Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/eU94IFoItzUP72ddhR8skWAiOec.roa
File: eU94IFoItzUP72ddhR8skWAiOec.roa (raw, json)
Hash identifier: X+rDdDS1FgEfKrRo2L35WOnRUFWxLBZ4VZ/q74bhMqM=
Subject key identifier: 79:4F:78:20:5A:08:B7:35:0F:EF:67:5D:85:1F:2C:91:60:22:39:E7
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C9C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eU94IFoItzUP72ddhR8skWAiOec.roa
Signing time: Thu 06 Feb 2025 04:25:46 +0000
ROA not before: Thu 06 Feb 2025 04:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3228 (0xc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 04:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=794F78205A08B7350FEF675D851F2C91602239E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:28:f3:c8:39:5f:ae:aa:dc:57:fd:31:8e:
7e:08:f8:a3:0e:b9:02:d4:8f:c8:1d:51:7b:dd:a0:
17:82:df:25:62:85:6e:a2:d2:31:92:e9:49:f9:97:
d8:19:70:70:62:38:61:d2:56:5d:3d:b0:ae:78:b3:
1a:38:cc:79:af:3c:f9:e1:82:92:5e:38:b4:55:6c:
61:db:3c:c0:19:4d:40:26:f1:94:0b:ae:0c:65:a9:
4e:01:21:ab:2b:bd:a1:9d:b9:6f:91:cd:68:1c:2c:
fd:fe:1e:b8:1a:95:5f:46:a0:04:34:6e:5b:6d:02:
5c:be:ef:60:10:6e:0a:f9:a9:21:54:51:5e:e1:50:
e9:ea:75:1e:cb:23:15:fe:cb:a8:8f:27:07:e7:e2:
79:ad:b6:ce:96:af:e9:3a:1a:8e:d5:17:8c:38:a1:
59:a4:58:bd:23:1c:d7:b2:19:0d:d4:58:8d:ad:36:
7d:26:a7:8a:3b:72:18:a1:76:15:57:c1:10:42:b1:
86:a0:9b:51:4e:af:0d:64:7d:02:21:29:d1:58:ce:
9b:6b:e6:46:c8:33:24:c1:b3:1d:98:e8:6e:6d:76:
ab:65:c7:e5:69:eb:c6:21:7a:48:39:94:83:e5:14:
4c:97:65:3e:ea:67:ff:b3:47:aa:4e:15:50:bd:fd:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4F:78:20:5A:08:B7:35:0F:EF:67:5D:85:1F:2C:91:60:22:39:E7
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/eU94IFoItzUP72ddhR8skWAiOec.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
75:02:e9:99:ec:bf:69:64:24:27:65:b9:c6:01:ab:5c:b2:3a:
64:8e:50:a3:50:13:6c:ea:6d:93:47:70:5d:cf:64:4c:1e:fc:
be:9e:79:90:5a:ef:ba:a3:29:d4:ee:68:5d:28:16:66:86:44:
7c:3f:75:c5:01:49:b8:78:c2:11:3f:79:64:56:66:2e:5e:7d:
9f:60:a0:1b:30:db:e4:9e:59:49:90:ea:b2:21:61:b3:35:3c:
6d:dc:46:72:ef:48:f9:f5:0a:e4:d3:42:fa:10:52:a0:fb:d4:
d3:06:ba:fa:82:5a:f8:8b:ed:f8:37:c0:21:ec:50:46:8e:9f:
49:10:be:51:93:ba:b4:71:4e:bc:8e:4d:8c:6b:07:bc:b0:e5:
7f:9d:48:33:3e:0a:c3:bd:7c:df:ce:5f:76:92:40:2b:14:cc:
1d:83:69:a0:b4:b7:b6:9f:47:71:5c:d1:4b:29:35:aa:01:40:
7f:24:c8:65:ee:12:60:77:15:0a:de:66:ff:71:e6:42:70:4a:
0f:3f:36:47:61:92:e2:ec:da:54:4a:03:fc:fc:af:97:7f:77:
38:ad:86:aa:2a:83:d9:40:d3:e5:64:4c:56:c3:da:ba:f9:ae:
65:76:8a:27:ff:28:6f:d2:3d:43:88:da:39:20:b2:01:f2:80:
d6:49:c9:69
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDJwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDYw
NDI1NDZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc5NEY3ODIwNUEwOEI3
MzUwRkVGNjc1RDg1MUYyQzkxNjAyMjM5RTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCbyjzyDlfrqrcV/0xjn4I+KMOuQLUj8gdUXvdoBeC3yVihW6i
0jGS6Un5l9gZcHBiOGHSVl09sK54sxo4zHmvPPnhgpJeOLRVbGHbPMAZTUAm8ZQL
rgxlqU4BIasrvaGduW+RzWgcLP3+HrgalV9GoAQ0blttAly+72AQbgr5qSFUUV7h
UOnqdR7LIxX+y6iPJwfn4nmtts6Wr+k6Go7VF4w4oVmkWL0jHNeyGQ3UWI2tNn0m
p4o7chihdhVXwRBCsYagm1FOrw1kfQIhKdFYzptr5kbIMyTBsx2Y6G5tdqtlx+Vp
68Yhekg5lIPlFEyXZT7qZ/+zR6pOFVC9/ZVPAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUeU94IFoItzUP72ddhR8skWAiOecwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2VVOTRJRm9JdHpVUDcy
ZGRoUjhza1dBaU9lYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAHUC6Znsv2lkJCdlucYBq1yy
OmSOUKNQE2zqbZNHcF3PZEwe/L6eeZBa77qjKdTuaF0oFmaGRHw/dcUBSbh4whE/
eWRWZi5efZ9goBsw2+SeWUmQ6rIhYbM1PG3cRnLvSPn1CuTTQvoQUqD71NMGuvqC
WviL7fg3wCHsUEaOn0kQvlGTurRxTryOTYxrB7yw5X+dSDM+CsO9fN/OX3aSQCsU
zB2DaaC0t7afR3Fc0UspNaoBQH8kyGXuEmB3FQreZv9x5kJwSg8/NkdhkuLs2lRK
A/z8r5d/dzithqoqg9lA0+VkTFbD2rr5rmV2iif/KG/SPUOI2jkgsgHygNZJyWk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:54 2025 by rpki-client