Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa
File: lU4MINnEocHPf7DsLjN6TqQBr9g.roa (raw, json)
Hash identifier: nWkWTYJDtFBZOZTTk+NylLr//gEQhbEtZuQsgeEL7No=
Subject key identifier: 95:4E:0C:20:D9:C4:A1:C1:CF:7F:B0:EC:2E:33:7A:4E:A4:01:AF:D8
Certificate issuer: /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial: 1D0F
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa
Signing time: Fri 17 Jan 2025 01:26:48 +0000
ROA not before: Fri 17 Jan 2025 01:26:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4811
IP address blocks: 106.75.208.0/20 maxlen: 20
113.31.96.0/20 maxlen: 20
113.31.112.0/20 maxlen: 20
113.31.144.0/20 maxlen: 20
113.31.160.0/20 maxlen: 20
113.31.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7439 (0x1d0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Validity
Not Before: Jan 17 01:26:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=954E0C20D9C4A1C1CF7FB0EC2E337A4EA401AFD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:2d:1f:d1:ba:4f:69:24:16:1f:10:85:d1:
09:71:d8:c1:59:5e:4c:fa:83:e3:36:46:b9:d0:99:
44:e7:a3:63:09:61:91:1f:94:af:2c:2b:74:11:4a:
97:65:54:d7:70:2e:ec:9f:f2:04:3e:89:56:a6:76:
f4:95:32:9a:90:09:0b:65:e1:e1:a4:23:7b:43:7e:
d6:36:ca:e7:fd:e8:03:0c:e3:db:33:7d:85:c5:eb:
3d:26:42:25:b1:ad:77:11:55:23:aa:0b:53:0f:0d:
5b:e9:64:b6:6d:bd:e9:30:38:98:bc:5d:4c:13:11:
01:28:cf:8a:e1:5c:a1:29:0b:a0:50:67:43:b4:0a:
4a:71:63:85:b2:50:34:2e:76:34:84:45:df:3d:c3:
54:ec:35:e9:2d:4e:a4:f5:79:25:c2:ca:b0:7a:32:
30:ca:09:f4:29:41:0c:ae:1c:aa:85:26:43:ec:59:
a2:3a:66:6f:54:ea:8a:58:46:22:9e:30:a9:89:71:
5a:a2:76:bd:2c:26:0e:c8:90:6f:4e:46:2b:87:a2:
35:b5:38:2c:ff:22:fe:0f:bc:d0:ce:59:3a:56:74:
1d:39:f5:2b:e5:18:40:79:14:47:1f:17:95:5e:1a:
31:77:e8:fd:cc:36:f1:87:f6:82:7c:18:50:4a:91:
b5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:0C:20:D9:C4:A1:C1:CF:7F:B0:EC:2E:33:7A:4E:A4:01:AF:D8
X509v3 Authority Key Identifier:
keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/lU4MINnEocHPf7DsLjN6TqQBr9g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.75.208.0/20
113.31.96.0/19
113.31.144.0-113.31.191.255
Signature Algorithm: sha256WithRSAEncryption
0a:b3:be:3b:11:48:35:44:da:07:39:e5:fc:4f:e9:fc:18:ab:
db:bb:d8:80:b1:18:27:98:c9:f3:16:f6:11:54:87:e4:8e:9d:
5b:27:54:28:4f:62:eb:d7:11:dc:f1:f4:2b:30:ea:59:6a:17:
e2:17:f0:2a:ee:c5:d1:8b:94:ff:20:18:f0:69:c2:22:8c:cd:
39:50:7c:41:c9:3b:fa:fb:35:f0:19:13:d0:b8:ec:8d:5f:67:
04:5b:88:96:3c:92:c9:78:e1:c1:ba:3b:05:4d:3e:70:d0:35:
a1:aa:57:7b:b7:91:1a:7e:02:0b:20:1f:22:17:da:89:1e:1c:
55:cb:a1:15:a2:34:33:60:95:f9:6e:44:d7:bb:4f:f0:88:c3:
a0:88:0d:b6:a7:55:13:e4:05:b3:0b:80:9c:31:69:fa:c2:46:
25:e3:4c:1f:93:4c:5c:c1:5a:24:30:76:9c:ea:9a:18:42:fe:
d3:31:04:83:38:a9:77:ef:40:53:4f:c8:52:c1:bb:74:73:ab:
16:20:fa:43:16:2f:81:f3:2f:36:3b:17:14:f7:af:fb:d8:2d:
8f:92:ff:06:91:73:4a:b6:f1:4f:55:bd:4a:cc:b5:54:fb:d4:
39:ca:06:62:5d:3e:56:8b:b5:f2:bd:26:36:12:f3:58:b9:a5:
e5:37:57:b6
-----BEGIN CERTIFICATE-----
MIIE6TCCA9GgAwIBAgICHQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkE3
MTFBQTdEQzYwMDQ5QjBCMEQ4ODQ4OTdFMDE1QjExNzFGMzdCOTAeFw0yNTAxMTcw
MTI2NDhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk1NEUwQzIwRDlDNEEx
QzFDRjdGQjBFQzJFMzM3QTRFQTQwMUFGRDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmuC0f0bpPaSQWHxCF0Qlx2MFZXkz6g+M2RrnQmUTno2MJYZEf
lK8sK3QRSpdlVNdwLuyf8gQ+iVamdvSVMpqQCQtl4eGkI3tDftY2yuf96AMM49sz
fYXF6z0mQiWxrXcRVSOqC1MPDVvpZLZtvekwOJi8XUwTEQEoz4rhXKEpC6BQZ0O0
CkpxY4WyUDQudjSERd89w1TsNektTqT1eSXCyrB6MjDKCfQpQQyuHKqFJkPsWaI6
Zm9U6opYRiKeMKmJcVqidr0sJg7IkG9ORiuHojW1OCz/Iv4PvNDOWTpWdB059Svl
GEB5FEcfF5VeGjF36P3MNvGH9oJ8GFBKkbU5AgMBAAGjggIFMIICATAdBgNVHQ4E
FgQUlU4MINnEocHPf7DsLjN6TqQBr9gwHwYDVR0jBBgwFoAUKnEap9xgBJsLDYhI
l+AVsRcfN7kwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3
L0tuRWFwOXhnQkpzTERZaElsLUFWc1JjZk43ay5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS25FYXA5eGdCSnNMRFloSWwtQVZzUmNmTjdrLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvODE3L2xVNE1JTm5Fb2NIUGY3
RHNMak42VHFRQnI5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBoD
BARqS9ADBAVxH2AwDAMEBHEfkAMEBnEfgDANBgkqhkiG9w0BAQsFAAOCAQEACrO+
OxFINUTaBznl/E/p/Bir27vYgLEYJ5jJ8xb2EVSH5I6dWydUKE9i69cR3PH0KzDq
WWoX4hfwKu7F0YuU/yAY8GnCIozNOVB8Qck7+vs18BkT0LjsjV9nBFuIljySyXjh
wbo7BU0+cNA1oapXe7eRGn4CCyAfIhfaiR4cVcuhFaI0M2CV+W5E17tP8IjDoIgN
tqdVE+QFswuAnDFp+sJGJeNMH5NMXMFaJDB2nOqaGEL+0zEEgzipd+9AU0/IUsG7
dHOrFiD6QxYvgfMvNjsXFPev+9gtj5L/BpFzSrbxT1W9Ssy1VPvUOcoGYl0+Vou1
8r0mNhLzWLml5TdXtg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:43 2025 by rpki-client