFwNJmNy9gkhaU+ABSBV1g4F2CfyEDvUfMbCpYeSIgOV
rAyaSMXvX7KEUm8FRjJdw4HebHUJlXKYng2j8GhHns+IrThdpwpMFPa/kbg/rkjM
zzoSCOaVKpnrj9uQPSromFu+99/jfH58Qijh7KHJa6nbkPPE4+1lORPiK5uYnPLN
9Hl92IA0m26zyPGxKT5yfRxZeAt/IY+Qa+RcHPg6AJmSPqqMZ7gRTjvnzwklLjCA
9IVTyBGoMuVGgX1TNRptlswC+JOS5NerYM/BAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUd+oH7ypxdCS4oW4YPQF8wLsWjZswHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2Qtb0g3eXB4ZENTNG9X
NFlQUUY4d0xzV2pacy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFlq3BVARghBAF8sHv/H/c7R
IngS5PPV8NExHxs4Qo6wHT9+YjAsI+42HT3e8Cw/82Hm1Om7y5wau3lk7lSOpb5H
0So+J2jQ+U67GDIuSaIOHToL86ltuPd4gxO4ErvNJo9VFpdhBlBLr5XvW7JA4fRx
2uG7BerjH6xyU4rOTPw04P2e0ffCzilrIoH0wWRvB/amAfgNRBnpxGUdX6y26LLn
fAZx2ddO4QS7PMqUdVi6NspuDn7EcsyazZueA8Pc0cStiFjmF5xUuz+FoHB0KlRe
VuPf9Oic1YLTZeGQ0AwQolLETpLYz0zJMjaq2ALbUdkMG8QVVZ2qsZaPHiyAXko=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:41 2025 by rpki-client