Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/3fqoutgA3oVR7ZDPVvmzfTb_lDY.roa
File: 3fqoutgA3oVR7ZDPVvmzfTb_lDY.roa (raw, json)
Hash identifier: 7I3LMOhjgf7oiUZLt+BRHUzAI5tONsmU9Pb8sGfExmg=
Subject key identifier: DD:FA:A8:BA:D8:00:DE:85:51:ED:90:CF:56:F9:B3:7D:36:FF:94:36
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B14
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3fqoutgA3oVR7ZDPVvmzfTb_lDY.roa
Signing time: Sun 02 Feb 2025 02:25:33 +0000
ROA not before: Sun 02 Feb 2025 02:25:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2836 (0xb14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 02:25:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=DDFAA8BAD800DE8551ED90CF56F9B37D36FF9436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:80:0b:18:fd:40:13:ab:50:90:a4:f5:ad:
a4:2a:18:bc:54:56:aa:ca:94:bc:d9:99:41:0b:ef:
c0:67:86:d2:ae:bc:e9:71:8d:20:d3:7d:f1:ea:85:
f1:77:73:42:8c:85:85:67:65:50:9a:9e:86:a4:75:
30:ee:f9:d9:25:a6:0b:2c:04:f9:a9:d4:ef:8f:d8:
8c:0a:bf:c1:24:08:89:68:74:bd:16:43:d5:92:30:
25:df:3d:60:09:a2:9f:81:d8:b4:f8:4f:3b:8c:72:
85:fe:84:85:78:47:bf:c7:d5:f9:1e:be:3a:27:3a:
92:19:91:c8:ea:2b:5c:14:69:84:bb:3e:b6:7a:f1:
63:5f:70:15:e9:1b:94:d3:b4:3b:06:b9:93:ac:8c:
70:ff:46:b4:6f:30:2c:99:dd:cf:50:fe:53:67:bb:
bb:f2:01:eb:d3:be:46:be:3f:ff:75:de:a4:4b:b8:
14:59:3b:49:f7:0e:5d:19:9b:30:bd:a3:9a:aa:df:
df:cd:77:43:cf:d8:5e:c7:93:b6:64:ac:11:26:57:
1c:82:a3:58:5b:fb:e9:70:08:62:48:8a:01:29:a8:
a0:e0:8d:08:31:e8:18:3e:6a:35:5e:a4:31:a5:af:
5c:b7:93:2f:79:92:b1:f8:9e:a8:75:19:fd:94:09:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FA:A8:BA:D8:00:DE:85:51:ED:90:CF:56:F9:B3:7D:36:FF:94:36
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/3fqoutgA3oVR7ZDPVvmzfTb_lDY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:3e:5a:a5:53:d9:e0:1a:ce:5b:6c:bc:9c:6e:da:c0:51:4e:
7c:58:68:59:b5:e8:98:11:76:4a:79:e4:0d:da:74:d8:72:a4:
50:f3:0c:f6:53:b8:cf:8a:95:49:aa:90:96:a3:34:a9:52:af:
23:5d:b2:24:59:22:5d:44:e4:91:0c:a2:b5:be:31:93:35:16:
fb:8e:06:04:de:30:44:d0:1b:cb:43:2f:55:64:f0:11:cd:7e:
c8:78:14:ef:55:c9:d8:53:05:46:35:bf:2c:d7:37:b4:b7:3c:
05:25:74:7b:5e:70:a3:03:70:a2:73:4b:5c:aa:05:30:bc:a2:
4c:e9:f8:99:fb:28:bc:9d:3a:ec:df:ff:f2:ee:f3:79:d5:f5:
3b:c3:00:12:c9:98:b7:57:d6:66:da:22:bf:57:f5:e0:5d:b8:
2c:4a:63:48:61:62:6c:39:84:1e:0c:65:4e:07:67:02:cd:4a:
e9:2e:de:fb:89:50:17:c1:3c:e7:ae:b9:41:4f:48:07:af:3c:
ca:0f:90:9b:ec:33:d1:e0:3d:8e:e6:a4:fd:3a:54:a8:40:d3:
17:30:16:73:60:91:4c:8d:5a:40:af:79:2c:e6:a9:8d:4f:69:
d6:6d:3c:5e:d1:9c:2b:56:2d:69:ce:e5:f1:48:59:39:4b:3e:
de:65:02:80
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCxQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDIw
MjI1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKERERkFBOEJBRDgwMERF
ODU1MUVEOTBDRjU2RjlCMzdEMzZGRjk0MzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCOoALGP1AE6tQkKT1raQqGLxUVqrKlLzZmUEL78BnhtKuvOlx
jSDTffHqhfF3c0KMhYVnZVCanoakdTDu+dklpgssBPmp1O+P2IwKv8EkCIlodL0W
Q9WSMCXfPWAJop+B2LT4TzuMcoX+hIV4R7/H1fkevjonOpIZkcjqK1wUaYS7PrZ6
8WNfcBXpG5TTtDsGuZOsjHD/RrRvMCyZ3c9Q/lNnu7vyAevTvka+P/913qRLuBRZ
O0n3Dl0ZmzC9o5qq39/Nd0PP2F7Hk7ZkrBEmVxyCo1hb++lwCGJIigEpqKDgjQgx
6Bg+ajVepDGlr1y3ky95krH4nqh1Gf2UCZZZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU3fqoutgA3oVR7ZDPVvmzfTb/lDYwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzNmcW91dGdBM29WUjda
RFBWdm16ZlRiX2xEWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKc+WqVT2eAazltsvJxu2sBR
TnxYaFm16JgRdkp55A3adNhypFDzDPZTuM+KlUmqkJajNKlSryNdsiRZIl1E5JEM
orW+MZM1FvuOBgTeMETQG8tDL1Vk8BHNfsh4FO9VydhTBUY1vyzXN7S3PAUldHte
cKMDcKJzS1yqBTC8okzp+Jn7KLydOuzf//Lu83nV9TvDABLJmLdX1mbaIr9X9eBd
uCxKY0hhYmw5hB4MZU4HZwLNSuku3vuJUBfBPOeuuUFPSAevPMoPkJvsM9HgPY7m
pP06VKhA0xcwFnNgkUyNWkCveSzmqY1PadZtPF7RnCtWLWnO5fFIWTlLPt5lAoA=
-----END CERTIFICATE-----
Generated at Sat May 17 21:29:12 2025 by rpki-client