Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/0SKTong5QTr3ReAvnyXSNfjvEhE.roa
File: 0SKTong5QTr3ReAvnyXSNfjvEhE.roa (raw, json)
Hash identifier: rgF2c7W4sn82sZu6nWqR5rihzlykuIs8KbYvXRl7HGo=
Subject key identifier: D1:22:93:A2:78:39:41:3A:F7:45:E0:2F:9F:25:D2:35:F8:EF:12:11
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A9E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0SKTong5QTr3ReAvnyXSNfjvEhE.roa
Signing time: Fri 31 Jan 2025 20:55:31 +0000
ROA not before: Fri 31 Jan 2025 20:55:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2718 (0xa9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 20:55:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D12293A27839413AF745E02F9F25D235F8EF1211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:19:98:cf:0a:ff:d2:40:71:e3:b0:bc:9e:
a0:b6:df:d7:66:73:be:9d:1d:d0:e0:4f:6c:6f:26:
31:bc:79:a1:cd:fa:bb:4a:54:51:1c:04:25:d0:bd:
f2:7a:88:b0:8b:32:ae:14:a9:09:80:98:95:5c:e9:
37:ea:2f:77:43:3e:e8:58:c7:73:49:74:85:59:1c:
b9:f0:5a:43:d9:dc:df:10:6e:94:5a:52:ba:70:77:
c6:d8:6d:a5:6b:34:ab:83:11:94:1d:51:26:0f:70:
d6:ae:1b:7b:b8:40:dc:73:2f:62:0a:d2:28:ee:c2:
5b:f4:28:3a:31:94:cb:3f:8a:7d:6e:28:85:58:a1:
86:11:8c:36:56:d8:29:a6:b6:82:44:be:a1:86:de:
96:95:1a:03:89:3e:3d:3d:73:4a:09:a1:82:9e:b9:
c4:8f:79:cb:8b:d9:14:f1:61:8c:98:7f:0d:a7:0b:
41:49:c7:b0:f2:da:80:4f:08:9c:4a:01:6a:e3:42:
7b:1d:c6:db:ac:1a:99:2d:c7:b9:ee:45:ce:d7:02:
ba:0f:e6:3d:08:a9:a9:94:00:b5:79:b2:04:33:04:
d9:c2:3c:0a:94:b9:6d:ae:6a:7d:ab:f1:14:65:45:
c9:63:f7:97:e1:76:22:af:c2:a8:f2:00:4f:45:70:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:22:93:A2:78:39:41:3A:F7:45:E0:2F:9F:25:D2:35:F8:EF:12:11
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/0SKTong5QTr3ReAvnyXSNfjvEhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
40:8b:6f:dd:a7:2a:c0:b6:9d:55:1c:34:87:04:b6:4a:7c:69:
d3:6e:b9:bb:7d:77:b5:db:76:92:e4:9f:e6:55:4c:bc:de:15:
cb:f0:08:49:25:66:e0:27:5e:fe:50:fb:f0:e2:59:57:4e:ec:
06:31:ba:8f:a9:a2:34:87:e0:c1:e3:25:59:3e:4e:ef:b1:cc:
5d:70:70:cf:8a:83:a1:e6:6e:52:9f:67:bd:3f:cc:7d:1c:c6:
04:76:b7:7c:7c:80:04:1f:d2:75:52:92:3c:eb:1d:5a:11:14:
93:84:34:53:e0:10:1d:a2:6f:c9:49:91:65:cf:5c:f2:1d:c4:
2e:04:a5:f2:3f:84:22:0f:1a:8a:dd:07:56:f4:14:24:43:c0:
c9:a6:1a:ab:93:b2:86:18:bd:d5:3c:81:4a:f1:a7:7b:7b:bc:
85:24:02:9d:bc:52:37:2d:8b:40:a5:c8:3c:db:d7:c4:dc:ef:
a4:af:db:3e:b6:4d:e5:56:75:49:24:39:92:0a:7b:f5:37:d2:
99:8d:de:b0:2b:61:e8:cb:6f:9d:df:6b:0b:37:13:aa:8d:74:
3e:12:2d:d0:f6:c0:d2:55:3b:cb:99:1d:4b:04:05:f4:9d:65:
b8:a0:a9:f1:f8:50:ff:d0:40:82:c2:84:1b:3a:e6:eb:6f:c1:
c9:cc:77:d4
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzEy
MDU1MzFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQxMjI5M0EyNzgzOTQx
M0FGNzQ1RTAyRjlGMjVEMjM1RjhFRjEyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBlBmYzwr/0kBx47C8nqC239dmc76dHdDgT2xvJjG8eaHN+rtK
VFEcBCXQvfJ6iLCLMq4UqQmAmJVc6TfqL3dDPuhYx3NJdIVZHLnwWkPZ3N8QbpRa
Urpwd8bYbaVrNKuDEZQdUSYPcNauG3u4QNxzL2IK0ijuwlv0KDoxlMs/in1uKIVY
oYYRjDZW2CmmtoJEvqGG3paVGgOJPj09c0oJoYKeucSPecuL2RTxYYyYfw2nC0FJ
x7Dy2oBPCJxKAWrjQnsdxtusGpktx7nuRc7XAroP5j0IqamUALV5sgQzBNnCPAqU
uW2uan2r8RRlRclj95fhdiKvwqjyAE9FcPGnAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU0SKTong5QTr3ReAvnyXSNfjvEhEwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzBTS1Rvbmc1UVRyM1Jl
QXZueVhTTmZqdkVoRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAECLb92nKsC2nVUcNIcEtkp8
adNuubt9d7XbdpLkn+ZVTLzeFcvwCEklZuAnXv5Q+/DiWVdO7AYxuo+pojSH4MHj
JVk+Tu+xzF1wcM+Kg6HmblKfZ70/zH0cxgR2t3x8gAQf0nVSkjzrHVoRFJOENFPg
EB2ib8lJkWXPXPIdxC4EpfI/hCIPGordB1b0FCRDwMmmGquTsoYYvdU8gUrxp3t7
vIUkAp28Ujcti0ClyDzb18Tc76Sv2z62TeVWdUkkOZIKe/U30pmN3rArYejLb53f
aws3E6qNdD4SLdD2wNJVO8uZHUsEBfSdZbigqfH4UP/QQILChBs65utvwcnMd9Q=
-----END CERTIFICATE-----
Generated at Sat May 17 21:21:46 2025 by rpki-client