Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/57JflW6J75YjOfI7XzLvOD3CcNs.roa
File: 57JflW6J75YjOfI7XzLvOD3CcNs.roa (raw, json)
Hash identifier: X45QFQG/V9zhtui+s3kKF4xAlSbOSTU1/357Hud5qKc=
Subject key identifier: E7:B2:5F:95:6E:89:EF:96:23:39:F2:3B:5F:32:EF:38:3D:C2:70:DB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AF2
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/57JflW6J75YjOfI7XzLvOD3CcNs.roa
Signing time: Sat 01 Feb 2025 17:55:32 +0000
ROA not before: Sat 01 Feb 2025 17:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2802 (0xaf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 17:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E7B25F956E89EF962339F23B5F32EF383DC270DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:80:39:36:10:4d:bd:57:a4:1b:15:8d:dd:da:
84:9b:e7:1e:28:1a:52:21:25:d0:51:1c:55:72:df:
39:e8:b1:c4:df:79:25:61:7d:af:ed:99:5f:b3:ac:
11:85:cd:f9:c6:61:f3:7b:8a:a1:37:a3:19:d9:05:
77:ca:cf:ff:c2:73:f7:cf:64:65:ab:56:96:b8:7c:
d2:07:74:07:c7:56:e3:a9:23:ef:50:35:69:d6:08:
b5:7c:3c:07:ce:e6:76:e4:fc:94:f7:5b:9c:e3:de:
8d:91:9b:0a:c6:7e:62:91:45:3b:61:c5:7b:6f:9e:
f6:b0:91:b9:a9:85:8a:4a:59:16:5a:df:75:a0:5e:
e3:dc:61:78:f1:76:6c:9a:5a:98:2b:5e:ee:e6:4c:
2b:1c:4d:6d:48:dd:78:b7:06:71:74:12:9e:e0:6b:
60:19:35:34:3b:6e:7c:fd:45:7b:02:f8:f0:ec:5f:
fa:07:56:b4:6d:ce:54:46:02:b4:7c:64:8d:fc:a2:
c9:7f:b7:38:a0:30:80:b3:7d:ae:06:df:56:7e:af:
49:ee:1e:36:a1:76:10:0e:1e:10:4d:7e:95:10:f8:
5b:c0:dd:71:f5:4c:89:4b:06:91:84:7b:fc:a0:2e:
85:7d:40:8c:19:21:a6:4e:89:9d:98:a6:6f:fa:28:
22:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B2:5F:95:6E:89:EF:96:23:39:F2:3B:5F:32:EF:38:3D:C2:70:DB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/57JflW6J75YjOfI7XzLvOD3CcNs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:c1:f3:cc:b8:96:d1:99:4f:04:13:d2:5d:7c:ef:86:8e:4e:
e1:be:e1:0b:f9:e6:6a:45:20:57:be:21:fb:5b:51:4e:d2:01:
56:9d:1e:32:cc:cc:a0:3f:23:b8:9e:b1:c6:06:af:b2:cf:67:
53:44:17:fe:8d:33:27:4b:aa:7a:f9:cd:b4:1a:d8:35:b6:57:
bf:6a:8d:63:92:68:79:5f:d8:41:b2:7a:b5:72:61:3e:9b:85:
1b:de:5a:ea:f2:19:f7:21:7e:7a:22:a3:e6:36:d8:7d:40:a3:
8d:25:fa:6a:e0:f9:64:c7:7a:92:79:b7:63:ae:98:9d:84:07:
1b:48:97:53:4e:3c:0f:67:98:f9:79:ea:8a:f3:22:65:aa:d6:
fc:60:85:77:cc:f1:2c:f5:d6:ed:e5:d8:ac:d4:be:95:3e:b6:
fe:34:0d:a5:0c:5d:35:af:02:e3:7d:6f:7b:b2:2f:7f:ad:b5:
dc:84:06:72:a0:bb:d3:8c:7d:39:1a:3d:03:6a:55:fd:8c:a1:
4c:79:5a:87:2a:ba:91:5d:14:ab:44:8b:c4:42:ab:e1:9e:c1:
ab:9c:14:5f:63:8c:33:55:c8:10:a3:63:d2:7b:4b:1e:80:f5:
b4:16:49:89:10:52:11:ec:13:e6:ae:fa:09:3d:ac:28:8f:08:
30:3d:00:af
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDEx
NzU1MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU3QjI1Rjk1NkU4OUVG
OTYyMzM5RjIzQjVGMzJFRjM4M0RDMjcwREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkgDk2EE29V6QbFY3d2oSb5x4oGlIhJdBRHFVy3znoscTfeSVh
fa/tmV+zrBGFzfnGYfN7iqE3oxnZBXfKz//Cc/fPZGWrVpa4fNIHdAfHVuOpI+9Q
NWnWCLV8PAfO5nbk/JT3W5zj3o2RmwrGfmKRRTthxXtvnvawkbmphYpKWRZa33Wg
XuPcYXjxdmyaWpgrXu7mTCscTW1I3Xi3BnF0Ep7ga2AZNTQ7bnz9RXsC+PDsX/oH
VrRtzlRGArR8ZI38osl/tzigMICzfa4G31Z+r0nuHjahdhAOHhBNfpUQ+FvA3XH1
TIlLBpGEe/ygLoV9QIwZIaZOiZ2Ypm/6KCKxAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU57JflW6J75YjOfI7XzLvOD3CcNswHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzU3SmZsVzZKNzVZak9m
STdYekx2T0QzQ2NOcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAHzB88y4ltGZTwQT0l1874aO
TuG+4Qv55mpFIFe+IftbUU7SAVadHjLMzKA/I7iescYGr7LPZ1NEF/6NMydLqnr5
zbQa2DW2V79qjWOSaHlf2EGyerVyYT6bhRveWuryGfchfnoio+Y22H1Ao40l+mrg
+WTHepJ5t2OumJ2EBxtIl1NOPA9nmPl56orzImWq1vxghXfM8Sz11u3l2KzUvpU+
tv40DaUMXTWvAuN9b3uyL3+ttdyEBnKgu9OMfTkaPQNqVf2MoUx5WocqupFdFKtE
i8RCq+GewaucFF9jjDNVyBCjY9J7Sx6A9bQWSYkQUhHsE+au+gk9rCiPCDA9AK8=
-----END CERTIFICATE-----
Generated at Sun May 18 01:58:33 2025 by rpki-client