Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/dFVDY4PDvLUQtepbqA6-FCFt1V8.roa
File: dFVDY4PDvLUQtepbqA6-FCFt1V8.roa (raw, json)
Hash identifier: k7m01naz1NXC9jkBwMj7uFDFgxpKZjMVtuPxkvr7v88=
Subject key identifier: 74:55:43:63:83:C3:BC:B5:10:B5:EA:5B:A8:0E:BE:14:21:6D:D5:5F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B94
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dFVDY4PDvLUQtepbqA6-FCFt1V8.roa
Signing time: Mon 03 Feb 2025 10:26:21 +0000
ROA not before: Mon 03 Feb 2025 10:26:21 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2964 (0xb94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 10:26:21 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7455436383C3BCB510B5EA5BA80EBE14216DD55F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:11:7d:60:6a:e9:91:9d:a3:75:fe:e0:d7:
35:6d:50:9c:34:76:47:2d:88:37:9c:fe:87:0e:3b:
8f:04:90:f6:da:26:fb:00:c7:28:f2:f2:24:a3:6d:
18:79:fc:7e:51:1f:68:c5:54:fb:3a:92:3a:f8:28:
bf:f6:df:92:43:02:47:49:b8:9d:28:f6:69:6f:a3:
33:c2:13:04:4e:49:af:8e:80:69:70:4e:a1:59:1f:
62:1c:e5:25:bd:71:65:05:77:b3:00:32:fb:d3:d4:
1a:4b:74:ad:9d:87:f0:c3:16:c4:20:8a:b6:75:a2:
4b:c8:9b:17:a9:af:04:43:f2:eb:b9:2c:55:65:79:
c9:6b:b8:72:d7:b2:13:4f:21:f2:bb:9f:2c:2c:57:
82:81:19:17:2f:ff:dd:7a:f8:7c:09:76:69:00:f3:
1c:43:5e:7b:5f:5a:16:87:4a:a2:69:2f:2c:e0:df:
71:25:9c:a4:88:12:88:33:bd:d1:40:8e:31:02:f3:
0e:be:fe:7f:9f:72:65:4c:f5:7f:32:a5:b2:d8:a2:
0d:6e:a5:82:d5:0e:ec:80:a8:43:3e:11:e6:43:18:
3c:07:9b:1d:71:d1:41:15:bc:06:8f:99:88:dc:cd:
26:d2:86:59:fa:af:96:de:95:de:1a:fc:6a:eb:3c:
20:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:43:63:83:C3:BC:B5:10:B5:EA:5B:A8:0E:BE:14:21:6D:D5:5F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/dFVDY4PDvLUQtepbqA6-FCFt1V8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
35:5d:a3:41:69:b4:66:4f:de:c4:6d:90:12:a9:27:58:cf:cd:
18:38:d6:13:64:cc:44:43:ba:01:ea:3c:0c:37:35:c3:d6:41:
77:2d:3e:8d:b6:f5:5c:99:a1:79:90:80:49:26:df:0a:02:f3:
7a:f7:38:2e:ba:f3:51:02:91:46:3a:da:0e:87:cd:9b:2f:be:
f4:f2:ab:4b:e4:9b:46:d7:cd:df:6b:33:b5:7f:55:12:1b:2a:
04:e2:70:44:54:c3:f4:3c:99:ae:c7:f0:d7:ea:68:10:db:9d:
26:f7:1a:f5:c6:21:e4:bd:ae:3c:5f:6a:09:ff:e1:74:e9:72:
27:6a:c0:f0:a6:69:75:ea:0a:c1:24:17:39:a5:23:7e:2e:d0:
6d:2f:91:6d:e6:81:d1:69:4a:fc:37:bd:8b:99:65:1c:65:78:
4f:bc:b9:5a:06:a6:ef:12:66:fb:61:10:da:8c:84:e3:1d:eb:
82:55:25:23:42:69:78:44:62:45:d2:10:5f:a1:92:52:7d:ed:
19:6b:4d:e9:35:b2:6e:79:79:99:ec:aa:35:58:b2:e7:1a:0b:
22:28:bd:0d:72:97:ea:c9:34:e9:39:74:95:59:a3:93:82:b8:
f4:c0:aa:21:97:fa:3e:41:1c:56:59:50:b9:12:0a:32:ad:24:
18:c2:33:f9
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMx
MDI2MjFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc0NTU0MzYzODNDM0JD
QjUxMEI1RUE1QkE4MEVCRTE0MjE2REQ1NUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKJBF9YGrpkZ2jdf7g1zVtUJw0dkctiDec/ocOO48EkPbaJvsA
xyjy8iSjbRh5/H5RH2jFVPs6kjr4KL/235JDAkdJuJ0o9mlvozPCEwROSa+OgGlw
TqFZH2Ic5SW9cWUFd7MAMvvT1BpLdK2dh/DDFsQgirZ1okvImxeprwRD8uu5LFVl
eclruHLXshNPIfK7nywsV4KBGRcv/916+HwJdmkA8xxDXntfWhaHSqJpLyzg33El
nKSIEogzvdFAjjEC8w6+/n+fcmVM9X8ypbLYog1upYLVDuyAqEM+EeZDGDwHmx1x
0UEVvAaPmYjczSbShln6r5beld4a/GrrPCB1AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUdFVDY4PDvLUQtepbqA6+FCFt1V8wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2RGVkRZNFBEdkxVUXRl
cGJxQTYtRkNGdDFWOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBADVdo0FptGZP3sRtkBKpJ1jP
zRg41hNkzERDugHqPAw3NcPWQXctPo229VyZoXmQgEkm3woC83r3OC6681ECkUY6
2g6HzZsvvvTyq0vkm0bXzd9rM7V/VRIbKgTicERUw/Q8ma7H8NfqaBDbnSb3GvXG
IeS9rjxfagn/4XTpcidqwPCmaXXqCsEkFzmlI34u0G0vkW3mgdFpSvw3vYuZZRxl
eE+8uVoGpu8SZvthENqMhOMd64JVJSNCaXhEYkXSEF+hklJ97RlrTek1sm55eZns
qjVYsucaCyIovQ1yl+rJNOk5dJVZo5OCuPTAqiGX+j5BHFZZULkSCjKtJBjCM/k=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:58 2025 by rpki-client