Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/KndSgFtBvdxc4ZJIxk7Vxvy1EhM.roa
File: KndSgFtBvdxc4ZJIxk7Vxvy1EhM.roa (raw, json)
Hash identifier: cfqwEXM5RLVc+TORbfqJl2f3iMzLBOpzua4uyCPFrkk=
Subject key identifier: 2A:77:52:80:5B:41:BD:DC:5C:E1:92:48:C6:4E:D5:C6:FC:B5:12:13
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0ADA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KndSgFtBvdxc4ZJIxk7Vxvy1EhM.roa
Signing time: Sat 01 Feb 2025 11:55:33 +0000
ROA not before: Sat 01 Feb 2025 11:55:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2778 (0xada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 11:55:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2A7752805B41BDDC5CE19248C64ED5C6FCB51213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:a1:9e:da:6d:91:e2:62:83:27:e8:3c:a6:
36:dc:6d:4f:08:a3:13:f5:ac:ca:23:7c:1e:e4:ea:
63:a5:83:f1:d0:58:75:0d:44:66:35:97:12:fb:99:
71:fe:76:df:7c:fd:58:56:76:6f:e6:cc:2f:12:f4:
7d:1d:bc:9d:68:bc:57:c2:f0:bb:87:d6:83:51:27:
63:82:77:bc:23:79:e8:ad:ee:51:b3:3b:bd:4a:3a:
9f:b2:8f:c8:e5:26:ad:53:a5:84:b7:8e:18:a9:ed:
d4:b2:e3:dd:74:28:46:f2:21:13:4a:d9:c6:8b:e5:
a0:8a:23:57:05:fb:84:94:96:97:da:a8:86:ae:a2:
bc:2f:cf:57:df:34:02:79:6e:89:94:f2:be:9c:4c:
fd:14:c2:f7:b6:bc:7a:11:75:5f:68:15:c1:ea:e8:
ed:6c:a1:3f:41:7d:2e:6d:50:6c:cc:d7:3a:6d:31:
ee:1a:8f:13:05:c2:8d:ad:b0:a2:4e:80:cb:79:07:
fd:bf:3d:89:7b:65:51:41:5e:bf:dd:15:46:6a:30:
ce:86:26:b1:c9:43:6e:70:08:83:dd:de:76:da:0f:
f3:ba:80:75:49:17:34:5f:be:4d:5f:b1:9c:79:99:
fa:84:74:3b:17:40:39:91:07:65:0c:58:87:06:49:
9a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:52:80:5B:41:BD:DC:5C:E1:92:48:C6:4E:D5:C6:FC:B5:12:13
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/KndSgFtBvdxc4ZJIxk7Vxvy1EhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
22:96:03:26:88:2c:19:62:26:7b:ee:94:e6:ab:91:70:e4:da:
2b:08:86:b2:01:12:fa:0e:d7:4f:9c:c3:b6:d5:0d:8b:c2:1d:
ad:08:46:6a:49:2b:c4:d3:41:05:a2:a0:79:3b:45:16:8c:e0:
e5:87:22:9d:a0:6e:36:48:74:06:94:ae:de:a4:3d:e8:47:27:
8b:d3:d4:db:60:12:a1:3e:f5:cb:f7:7a:0a:e6:d6:e9:2e:69:
4f:76:07:13:a9:9e:4e:f7:f6:f0:db:53:de:26:7a:24:3a:0a:
37:d7:9a:38:1c:f1:2d:ee:e7:7c:b7:be:41:b1:4d:61:7d:bb:
35:a2:ce:77:2e:63:80:9d:33:8a:2c:89:d7:4e:8d:85:f4:21:
9e:14:d7:2b:9c:c8:39:77:d1:b3:7a:c6:c8:67:32:5c:f7:7e:
b4:8a:cb:0c:35:4e:c4:0d:2c:2a:b7:1f:2a:51:03:bc:35:19:
b7:89:1b:5d:4a:9d:28:91:d5:d9:b0:b8:a4:dd:01:e8:dd:8c:
e7:2f:05:12:93:ee:13:37:f7:f6:91:cb:df:d1:38:f7:c7:2c:
2e:b1:cb:93:85:9a:8b:6c:15:88:bd:09:b0:28:11:e1:43:89:
fe:3b:0d:a7:4a:a5:4b:f1:ff:ce:30:78:22:94:1c:89:ff:d9:
89:af:1f:30
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDEx
MTU1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJBNzc1MjgwNUI0MUJE
REM1Q0UxOTI0OEM2NEVENUM2RkNCNTEyMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7OKGe2m2R4mKDJ+g8pjbcbU8IoxP1rMojfB7k6mOlg/HQWHUN
RGY1lxL7mXH+dt98/VhWdm/mzC8S9H0dvJ1ovFfC8LuH1oNRJ2OCd7wjeeit7lGz
O71KOp+yj8jlJq1TpYS3jhip7dSy4910KEbyIRNK2caL5aCKI1cF+4SUlpfaqIau
orwvz1ffNAJ5bomU8r6cTP0Uwve2vHoRdV9oFcHq6O1soT9BfS5tUGzM1zptMe4a
jxMFwo2tsKJOgMt5B/2/PYl7ZVFBXr/dFUZqMM6GJrHJQ25wCIPd3nbaD/O6gHVJ
FzRfvk1fsZx5mfqEdDsXQDmRB2UMWIcGSZrBAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUKndSgFtBvdxc4ZJIxk7Vxvy1EhMwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0tuZFNnRnRCdmR4YzRa
Skl4azdWeHZ5MUVoTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBACKWAyaILBliJnvulOarkXDk
2isIhrIBEvoO10+cw7bVDYvCHa0IRmpJK8TTQQWioHk7RRaM4OWHIp2gbjZIdAaU
rt6kPehHJ4vT1NtgEqE+9cv3egrm1ukuaU92BxOpnk739vDbU94meiQ6CjfXmjgc
8S3u53y3vkGxTWF9uzWizncuY4CdM4osiddOjYX0IZ4U1yucyDl30bN6xshnMlz3
frSKyww1TsQNLCq3HypRA7w1GbeJG11KnSiR1dmwuKTdAejdjOcvBRKT7hM39/aR
y9/ROPfHLC6xy5OFmotsFYi9CbAoEeFDif47DadKpUvx/84weCKUHIn/2YmvHzA=
-----END CERTIFICATE-----
Generated at Sat May 17 21:28:19 2025 by rpki-client