Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Q3eVfPLXqEevELjh6_SfN_05mcM.roa
File: Q3eVfPLXqEevELjh6_SfN_05mcM.roa (raw, json)
Hash identifier: TkSQF/2bE4zpYQY9HHSa6HdOn0U1UuAwIkl/866k3Jk=
Subject key identifier: 43:77:95:7C:F2:D7:A8:47:AF:10:B8:E1:EB:F4:9F:37:FD:39:99:C3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0746
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q3eVfPLXqEevELjh6_SfN_05mcM.roa
Signing time: Wed 22 Jan 2025 22:55:01 +0000
ROA not before: Wed 22 Jan 2025 22:55:01 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1862 (0x746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 22 22:55:01 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4377957CF2D7A847AF10B8E1EBF49F37FD3999C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:92:3f:54:08:57:94:6f:a1:a3:7c:91:7a:
7d:25:98:16:38:59:a5:65:75:e3:07:2b:fa:0d:da:
1d:87:41:60:4f:61:9f:cc:56:1d:6c:4a:59:ca:5f:
b7:01:5a:c2:5e:02:80:31:32:10:39:29:e3:cc:f2:
a2:9e:d8:e2:4d:b0:1c:32:42:4b:2e:6a:1c:b3:4e:
a4:b2:e1:be:49:13:7c:5c:4f:33:27:f5:ff:bf:9f:
2a:6d:e2:02:08:a1:c6:53:46:87:8d:39:0a:74:b4:
79:7a:73:69:f7:96:4d:bf:06:26:48:d3:1f:09:e9:
74:be:b6:60:2f:e4:80:f3:39:ce:74:25:6f:2b:b4:
e5:15:03:39:2b:b4:f2:7b:6d:db:95:76:70:55:67:
6a:46:ff:88:39:1f:78:e3:5e:2f:a5:5f:35:ba:c3:
05:96:fb:32:ea:73:4b:aa:48:18:82:21:e3:4a:54:
0b:a9:7c:2d:d6:7e:f3:d8:f6:10:be:4e:7e:cc:78:
c8:bd:3a:45:f4:f1:04:af:49:d1:fe:7c:89:1d:73:
27:5f:e1:fd:78:c7:34:b5:45:94:7e:b3:98:52:c4:
cf:dd:76:6c:e0:4c:1a:1f:9d:d8:c0:81:86:0a:4f:
f9:b3:12:e2:d1:5a:99:a8:22:3c:51:f6:2e:17:53:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:95:7C:F2:D7:A8:47:AF:10:B8:E1:EB:F4:9F:37:FD:39:99:C3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Q3eVfPLXqEevELjh6_SfN_05mcM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
84:92:46:ed:40:f2:d0:aa:c8:69:dd:3a:e6:a8:36:d5:c6:72:
3c:28:28:5f:b4:de:2f:3e:86:39:77:8c:81:3a:42:af:5f:3e:
c1:bf:65:e1:96:ab:c3:8a:e1:e6:f2:78:8c:96:3f:23:07:17:
57:07:65:a3:25:93:cd:02:4d:09:26:55:f4:5d:82:75:8b:dc:
d0:ce:6a:0b:c7:96:65:dc:38:59:28:95:df:35:cd:d0:56:ce:
1e:1f:ee:44:6f:a5:9f:ac:fe:ff:ec:db:c6:d8:69:d8:b7:5b:
7e:63:21:c8:02:fe:f9:2d:7e:6b:77:e4:79:f6:77:0d:3c:85:
d4:1a:6a:df:64:05:41:89:11:19:81:7a:48:be:fa:2a:83:62:
c5:95:61:53:06:29:23:90:40:8f:9d:31:ba:d3:0c:85:30:b9:
01:77:54:fb:c9:f5:57:c2:61:7d:55:2d:8a:48:f7:f7:b4:48:
1c:55:95:92:cc:15:20:fa:c8:28:a2:8a:36:af:8f:96:db:ea:
50:42:12:f9:d1:00:d7:ca:5d:35:50:5e:a2:62:80:af:30:f3:
f3:dd:91:fc:35:9a:3d:6a:25:f9:4d:3f:77:5b:7d:73:25:17:
ab:bd:7a:0e:46:e7:46:cc:ca:d6:89:1a:5f:7f:4c:ff:a8:3b:
d7:f5:25:6a
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB0YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjIy
MjU1MDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQzNzc5NTdDRjJEN0E4
NDdBRjEwQjhFMUVCRjQ5RjM3RkQzOTk5QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0cpI/VAhXlG+ho3yRen0lmBY4WaVldeMHK/oN2h2HQWBPYZ/M
Vh1sSlnKX7cBWsJeAoAxMhA5KePM8qKe2OJNsBwyQksuahyzTqSy4b5JE3xcTzMn
9f+/nypt4gIIocZTRoeNOQp0tHl6c2n3lk2/BiZI0x8J6XS+tmAv5IDzOc50JW8r
tOUVAzkrtPJ7bduVdnBVZ2pG/4g5H3jjXi+lXzW6wwWW+zLqc0uqSBiCIeNKVAup
fC3WfvPY9hC+Tn7MeMi9OkX08QSvSdH+fIkdcydf4f14xzS1RZR+s5hSxM/ddmzg
TBofndjAgYYKT/mzEuLRWpmoIjxR9i4XU54lAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUQ3eVfPLXqEevELjh6/SfN/05mcMwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1EzZVZmUExYcUVldkVM
amg2X1NmTl8wNW1jTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAISSRu1A8tCqyGndOuaoNtXG
cjwoKF+03i8+hjl3jIE6Qq9fPsG/ZeGWq8OK4ebyeIyWPyMHF1cHZaMlk80CTQkm
VfRdgnWL3NDOagvHlmXcOFkold81zdBWzh4f7kRvpZ+s/v/s28bYadi3W35jIcgC
/vktfmt35Hn2dw08hdQaat9kBUGJERmBeki++iqDYsWVYVMGKSOQQI+dMbrTDIUw
uQF3VPvJ9VfCYX1VLYpI9/e0SBxVlZLMFSD6yCiiijavj5bb6lBCEvnRANfKXTVQ
XqJigK8w8/Pdkfw1mj1qJflNP3dbfXMlF6u9eg5G50bMytaJGl9/TP+oO9f1JWo=
-----END CERTIFICATE-----
Generated at Sun May 18 03:06:36 2025 by rpki-client