Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/TJekP0BH0Y-g6aggIB2jmBHs0mI.roa
File: TJekP0BH0Y-g6aggIB2jmBHs0mI.roa (raw, json)
Hash identifier: F5WkimgqRcvzhOMLcOg+gFx/8dFk5l2lfuT7o7OxXvA=
Subject key identifier: 4C:97:A4:3F:40:47:D1:8F:A0:E9:A8:20:20:1D:A3:98:11:EC:D2:62
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 065C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TJekP0BH0Y-g6aggIB2jmBHs0mI.roa
Signing time: Mon 20 Jan 2025 12:25:23 +0000
ROA not before: Mon 20 Jan 2025 12:25:23 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1628 (0x65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 12:25:23 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4C97A43F4047D18FA0E9A820201DA39811ECD262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:88:ad:09:71:8e:ea:7d:3e:f6:90:60:a6:18:
48:51:7d:8f:2a:79:d7:a5:ef:d3:b5:d5:12:e9:f8:
90:17:73:8b:58:82:cb:94:41:bf:fa:b7:fc:26:8b:
70:88:fb:78:f1:e6:45:1e:25:d1:20:96:ea:ea:59:
2a:fe:4d:3d:e7:1a:66:87:b2:eb:5d:34:42:86:b4:
e1:13:42:14:23:a5:d5:ce:2e:3a:a5:af:ed:0a:ac:
8a:c8:97:07:62:0a:7a:1f:21:d2:c0:c4:2c:4e:5a:
7c:67:1e:d0:eb:e1:dc:03:42:b8:2b:72:bb:74:e3:
0f:2b:38:b9:d2:67:c3:47:21:71:80:b9:6f:95:8b:
c5:98:73:17:59:8d:c5:e3:d0:6c:5b:42:2c:55:5c:
15:17:85:0d:26:5c:6c:48:b6:63:3b:3e:99:89:2a:
8b:ce:90:a0:c5:92:59:98:c4:d6:10:5a:05:22:f4:
c4:9b:19:f8:b4:74:d7:0c:a1:15:3b:f9:93:e4:14:
6b:29:9b:16:b1:50:0d:19:c3:33:bb:50:3b:34:e7:
a3:e2:8d:f2:0e:49:bb:71:fc:a7:f2:a9:d0:75:2e:
68:2c:e9:81:b7:f3:fb:19:ca:4c:8b:ce:97:96:32:
c0:25:5c:a0:9c:33:a8:e4:84:f8:64:ac:9e:72:68:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:97:A4:3F:40:47:D1:8F:A0:E9:A8:20:20:1D:A3:98:11:EC:D2:62
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/TJekP0BH0Y-g6aggIB2jmBHs0mI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
45:6c:ad:66:8a:a8:a3:15:cd:19:92:c9:07:08:6c:7c:fc:c7:
48:24:f1:bf:d8:40:24:7d:b3:cb:c5:3f:e3:f9:d7:91:20:cb:
73:d8:c9:c0:78:d5:c1:bf:4c:32:db:d8:96:7d:e5:d0:5e:05:
8c:40:57:b8:23:94:4d:1d:a5:3a:6a:74:68:b3:02:13:83:bd:
5c:c3:02:a0:cf:39:4e:87:91:79:f4:0e:60:da:8d:96:25:f0:
f0:13:9a:7a:da:63:e8:00:97:f7:af:6a:58:b1:b7:11:9d:cb:
0a:0b:26:2e:73:9c:be:5d:27:35:2a:9a:f5:cb:e5:e5:54:dd:
dc:1f:af:ec:90:d2:18:a0:15:31:57:52:09:c6:c5:ec:17:37:
8e:7d:f7:85:80:31:e2:7b:02:a8:16:a3:9d:bf:b0:2c:50:3e:
2c:e9:d0:48:fd:24:26:eb:3d:f1:3a:d4:7c:f1:59:19:5a:86:
3d:c5:c2:af:4f:96:fc:cc:7b:f2:17:45:7a:e7:5f:08:38:74:
fa:ef:bc:f3:0a:81:3f:3b:96:8d:c1:37:cc:73:01:ad:28:66:
1b:29:d5:8f:13:5b:c4:bc:b6:23:0e:f0:46:2f:27:a5:8a:69:
5c:26:81:fb:7c:89:6b:62:80:c7:15:7d:6b:93:c1:13:13:10:
b3:90:66:0e
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBlwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjAx
MjI1MjNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDRDOTdBNDNGNDA0N0Qx
OEZBMEU5QTgyMDIwMURBMzk4MTFFQ0QyNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSiK0JcY7qfT72kGCmGEhRfY8qedel79O11RLp+JAXc4tYgsuU
Qb/6t/wmi3CI+3jx5kUeJdEglurqWSr+TT3nGmaHsutdNEKGtOETQhQjpdXOLjql
r+0KrIrIlwdiCnofIdLAxCxOWnxnHtDr4dwDQrgrcrt04w8rOLnSZ8NHIXGAuW+V
i8WYcxdZjcXj0GxbQixVXBUXhQ0mXGxItmM7PpmJKovOkKDFklmYxNYQWgUi9MSb
Gfi0dNcMoRU7+ZPkFGspmxaxUA0ZwzO7UDs056PijfIOSbtx/KfyqdB1Lmgs6YG3
8/sZykyLzpeWMsAlXKCcM6jkhPhkrJ5yaDuZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUTJekP0BH0Y+g6aggIB2jmBHs0mIwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1RKZWtQMEJIMFktZzZh
Z2dJQjJqbUJIczBtSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEVsrWaKqKMVzRmSyQcIbHz8
x0gk8b/YQCR9s8vFP+P515Egy3PYycB41cG/TDLb2JZ95dBeBYxAV7gjlE0dpTpq
dGizAhODvVzDAqDPOU6HkXn0DmDajZYl8PATmnraY+gAl/evalixtxGdywoLJi5z
nL5dJzUqmvXL5eVU3dwfr+yQ0higFTFXUgnGxewXN45994WAMeJ7AqgWo52/sCxQ
Pizp0Ej9JCbrPfE61HzxWRlahj3Fwq9PlvzMe/IXRXrnXwg4dPrvvPMKgT87lo3B
N8xzAa0oZhsp1Y8TW8S8tiMO8EYvJ6WKaVwmgft8iWtigMcVfWuTwRMTELOQZg4=
-----END CERTIFICATE-----
Generated at Sat May 17 23:44:32 2025 by rpki-client