Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yHSXixlifoGEHpqJzJdWU-XmV9U.roa
File: yHSXixlifoGEHpqJzJdWU-XmV9U.roa (raw, json)
Hash identifier: x98Fi8lZ3EL3EGJCF2QbjwCtPu1Xr8N8h7Y3aQTtbwM=
Subject key identifier: C8:74:97:8B:19:62:7E:81:84:1E:9A:89:CC:97:56:53:E5:E6:57:D5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D0C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yHSXixlifoGEHpqJzJdWU-XmV9U.roa
Signing time: Fri 07 Feb 2025 08:25:47 +0000
ROA not before: Fri 07 Feb 2025 08:25:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3340 (0xd0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 08:25:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C874978B19627E81841E9A89CC975653E5E657D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e4:55:53:d8:4f:5f:a7:49:6e:2f:4d:69:e0:
e2:ba:b8:7a:74:20:72:a4:36:7f:67:4e:e9:4f:c9:
cb:b8:22:98:86:fb:37:e4:d1:63:5a:5c:41:46:c6:
09:e7:3b:d5:f9:97:75:42:df:24:12:23:8c:f9:a3:
f6:7a:36:ed:45:7e:28:9c:99:1d:08:cc:f0:0f:13:
ea:9f:fe:fa:4b:fe:cd:f5:6e:58:ea:c2:d8:73:7a:
db:db:b2:a3:8c:2d:84:66:3e:89:a9:43:90:68:d1:
9b:28:7e:d3:b6:b3:e4:33:b5:61:e2:06:f2:2e:86:
4c:59:8c:aa:84:12:7b:2b:91:c2:7b:fd:6d:83:1b:
e1:03:31:c1:2f:de:9d:19:ff:80:cc:e8:99:09:f9:
3d:8b:2d:bd:fe:fb:b2:4f:25:5e:71:95:43:ee:15:
4e:03:9a:79:e6:34:24:a4:1e:cd:c6:6b:27:f1:69:
31:a6:5c:e1:e2:bc:09:58:cf:c5:0a:b2:0b:40:86:
96:fa:65:49:c7:ad:cf:88:13:12:d4:32:24:97:df:
28:c3:59:59:c5:e9:fc:ff:66:90:1c:f9:b2:10:62:
6f:6c:df:89:94:ec:91:32:27:17:43:c2:75:c6:71:
aa:25:0c:71:99:70:e9:a5:e7:be:c0:63:5f:d7:af:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:74:97:8B:19:62:7E:81:84:1E:9A:89:CC:97:56:53:E5:E6:57:D5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yHSXixlifoGEHpqJzJdWU-XmV9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:ab:c7:5d:ea:ca:3a:46:fa:24:1a:a3:17:d7:26:34:08:a0:
e1:e1:77:0f:41:05:56:3c:59:7c:b0:21:9d:a4:33:03:c1:c7:
f5:21:ad:45:d1:03:a9:1a:1b:b7:6b:99:a2:83:8f:f3:22:2a:
db:d4:ac:ef:f4:55:75:bc:7e:f8:e7:6e:ae:e3:9f:47:fd:96:
b1:d5:50:30:85:02:4a:31:8b:1f:84:ba:e8:67:f3:27:bd:2b:
d0:d5:11:8e:2a:bd:3f:66:ed:c6:c8:6e:d6:8a:18:14:b9:f3:
55:b3:0a:f2:d6:d1:fd:d1:f3:5d:74:4d:90:79:08:c1:11:f6:
8d:e3:18:56:0e:4d:6d:e8:c8:ca:9d:59:a0:03:ef:53:e6:cd:
cb:85:fc:cf:05:26:ba:fc:e1:39:9d:71:ac:4b:c0:83:38:3e:
93:98:7b:8c:a4:aa:2f:d4:ee:71:18:2b:01:44:41:8d:40:d5:
2d:38:92:43:22:6e:d8:c1:89:18:96:be:69:4e:d0:53:14:6e:
19:fd:b7:83:04:7c:de:39:20:a5:47:15:37:78:51:25:7b:2b:
9a:0a:1b:d7:a8:02:a0:80:6f:92:10:49:5d:fb:6c:fe:21:a9:
77:6b:b3:57:4b:6f:af:2e:d6:75:d0:ba:f4:16:37:79:64:41:
d8:8b:8d:33
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDQwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDcw
ODI1NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM4NzQ5NzhCMTk2MjdF
ODE4NDFFOUE4OUNDOTc1NjUzRTVFNjU3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZ5FVT2E9fp0luL01p4OK6uHp0IHKkNn9nTulPycu4IpiG+zfk
0WNaXEFGxgnnO9X5l3VC3yQSI4z5o/Z6Nu1FfiicmR0IzPAPE+qf/vpL/s31bljq
wthzetvbsqOMLYRmPompQ5Bo0ZsoftO2s+QztWHiBvIuhkxZjKqEEnsrkcJ7/W2D
G+EDMcEv3p0Z/4DM6JkJ+T2LLb3++7JPJV5xlUPuFU4DmnnmNCSkHs3GayfxaTGm
XOHivAlYz8UKsgtAhpb6ZUnHrc+IExLUMiSX3yjDWVnF6fz/ZpAc+bIQYm9s34mU
7JEyJxdDwnXGcaolDHGZcOml577AY1/Xr/LHAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUyHSXixlifoGEHpqJzJdWU+XmV9UwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3lIU1hpeGxpZm9HRUhw
cUp6SmRXVS1YbVY5VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALirx13qyjpG+iQaoxfXJjQI
oOHhdw9BBVY8WXywIZ2kMwPBx/UhrUXRA6kaG7drmaKDj/MiKtvUrO/0VXW8fvjn
bq7jn0f9lrHVUDCFAkoxix+Euuhn8ye9K9DVEY4qvT9m7cbIbtaKGBS581WzCvLW
0f3R8110TZB5CMER9o3jGFYOTW3oyMqdWaAD71PmzcuF/M8FJrr84TmdcaxLwIM4
PpOYe4ykqi/U7nEYKwFEQY1A1S04kkMibtjBiRiWvmlO0FMUbhn9t4MEfN45IKVH
FTd4USV7K5oKG9eoAqCAb5IQSV37bP4hqXdrs1dLb68u1nXQuvQWN3lkQdiLjTM=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:46:09 2025 by rpki-client