Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
File:                     8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa (raw, json)
Hash identifier:          wnOvxAOmGWJ9cBbtn+fzW7+zA5QBoBlJ34iHlv4J8tM=
Subject key identifier:   F2:4E:81:8C:5F:90:C6:AA:60:A0:4D:FE:B5:37:DC:F0:03:1B:2E:1F
Certificate issuer:       /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial:       087C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
Signing time:             Sun 26 Jan 2025 04:25:14 +0000
ROA not before:           Sun 26 Jan 2025 04:25:14 +0000
ROA not after:            Sat 27 Sep 2025 02:40:14 +0000
asID:                     139076
IP address blocks:        113.31.64.0/21 maxlen: 24
                          113.31.72.0/21 maxlen: 24
                          113.31.128.0/21 maxlen: 24
                          113.31.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2172 (0x87c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
        Validity
            Not Before: Jan 26 04:25:14 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=F24E818C5F90C6AA60A04DFEB537DCF0031B2E1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:56:f7:87:b6:a2:af:8e:a6:a7:f4:23:56:
                    49:83:b4:85:06:cb:81:32:94:33:fb:52:98:61:e7:
                    0e:ad:b7:23:dc:6f:98:33:93:78:8b:ea:1a:c4:00:
                    13:72:f7:f6:cc:9a:68:f4:ec:fa:f8:4a:a8:6f:bb:
                    c1:7f:a2:41:7b:08:cd:33:16:08:13:55:db:17:b4:
                    80:1d:01:3b:4c:36:be:c1:7f:4a:86:b6:ff:e5:e7:
                    33:35:63:74:98:96:95:dc:42:51:a6:74:39:73:c0:
                    b9:e6:ac:b8:1d:28:4c:83:bb:c7:f3:47:b8:79:73:
                    df:f5:65:05:1d:d7:83:74:67:76:73:c5:cf:ca:c5:
                    0f:7b:42:53:71:40:46:6a:10:cd:7b:ff:0b:d0:3c:
                    38:a3:60:b9:59:23:89:37:89:33:c1:e8:a5:e4:77:
                    98:fb:f8:5a:6b:af:c5:bf:95:9a:5e:d2:96:44:43:
                    ba:29:48:a2:5f:ea:51:df:6b:a6:51:db:cd:32:89:
                    3c:e8:6d:e7:a5:c3:09:d8:01:c8:0b:96:6d:28:c8:
                    8d:bd:1c:80:27:6b:21:f0:14:54:2d:8c:2f:90:2d:
                    15:9b:bf:8d:a9:84:a2:6b:78:07:68:3a:18:e1:6b:
                    8b:74:8b:8d:ea:ec:b0:b9:ee:ad:81:33:8b:6b:aa:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4E:81:8C:5F:90:C6:AA:60:A0:4D:FE:B5:37:DC:F0:03:1B:2E:1F
            X509v3 Authority Key Identifier:
                keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.64.0/20
                  113.31.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:59:cc:89:32:1d:ff:b6:fe:49:bc:c0:09:cd:ea:0d:d7:6f:
         2b:03:3b:2a:6c:f1:b4:9f:2f:ee:ea:15:75:f3:22:8c:b2:4a:
         d1:10:24:79:7f:a8:9d:05:a5:f8:9b:fe:6c:b7:98:55:9b:bd:
         f6:9b:bc:c2:3d:0d:a2:ef:e8:3c:cd:bc:20:f1:69:7d:f4:75:
         49:0a:98:f1:8a:9e:c0:da:0d:9a:53:75:9c:6f:97:1f:c1:62:
         68:a8:fd:98:3c:e7:4e:8c:20:21:0e:3a:ce:24:86:3e:50:16:
         84:ee:bb:52:65:e9:5a:68:95:62:3a:74:b6:49:ff:b7:77:58:
         74:9f:d1:74:42:b5:55:35:86:32:d7:15:b9:f3:75:0b:d9:e6:
         9d:2d:9e:85:ff:c1:cc:f0:ce:67:f1:07:c0:ee:9f:b3:81:cf:
         62:94:5c:4d:68:03:5e:c6:e4:72:44:bf:29:d0:13:08:ce:fa:
         f1:fb:80:bb:8b:02:92:bb:f6:11:79:db:cc:0c:d8:d3:36:43:
         29:be:b0:72:1f:f4:2b:dd:cd:fc:96:96:08:21:b6:a7:4c:b3:
         ce:92:3f:05:db:6c:7f:7c:58:db:d3:ad:73:ea:7c:39:19:73:
         94:dc:52:9a:98:bc:44:df:a9:e4:cf:a7:87:67:43:84:73:26:
         9e:43:04:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 01:59:32 2025 by rpki-client