Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/GMk0pCW2YcACju8PoWshyCR3Qnk.roa
File: GMk0pCW2YcACju8PoWshyCR3Qnk.roa (raw, json)
Hash identifier: JCj8hJNN9cdPUQ60Az1LhEWt9IxImlI7hhZncGUp9ow=
Subject key identifier: 18:C9:34:A4:25:B6:61:C0:02:8E:EF:0F:A1:6B:21:C8:24:77:42:79
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B3A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GMk0pCW2YcACju8PoWshyCR3Qnk.roa
Signing time: Sun 02 Feb 2025 11:55:32 +0000
ROA not before: Sun 02 Feb 2025 11:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2874 (0xb3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 11:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=18C934A425B661C0028EEF0FA16B21C824774279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:5e:32:d1:eb:a8:60:f5:6e:ee:80:a2:b3:
b4:d6:35:86:fc:aa:a3:87:d4:b8:ea:d3:87:b0:fa:
8d:6d:99:f1:d1:73:f3:07:27:f1:38:e0:e4:c8:ae:
ed:fa:ff:91:ca:fd:b4:7b:8d:16:b4:05:4f:4e:f2:
ba:56:68:54:8e:76:4e:3f:12:ba:a3:ab:38:f7:65:
b7:01:4a:ad:91:16:0e:f9:4a:8a:e5:c7:3a:c2:fb:
e0:12:65:4d:95:84:5f:4a:bf:06:fe:5d:08:79:12:
27:52:e5:ef:e4:32:b4:48:8b:88:7c:b5:20:d8:b7:
48:24:23:8b:16:9f:e6:5a:76:63:49:33:e5:71:43:
73:bb:b7:aa:4b:e6:54:be:94:0a:d1:dd:3f:4d:fc:
d0:ce:be:f5:f5:10:88:ac:c5:41:41:52:68:d8:77:
25:e6:70:c0:50:9a:86:88:dc:09:49:aa:b9:8b:b7:
0d:58:1e:f8:2d:1e:f0:1c:db:f6:42:14:41:10:75:
cb:76:ff:4d:72:8d:d1:0c:a9:b8:3c:b3:7b:8d:c8:
ad:37:20:eb:ad:f8:e8:e2:15:e9:bb:12:f3:92:fd:
8d:ff:6d:11:30:20:32:33:44:de:65:ad:73:36:b9:
fa:79:ea:57:b1:8c:58:18:ed:91:4f:db:7a:e6:33:
41:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C9:34:A4:25:B6:61:C0:02:8E:EF:0F:A1:6B:21:C8:24:77:42:79
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/GMk0pCW2YcACju8PoWshyCR3Qnk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:e1:3d:ad:76:70:71:07:c9:9d:06:48:a1:cf:54:e1:3f:2d:
cd:3f:45:37:ff:4d:62:bd:51:b2:91:8a:4b:4a:c8:6d:fe:66:
a5:d9:05:ba:20:3a:ec:0c:d5:c0:87:a2:fa:2f:18:ac:54:af:
9a:de:3a:04:bd:58:53:a3:a7:21:0d:46:5b:18:aa:c7:9a:ef:
2a:87:22:8f:65:db:c8:7e:80:da:0a:ec:1d:03:fd:c2:c8:a7:
ba:42:c8:71:e9:a1:1b:e1:6a:7d:6f:b2:b2:11:bd:cf:14:13:
96:8b:8d:48:81:95:2f:d6:1a:bc:96:b3:dc:5f:f6:57:2b:41:
e7:dd:18:16:fc:09:8d:da:b4:24:2d:c6:09:56:fe:f9:34:56:
fa:85:e2:18:30:d0:50:0e:a9:e6:58:58:93:21:86:b3:d2:43:
75:17:12:5f:21:42:4d:6e:8f:7a:6d:8b:06:96:88:23:62:17:
c2:8f:f7:b6:81:d3:65:8e:a7:59:48:a4:3b:fa:70:bb:d1:8d:
f6:af:3c:ef:06:d5:05:5b:3f:d7:9e:4a:2e:2b:16:40:8e:a2:
3a:99:de:13:a2:a7:c0:37:7d:99:ff:18:7a:be:96:6b:f1:d8:
f4:55:e5:2d:c5:05:bb:dc:96:84:27:e0:b9:11:73:20:af:ad:
12:2a:ec:77
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDIx
MTU1MzJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDE4QzkzNEE0MjVCNjYx
QzAwMjhFRUYwRkExNkIyMUM4MjQ3NzQyNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnMV4y0euoYPVu7oCis7TWNYb8qqOH1Ljq04ew+o1tmfHRc/MH
J/E44OTIru36/5HK/bR7jRa0BU9O8rpWaFSOdk4/Erqjqzj3ZbcBSq2RFg75Sorl
xzrC++ASZU2VhF9Kvwb+XQh5EidS5e/kMrRIi4h8tSDYt0gkI4sWn+ZadmNJM+Vx
Q3O7t6pL5lS+lArR3T9N/NDOvvX1EIisxUFBUmjYdyXmcMBQmoaI3AlJqrmLtw1Y
HvgtHvAc2/ZCFEEQdct2/01yjdEMqbg8s3uNyK03IOut+OjiFem7EvOS/Y3/bREw
IDIzRN5lrXM2ufp56lexjFgY7ZFP23rmM0G3AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUGMk0pCW2YcACju8PoWshyCR3QnkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0dNazBwQ1cyWWNBQ2p1
OFBvV3NoeUNSM1Fuay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKHhPa12cHEHyZ0GSKHPVOE/
Lc0/RTf/TWK9UbKRiktKyG3+ZqXZBbogOuwM1cCHovovGKxUr5reOgS9WFOjpyEN
RlsYqsea7yqHIo9l28h+gNoK7B0D/cLIp7pCyHHpoRvhan1vsrIRvc8UE5aLjUiB
lS/WGryWs9xf9lcrQefdGBb8CY3atCQtxglW/vk0VvqF4hgw0FAOqeZYWJMhhrPS
Q3UXEl8hQk1uj3ptiwaWiCNiF8KP97aB02WOp1lIpDv6cLvRjfavPO8G1QVbP9ee
Si4rFkCOojqZ3hOip8A3fZn/GHq+lmvx2PRV5S3FBbvcloQn4LkRcyCvrRIq7Hc=
-----END CERTIFICATE-----
Generated at Sun May 18 18:32:27 2025 by rpki-client