Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/p2d7NKmqmGN-dP1MmlB2xXkCj6Q.roa
File: p2d7NKmqmGN-dP1MmlB2xXkCj6Q.roa (raw, json)
Hash identifier: 4EcvyCPxmVj60NMZ39nSbgJEf3q3C5I8VTG+m8ZXuWY=
Subject key identifier: A7:67:7B:34:A9:AA:98:63:7E:74:FD:4C:9A:50:76:C5:79:02:8F:A4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D46
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p2d7NKmqmGN-dP1MmlB2xXkCj6Q.roa
Signing time: Fri 07 Feb 2025 22:55:50 +0000
ROA not before: Fri 07 Feb 2025 22:55:50 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3398 (0xd46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 22:55:50 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A7677B34A9AA98637E74FD4C9A5076C579028FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:97:38:65:dd:3f:f7:2a:3d:ac:d2:d3:76:87:
1e:8e:77:52:e6:5a:6c:45:ff:dd:4e:02:90:ed:ca:
e1:25:ca:c4:e5:78:e7:92:6a:0a:e6:b8:5b:82:56:
3e:42:66:ae:45:a3:ac:e8:d3:33:0c:c5:0f:fc:5c:
c4:1b:23:40:e4:24:54:2a:ee:e8:39:b2:88:6b:96:
41:c4:1b:0e:8b:71:9e:cd:a8:d7:db:34:5f:cb:af:
2e:ac:a4:b1:00:f1:91:57:a3:67:d5:67:c8:59:e6:
47:55:64:a0:bf:25:6b:bb:93:05:6f:a4:ed:80:05:
99:64:6b:10:84:91:7d:df:f1:09:a9:7f:a5:fb:03:
1d:b9:50:97:ff:b9:c7:9e:52:58:5d:a8:38:80:39:
d7:73:8d:9a:26:2a:ce:b6:80:bf:3b:30:27:17:45:
37:c6:34:e7:c0:e8:a9:09:af:bd:5e:d0:1b:7c:ae:
fe:fe:86:78:53:98:7a:d7:7d:24:77:1b:10:e4:dd:
ac:c3:fd:a3:98:84:f0:15:05:b9:9f:06:4b:e1:7c:
84:f6:7e:ad:50:aa:5f:46:35:14:9e:62:25:ee:fa:
94:81:b0:5b:63:c4:9a:21:aa:34:f5:91:9a:6f:a4:
dc:6d:32:e1:d0:a6:8a:37:7a:5c:ce:9b:56:ff:cf:
2e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:7B:34:A9:AA:98:63:7E:74:FD:4C:9A:50:76:C5:79:02:8F:A4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/p2d7NKmqmGN-dP1MmlB2xXkCj6Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:f2:20:b2:fe:d5:29:35:93:89:ca:20:54:49:e9:26:c1:c0:
d9:2b:2b:92:b7:23:97:33:49:0a:cb:8a:27:95:2f:c0:14:ac:
4c:fb:74:e7:bc:f7:b6:6f:c0:e0:bf:10:d2:9d:92:fc:4b:a3:
90:8d:fa:16:63:d5:f9:9e:ae:77:b7:3c:7b:38:a8:20:f2:f8:
3e:62:7b:dd:8c:17:a3:b5:60:a1:df:1d:4f:04:16:1f:b4:62:
0b:d5:32:a1:7f:c2:e1:7f:2a:22:58:df:38:3e:ec:96:a8:0c:
2a:11:74:ad:67:d9:1c:82:29:ff:2b:c7:44:3d:f9:cb:a0:42:
04:9c:93:4e:cb:3e:65:c3:6d:13:e2:7a:99:53:c2:76:75:03:
7f:26:8b:2f:ca:8c:e6:4c:cc:1a:7b:ed:39:f2:8c:5c:54:1a:
d3:04:f6:c6:a8:de:8d:85:68:d6:4f:da:88:7f:d0:e8:b9:3a:
5c:a3:01:26:65:ae:5e:c0:ed:16:a2:aa:ef:ae:e8:bd:53:81:
0d:ca:e9:0b:66:bf:1b:50:5c:c5:f0:84:49:88:e4:40:11:80:
b9:ae:11:7d:82:97:60:ac:90:9b:dc:6f:aa:e8:57:ef:44:b8:
71:76:99:56:e8:a0:63:a1:fd:c8:d9:c6:e7:af:ed:14:24:9e:
97:d2:61:35
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDcy
MjU1NTBaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEE3Njc3QjM0QTlBQTk4
NjM3RTc0RkQ0QzlBNTA3NkM1NzkwMjhGQTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCilzhl3T/3Kj2s0tN2hx6Od1LmWmxF/91OApDtyuElysTleOeS
agrmuFuCVj5CZq5Fo6zo0zMMxQ/8XMQbI0DkJFQq7ug5sohrlkHEGw6LcZ7NqNfb
NF/Lry6spLEA8ZFXo2fVZ8hZ5kdVZKC/JWu7kwVvpO2ABZlkaxCEkX3f8Qmpf6X7
Ax25UJf/uceeUlhdqDiAOddzjZomKs62gL87MCcXRTfGNOfA6KkJr71e0Bt8rv7+
hnhTmHrXfSR3GxDk3azD/aOYhPAVBbmfBkvhfIT2fq1Qql9GNRSeYiXu+pSBsFtj
xJohqjT1kZpvpNxtMuHQpoo3elzOm1b/zy6LAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUp2d7NKmqmGN+dP1MmlB2xXkCj6QwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3AyZDdOS21xbUdOLWRQ
MU1tbEIyeFhrQ2o2US5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAC7yILL+1Sk1k4nKIFRJ6SbB
wNkrK5K3I5czSQrLiieVL8AUrEz7dOe897ZvwOC/ENKdkvxLo5CN+hZj1fmerne3
PHs4qCDy+D5ie92MF6O1YKHfHU8EFh+0YgvVMqF/wuF/KiJY3zg+7JaoDCoRdK1n
2RyCKf8rx0Q9+cugQgSck07LPmXDbRPieplTwnZ1A38miy/KjOZMzBp77TnyjFxU
GtME9sao3o2FaNZP2oh/0Oi5OlyjASZlrl7A7Raiqu+u6L1TgQ3K6QtmvxtQXMXw
hEmI5EARgLmuEX2Cl2CskJvcb6roV+9EuHF2mVbooGOh/cjZxuev7RQknpfSYTU=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:35 2025 by rpki-client