Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/g09DR32o9iqIo9nZHNospuo1_Kk.roa
File: g09DR32o9iqIo9nZHNospuo1_Kk.roa (raw, json)
Hash identifier: bKc0ASrmDK1shXmfJuXFyVEUBGLnQEvVbjI+EbxWnzE=
Subject key identifier: 83:4F:43:47:7D:A8:F6:2A:88:A3:D9:D9:1C:DA:2C:A6:EA:35:FC:A9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 077A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/g09DR32o9iqIo9nZHNospuo1_Kk.roa
Signing time: Thu 23 Jan 2025 11:55:03 +0000
ROA not before: Thu 23 Jan 2025 11:55:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1914 (0x77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 11:55:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=834F43477DA8F62A88A3D9D91CDA2CA6EA35FCA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:bf:47:83:1a:9f:44:4b:22:b6:b8:00:15:
38:2d:dc:53:90:bf:b8:0f:8f:4f:55:0a:bc:27:50:
2f:54:81:58:88:e6:51:8f:a1:a4:e0:34:70:22:46:
9b:c6:ba:30:92:c5:ed:39:7c:5d:85:71:1f:2c:81:
e2:95:3f:88:93:36:e5:6a:fd:64:cf:9b:ac:63:6b:
b7:0d:bc:b9:86:aa:f7:7b:78:ee:c4:5c:ee:4f:99:
b2:7d:b0:c4:69:69:3e:79:4f:be:86:3e:6d:44:0a:
74:57:bb:d1:7e:69:3a:f5:3f:fc:25:e4:68:62:ac:
a1:42:af:ed:9f:f9:09:d4:78:1e:46:53:9b:19:aa:
2f:5f:1d:fa:e2:51:63:84:c6:16:19:e0:0e:2c:41:
38:8d:0b:0c:7b:35:e3:3f:9a:75:04:2a:77:06:cb:
bf:f2:bf:d6:0e:26:1c:2c:8d:05:9d:e9:f7:c5:04:
5e:6c:7b:95:cb:2c:da:3c:2c:9b:48:fe:9f:b3:b7:
c4:13:8e:a3:10:61:a3:a5:0f:57:75:1d:27:bc:45:
b1:10:c4:37:93:17:91:e7:8a:d0:64:87:18:fa:c0:
43:93:6c:fa:f9:2f:00:80:91:f1:1b:d4:1f:a0:22:
1a:13:76:8c:b7:25:86:10:04:fc:27:60:9f:f1:6d:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4F:43:47:7D:A8:F6:2A:88:A3:D9:D9:1C:DA:2C:A6:EA:35:FC:A9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/g09DR32o9iqIo9nZHNospuo1_Kk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:ed:d2:a4:68:9e:ae:cd:2c:23:21:79:6e:ec:2b:25:d5:ce:
e7:d6:6d:2d:df:1b:0f:9c:d7:f4:03:9d:c8:5a:64:99:de:00:
a1:ad:6d:54:c8:ed:d3:96:87:14:3d:d3:08:ae:32:72:d1:95:
60:2d:bb:7d:f5:ed:13:a1:21:28:db:51:99:06:2e:7d:08:ac:
69:3f:ff:01:04:2b:d8:a0:57:f4:0d:0a:32:d7:8e:9b:6d:8b:
40:c0:9b:10:14:bd:f2:9c:bf:aa:1b:95:1d:80:64:92:91:7a:
bb:f3:18:56:d9:f4:5c:69:6f:a6:c4:36:24:e2:40:44:fe:18:
0c:36:f0:cd:1b:89:fc:7e:d8:f2:d2:2b:46:d1:78:f6:6c:63:
39:cd:d4:83:d5:43:be:0f:81:ea:c8:57:5f:af:34:75:20:af:
7e:1c:3a:05:9b:46:6b:4e:6b:29:7e:c2:1f:39:bb:f0:33:ba:
55:65:b4:f0:fc:46:73:8c:4b:ab:ca:40:bb:52:03:b1:96:8e:
04:92:9f:1c:45:0f:a0:cd:39:75:52:12:d9:73:08:c5:25:5b:
1a:ec:53:d0:73:7b:ae:7d:5a:e1:1f:03:cf:e5:a3:ae:c9:a9:
d4:ef:f7:4a:a0:24:e2:61:c3:17:a0:e9:5e:cf:5f:14:02:6c:
40:e5:61:29
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjMx
MTU1MDNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDgzNEY0MzQ3N0RBOEY2
MkE4OEEzRDlEOTFDREEyQ0E2RUEzNUZDQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeeL9HgxqfREsitrgAFTgt3FOQv7gPj09VCrwnUC9UgViI5lGP
oaTgNHAiRpvGujCSxe05fF2FcR8sgeKVP4iTNuVq/WTPm6xja7cNvLmGqvd7eO7E
XO5PmbJ9sMRpaT55T76GPm1ECnRXu9F+aTr1P/wl5GhirKFCr+2f+QnUeB5GU5sZ
qi9fHfriUWOExhYZ4A4sQTiNCwx7NeM/mnUEKncGy7/yv9YOJhwsjQWd6ffFBF5s
e5XLLNo8LJtI/p+zt8QTjqMQYaOlD1d1HSe8RbEQxDeTF5HnitBkhxj6wEOTbPr5
LwCAkfEb1B+gIhoTdoy3JYYQBPwnYJ/xbZ/dAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUg09DR32o9iqIo9nZHNospuo1/KkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2cwOURSMzJvOWlxSW85
blpITm9zcHVvMV9Lay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBACvt0qRonq7NLCMheW7sKyXV
zufWbS3fGw+c1/QDnchaZJneAKGtbVTI7dOWhxQ90wiuMnLRlWAtu3317ROhISjb
UZkGLn0IrGk//wEEK9igV/QNCjLXjptti0DAmxAUvfKcv6oblR2AZJKRervzGFbZ
9Fxpb6bENiTiQET+GAw28M0bifx+2PLSK0bRePZsYznN1IPVQ74PgerIV1+vNHUg
r34cOgWbRmtOayl+wh85u/AzulVltPD8RnOMS6vKQLtSA7GWjgSSnxxFD6DNOXVS
EtlzCMUlWxrsU9Bze659WuEfA8/lo67JqdTv90qgJOJhwxeg6V7PXxQCbEDlYSk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:40 2025 by rpki-client