Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/5bH1vEU9IyWbAvcSQmZuQ9XtTH8.roa
File: 5bH1vEU9IyWbAvcSQmZuQ9XtTH8.roa (raw, json)
Hash identifier: Ochsj2FVBkliPVWY2ttgfnPD/cpe9EpRvh0ee4Ty4Gc=
Subject key identifier: E5:B1:F5:BC:45:3D:23:25:9B:02:F7:12:42:66:6E:43:D5:ED:4C:7F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0D16
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/5bH1vEU9IyWbAvcSQmZuQ9XtTH8.roa
Signing time: Fri 07 Feb 2025 10:55:53 +0000
ROA not before: Fri 07 Feb 2025 10:55:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3350 (0xd16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 7 10:55:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E5B1F5BC453D23259B02F71242666E43D5ED4C7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:5f:78:f0:2a:71:6c:d1:95:f9:9d:b9:4c:
b9:59:cd:3d:4a:d2:f0:94:21:85:72:b6:ba:2d:19:
26:89:e0:da:9a:f6:72:01:cf:d6:8a:e4:b5:9c:06:
9f:d7:4c:9d:28:9a:b4:36:fe:f5:18:6c:9d:a1:75:
42:17:4e:eb:2d:8e:fb:ee:b3:57:ce:08:f7:d4:6d:
2e:66:6e:ea:9f:56:96:65:0a:54:d1:3c:84:70:e1:
a4:e7:a7:40:76:e0:3a:c4:7b:80:f8:3c:4c:5c:65:
e2:79:42:d5:d9:63:2c:4e:e6:ab:67:dc:5e:64:44:
fb:22:02:bf:8e:1e:e6:96:39:10:ff:5d:65:f2:05:
3a:e8:9d:84:1d:00:d0:2c:96:0d:8e:60:a8:dd:13:
a8:a3:36:54:d0:00:5e:f0:6e:45:2e:94:0e:a4:8d:
ee:8d:2f:ef:5a:62:7b:0a:1a:99:2a:2b:c5:3a:2f:
21:83:fb:77:5b:4c:f8:fa:a8:b8:61:3f:91:20:c1:
82:84:51:83:c2:b8:64:88:a2:b9:90:74:f2:e2:46:
50:49:83:18:80:46:8b:b0:44:8d:f1:fe:3c:23:9b:
49:3b:ef:b9:d6:f2:57:96:96:43:41:43:25:21:44:
03:4e:9b:67:7a:0d:41:78:c8:69:51:e3:4e:64:b4:
b6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:B1:F5:BC:45:3D:23:25:9B:02:F7:12:42:66:6E:43:D5:ED:4C:7F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/5bH1vEU9IyWbAvcSQmZuQ9XtTH8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
ba:1e:45:b2:ac:95:2b:c7:e9:e4:da:9e:99:5c:6b:78:21:95:
a3:c5:df:cc:df:2f:08:a4:26:64:38:e3:81:25:4b:51:1c:d7:
ee:f8:99:97:1e:a2:e2:78:e2:16:3a:c8:97:55:b9:82:b3:fd:
9c:3f:a4:ab:4f:13:e7:6a:48:d4:f6:19:79:62:e0:bd:d0:b7:
3d:de:d9:55:4f:1a:3d:c2:3e:50:9b:aa:9d:fd:d2:63:2a:78:
ea:d4:57:7d:e6:b9:ef:f7:59:f6:90:71:62:7b:62:5b:c3:53:
e8:07:67:0d:6f:c2:a3:46:ac:a6:fe:93:de:2f:73:14:9f:35:
23:64:c6:1d:28:30:d9:88:df:9c:03:62:16:fb:2c:a2:a1:e8:
3e:df:11:c4:f3:43:ca:9d:89:68:c2:67:a1:1c:b2:be:83:d2:
a8:8a:dc:1c:a1:69:6d:a0:ab:34:00:08:8c:27:1a:7d:bf:0e:
d7:07:5c:dc:7f:08:ab:76:81:45:38:78:db:89:3e:1f:01:04:
13:57:03:43:6d:eb:33:89:15:73:a7:c7:58:39:dd:dc:4d:bd:
59:31:cd:f3:d0:d9:68:ac:63:85:8d:d7:b3:f7:cb:96:e6:c1:
ae:30:b4:7d:25:74:b9:e8:e8:c1:53:72:17:aa:9a:57:aa:29:
48:2b:52:b5
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDcx
MDU1NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEU1QjFGNUJDNDUzRDIz
MjU5QjAyRjcxMjQyNjY2RTQzRDVFRDRDN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6t1948CpxbNGV+Z25TLlZzT1K0vCUIYVytrotGSaJ4Nqa9nIB
z9aK5LWcBp/XTJ0omrQ2/vUYbJ2hdUIXTustjvvus1fOCPfUbS5mbuqfVpZlClTR
PIRw4aTnp0B24DrEe4D4PExcZeJ5QtXZYyxO5qtn3F5kRPsiAr+OHuaWORD/XWXy
BTronYQdANAslg2OYKjdE6ijNlTQAF7wbkUulA6kje6NL+9aYnsKGpkqK8U6LyGD
+3dbTPj6qLhhP5EgwYKEUYPCuGSIormQdPLiRlBJgxiARouwRI3x/jwjm0k777nW
8leWlkNBQyUhRANOm2d6DUF4yGlR405ktLYNAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU5bH1vEU9IyWbAvcSQmZuQ9XtTH8wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzViSDF2RVU5SXlXYkF2
Y1NRbVp1UTlYdFRIOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALoeRbKslSvH6eTanplca3gh
laPF38zfLwikJmQ444ElS1Ec1+74mZceouJ44hY6yJdVuYKz/Zw/pKtPE+dqSNT2
GXli4L3Qtz3e2VVPGj3CPlCbqp390mMqeOrUV33mue/3WfaQcWJ7YlvDU+gHZw1v
wqNGrKb+k94vcxSfNSNkxh0oMNmI35wDYhb7LKKh6D7fEcTzQ8qdiWjCZ6Ecsr6D
0qiK3ByhaW2gqzQACIwnGn2/DtcHXNx/CKt2gUU4eNuJPh8BBBNXA0Nt6zOJFXOn
x1g53dxNvVkxzfPQ2WisY4WN17P3y5bmwa4wtH0ldLno6MFTcheqmleqKUgrUrU=
-----END CERTIFICATE-----
Generated at Sat May 17 19:53:44 2025 by rpki-client