Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/So7RiA-bv54XJkt4XajrsUyVLmM.roa
File: So7RiA-bv54XJkt4XajrsUyVLmM.roa (raw, json)
Hash identifier: Y2umuH83ADD13GTjgiBw3akVJja1MpegPGTrX/zUiaU=
Subject key identifier: 4A:8E:D1:88:0F:9B:BF:9E:17:26:4B:78:5D:A8:EB:B1:4C:95:2E:63
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C4C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/So7RiA-bv54XJkt4XajrsUyVLmM.roa
Signing time: Wed 05 Feb 2025 08:25:45 +0000
ROA not before: Wed 05 Feb 2025 08:25:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3148 (0xc4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 08:25:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4A8ED1880F9BBF9E17264B785DA8EBB14C952E63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:53:53:d0:54:eb:7d:43:76:8f:9a:39:77:
f8:cb:14:6e:64:8f:2b:3f:6f:8f:25:29:72:bd:7e:
f2:a0:f4:b3:98:c0:6e:ef:df:2a:69:39:09:fc:1a:
f7:cf:af:ae:55:f6:10:08:5b:ab:e9:09:ae:1b:3e:
c4:24:dd:a9:ad:c7:d7:bb:67:b2:f2:41:b8:2a:ca:
b4:b0:78:07:e5:6a:c0:8a:2c:0e:65:ba:c6:6f:19:
69:38:b1:1e:58:01:77:ac:76:15:9a:c5:1b:87:63:
85:78:61:8d:a1:d0:03:f0:1c:1a:b7:39:49:90:03:
24:70:3a:82:77:98:e4:a9:1a:84:cd:81:23:1a:49:
86:53:3e:5b:26:e7:20:10:62:0a:f7:f9:4d:a8:9a:
aa:c9:36:0c:9b:58:7b:79:9a:e7:58:c1:de:49:ae:
9e:f6:e8:6d:21:cb:6d:47:47:ac:dc:1b:aa:b3:ff:
99:2f:8d:d8:df:fd:e9:b0:6f:bf:24:0a:64:e1:db:
27:86:92:62:9a:bd:5d:fb:69:7a:7b:da:3c:44:af:
8f:ef:86:a5:47:d3:4c:ac:cf:82:00:95:4e:ab:1c:
f5:fb:23:65:7b:73:76:73:92:c4:1e:a1:33:a0:5e:
fa:7e:2c:56:ea:b4:f2:23:67:a6:65:2b:a3:29:ec:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8E:D1:88:0F:9B:BF:9E:17:26:4B:78:5D:A8:EB:B1:4C:95:2E:63
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/So7RiA-bv54XJkt4XajrsUyVLmM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
96:fd:58:28:bb:8b:e3:11:5b:da:54:ae:6e:26:cb:07:51:ea:
2e:36:2d:0e:5d:88:d9:12:7d:8e:fa:53:d5:79:3e:98:bd:03:
15:c8:9c:b7:78:a7:0b:f4:21:e6:22:c8:51:29:06:00:09:e1:
45:17:a5:bc:da:32:30:ac:b6:61:8a:33:bd:76:5b:f7:a5:e1:
76:f0:64:b2:65:14:51:24:cf:63:ca:f1:f4:dd:47:22:0a:a7:
b7:db:10:e9:9b:d7:37:5c:49:cf:53:c8:dc:6a:a7:fc:a6:d8:
91:b9:8f:d8:1b:4f:53:d1:9a:52:a2:34:12:52:24:13:b5:f0:
27:49:23:74:3d:cc:0d:40:93:d6:40:48:8b:fa:50:47:e3:66:
07:fe:69:09:fe:5e:ab:84:46:05:6f:f9:c4:61:92:ff:ad:46:
2e:dc:2b:3d:2f:93:21:48:d6:f0:21:5c:26:61:66:27:87:59:
f5:23:35:af:e6:cc:be:7f:79:bb:2d:71:79:75:a2:02:c6:dd:
6c:45:c6:1c:74:3e:ae:42:89:e7:10:61:16:68:55:46:d4:e4:
d6:c8:59:fd:7f:e2:0d:d5:e4:29:2f:eb:6a:6b:78:f1:18:c3:
40:89:e1:f2:1f:6a:f7:1b:a1:bb:86:39:2b:fb:07:57:7f:78:
1a:38:e2:58
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDEwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDUw
ODI1NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRBOEVEMTg4MEY5QkJG
OUUxNzI2NEI3ODVEQThFQkIxNEM5NTJFNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKElNT0FTrfUN2j5o5d/jLFG5kjys/b48lKXK9fvKg9LOYwG7v
3yppOQn8GvfPr65V9hAIW6vpCa4bPsQk3amtx9e7Z7LyQbgqyrSweAflasCKLA5l
usZvGWk4sR5YAXesdhWaxRuHY4V4YY2h0APwHBq3OUmQAyRwOoJ3mOSpGoTNgSMa
SYZTPlsm5yAQYgr3+U2omqrJNgybWHt5mudYwd5Jrp726G0hy21HR6zcG6qz/5kv
jdjf/emwb78kCmTh2yeGkmKavV37aXp72jxEr4/vhqVH00ysz4IAlU6rHPX7I2V7
c3ZzksQeoTOgXvp+LFbqtPIjZ6ZlK6Mp7KLvAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUSo7RiA+bv54XJkt4XajrsUyVLmMwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1NvN1JpQS1idjU0WEpr
dDRYYWpyc1V5VkxtTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAJb9WCi7i+MRW9pUrm4mywdR
6i42LQ5diNkSfY76U9V5Ppi9AxXInLd4pwv0IeYiyFEpBgAJ4UUXpbzaMjCstmGK
M712W/el4XbwZLJlFFEkz2PK8fTdRyIKp7fbEOmb1zdcSc9TyNxqp/ym2JG5j9gb
T1PRmlKiNBJSJBO18CdJI3Q9zA1Ak9ZASIv6UEfjZgf+aQn+XquERgVv+cRhkv+t
Ri7cKz0vkyFI1vAhXCZhZieHWfUjNa/mzL5/ebstcXl1ogLG3WxFxhx0Pq5CiecQ
YRZoVUbU5NbIWf1/4g3V5Ckv62prePEYw0CJ4fIfavcbobuGOSv7B1d/eBo44lg=
-----END CERTIFICATE-----
Generated at Sun May 18 01:07:07 2025 by rpki-client