Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0NkdHwegWdpy0YajTQIw5-z8IyY.roa
File: 0NkdHwegWdpy0YajTQIw5-z8IyY.roa (raw, json)
Hash identifier: sRBmINDfda038gFNRFzJqCYYEYRu8apNVYiG+oifdYA=
Subject key identifier: D0:D9:1D:1F:07:A0:59:DA:72:D1:86:A3:4D:02:30:E7:EC:FC:23:26
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AB4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0NkdHwegWdpy0YajTQIw5-z8IyY.roa
Signing time: Sat 01 Feb 2025 02:25:33 +0000
ROA not before: Sat 01 Feb 2025 02:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2740 (0xab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 02:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D0D91D1F07A059DA72D186A34D0230E7ECFC2326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c6:f3:9f:51:8e:26:e7:54:6c:8e:50:c2:10:
e6:98:da:7c:61:1f:0a:24:67:d7:3e:77:6d:d7:d9:
14:01:a8:85:5e:3d:4e:13:5e:c3:0b:10:3a:89:8f:
b0:ad:77:55:29:b9:d2:43:0a:4b:85:4e:47:d8:e9:
bb:4b:46:21:2c:c2:64:d1:7e:2d:56:65:4e:77:a5:
18:32:31:c8:6a:c1:7e:27:5a:72:90:59:fb:91:61:
d4:c3:f8:b9:fc:28:19:35:4a:0b:77:5d:c6:f0:73:
3f:50:4a:65:f8:10:40:05:ed:99:f0:be:ba:bb:04:
d9:4b:70:2a:8e:64:7f:ee:35:84:09:f5:cc:ec:d1:
0d:ec:32:8b:42:14:b8:a9:89:97:1a:74:2d:e1:7b:
0a:d9:fb:05:42:ac:df:12:c6:32:66:53:87:54:90:
6e:ba:5a:df:03:c5:73:71:96:e1:73:ed:d1:84:fd:
b2:01:18:38:67:b9:80:9b:d2:de:74:29:d9:aa:05:
11:f9:69:cb:8d:b7:d4:60:d8:1f:f3:b6:0b:7e:36:
6a:bf:52:36:83:d2:48:69:2d:33:b6:c2:2e:4a:30:
a1:6f:a7:70:df:5c:35:41:30:8d:63:a4:0a:c5:7c:
22:b4:e2:af:94:29:f1:d4:ed:c5:dc:7b:2d:35:cd:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D9:1D:1F:07:A0:59:DA:72:D1:86:A3:4D:02:30:E7:EC:FC:23:26
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0NkdHwegWdpy0YajTQIw5-z8IyY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:9f:c5:0c:fa:ce:86:8e:95:e4:7d:02:a2:0d:a2:0b:8c:e8:
c3:3a:2d:f0:23:d4:99:15:98:2b:a1:e7:21:81:14:eb:2c:2e:
9b:2b:99:3e:02:97:98:c5:eb:6e:66:39:04:dc:b0:b9:15:10:
f5:fc:28:bd:0b:0b:f0:8f:39:8b:d9:71:fe:6b:8e:62:e5:32:
e2:48:dd:4b:c6:e1:b6:1b:3c:75:4c:cf:29:79:6e:15:fe:37:
76:88:00:ee:3b:64:78:11:48:77:9a:ad:65:4b:f5:57:e3:07:
90:fa:ea:fc:32:9b:ba:7a:17:60:70:70:bc:12:e2:ed:df:b2:
36:51:29:56:df:86:2a:ce:66:18:f2:fc:4d:df:9b:c4:de:d4:
df:31:8e:b0:46:85:4d:51:bf:88:99:c9:2c:45:d2:3b:a1:98:
4d:0c:4c:28:c4:28:a5:29:b5:ce:66:6e:63:c2:a1:b6:23:a7:
e3:1c:5e:53:a6:ab:14:6f:71:63:a9:05:7c:63:20:5f:8b:4f:
35:34:d3:02:86:8d:b8:77:15:04:be:11:81:c1:29:60:4a:80:
ac:78:78:f1:eb:5a:ee:a9:6c:b7:25:53:19:0b:46:be:f6:73:
a0:91:da:a5:b0:20:77:6a:85:eb:cb:c7:94:4e:5d:a4:30:25:
c4:2f:df:1b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDEw
MjI1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQwRDkxRDFGMDdBMDU5
REE3MkQxODZBMzREMDIzMEU3RUNGQzIzMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDuxvOfUY4m51RsjlDCEOaY2nxhHwokZ9c+d23X2RQBqIVePU4T
XsMLEDqJj7Ctd1UpudJDCkuFTkfY6btLRiEswmTRfi1WZU53pRgyMchqwX4nWnKQ
WfuRYdTD+Ln8KBk1Sgt3Xcbwcz9QSmX4EEAF7Znwvrq7BNlLcCqOZH/uNYQJ9czs
0Q3sMotCFLipiZcadC3hewrZ+wVCrN8SxjJmU4dUkG66Wt8DxXNxluFz7dGE/bIB
GDhnuYCb0t50KdmqBRH5acuNt9Rg2B/ztgt+Nmq/UjaD0khpLTO2wi5KMKFvp3Df
XDVBMI1jpArFfCK04q+UKfHU7cXcey01zQu9AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU0NkdHwegWdpy0YajTQIw5+z8IyYwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzBOa2RId2VnV2RweTBZ
YWpUUUl3NS16OEl5WS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAI+fxQz6zoaOleR9AqINoguM
6MM6LfAj1JkVmCuh5yGBFOssLpsrmT4Cl5jF625mOQTcsLkVEPX8KL0LC/CPOYvZ
cf5rjmLlMuJI3UvG4bYbPHVMzyl5bhX+N3aIAO47ZHgRSHearWVL9VfjB5D66vwy
m7p6F2BwcLwS4u3fsjZRKVbfhirOZhjy/E3fm8Te1N8xjrBGhU1Rv4iZySxF0juh
mE0MTCjEKKUptc5mbmPCobYjp+McXlOmqxRvcWOpBXxjIF+LTzU00wKGjbh3FQS+
EYHBKWBKgKx4ePHrWu6pbLclUxkLRr72c6CR2qWwIHdqhevLx5ROXaQwJcQv3xs=
-----END CERTIFICATE-----
Generated at Sat May 17 21:31:27 2025 by rpki-client