Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/U79OZocohCCx-BgS1P1eagMr3JM.roa
File:                     U79OZocohCCx-BgS1P1eagMr3JM.roa (raw, json)
Hash identifier:          GwiO4OEV2zB/Lzu/mzyftU2MAV/zOkXtGD3atcbuK4M=
Subject key identifier:   53:BF:4E:66:87:28:84:20:B1:F8:18:12:D4:FD:5E:6A:03:2B:DC:93
Certificate issuer:       /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial:       08FE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/U79OZocohCCx-BgS1P1eagMr3JM.roa
Signing time:             Mon 27 Jan 2025 12:55:18 +0000
ROA not before:           Mon 27 Jan 2025 12:55:18 +0000
ROA not after:            Sat 27 Sep 2025 02:40:14 +0000
asID:                     139076
IP address blocks:        113.31.64.0/21 maxlen: 24
                          113.31.72.0/21 maxlen: 24
                          113.31.128.0/21 maxlen: 24
                          113.31.136.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
        Validity
            Not Before: Jan 27 12:55:18 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=53BF4E6687288420B1F81812D4FD5E6A032BDC93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0e:24:18:8a:9a:0f:79:34:e1:91:5c:2f:a3:
                    6c:a8:36:d6:e7:7b:b6:0c:14:b7:3f:5d:9e:92:a3:
                    61:9b:25:88:6f:e1:c6:da:b9:45:a5:6d:16:35:b7:
                    f7:96:c1:7e:f3:29:9e:a0:a4:c9:54:6e:d7:b0:dc:
                    74:24:4c:62:f4:66:2f:f3:29:49:49:7d:42:17:f7:
                    88:24:cd:33:fa:80:a3:64:46:f2:10:28:4a:5d:21:
                    eb:64:08:40:3c:1d:e5:f3:f0:13:a2:4c:aa:14:da:
                    95:6c:c5:12:c1:06:cb:fd:6f:00:f5:b4:04:a9:54:
                    81:95:c7:a2:25:09:7d:c2:32:92:de:54:5c:ca:cd:
                    da:3d:f8:07:49:6e:ce:ef:1c:f7:07:f5:32:2c:f0:
                    79:2e:99:44:d0:f3:97:31:a3:57:14:98:57:00:87:
                    86:2a:75:70:ee:62:7c:34:88:a4:97:ca:ed:68:6d:
                    ff:2b:f1:b1:27:fb:d5:63:37:94:c7:9d:5e:bb:69:
                    49:aa:a4:44:08:46:aa:19:83:a6:98:e1:e2:a5:cf:
                    c7:05:00:00:30:48:3c:77:30:c2:b9:d9:69:06:96:
                    16:97:ce:19:93:c3:39:71:ec:f6:57:d2:1e:32:a1:
                    0e:cd:32:e5:de:ec:2c:ea:5d:6a:19:90:28:16:34:
                    1b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:4E:66:87:28:84:20:B1:F8:18:12:D4:FD:5E:6A:03:2B:DC:93
            X509v3 Authority Key Identifier:
                keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/U79OZocohCCx-BgS1P1eagMr3JM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.31.64.0/20
                  113.31.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:33:73:9b:3d:6b:6e:94:66:7a:7b:71:f9:27:32:d4:a7:a2:
         b9:ea:88:ba:58:dd:6d:14:9d:dc:64:24:e7:05:4c:aa:6a:5a:
         f1:2e:d9:d2:cc:4a:2c:f1:4d:5b:ae:69:b8:fb:36:ac:bf:c6:
         52:db:27:7c:93:1c:4d:7f:43:85:9e:85:ec:f5:01:58:3b:e9:
         b7:f6:4e:c2:ef:18:79:ab:a7:6f:61:35:53:53:50:43:92:a9:
         c9:3a:42:90:5f:8f:bb:6a:fd:00:d2:b3:40:97:20:cc:a8:30:
         04:26:23:3f:85:0c:64:30:20:08:45:30:6f:60:85:8c:92:fb:
         fd:55:de:e4:5e:19:aa:11:7f:5c:53:de:48:38:d5:59:45:5b:
         40:18:d9:dd:2b:28:89:5d:4d:19:cf:c1:fc:5a:46:6d:ea:83:
         38:09:fd:f8:ae:91:50:c9:5c:cb:dd:b4:cf:88:c7:a6:7a:89:
         2b:0d:dd:f3:5c:27:f2:ca:66:b6:fd:ee:5b:81:fd:4c:ff:58:
         29:74:15:f2:96:c9:47:c3:5a:90:d5:3d:67:24:99:3d:7a:d1:
         49:19:a0:9f:14:f9:0e:01:7b:ca:2f:73:77:1e:3e:c9:f2:f8:
         ea:28:28:45:9e:12:d6:bb:ab:38:45:94:7d:09:9d:2c:8c:71:
         b4:09:35:ce
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjcx
MjU1MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUzQkY0RTY2ODcyODg0
MjBCMUY4MTgxMkQ0RkQ1RTZBMDMyQkRDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtDiQYipoPeTThkVwvo2yoNtbne7YMFLc/XZ6So2GbJYhv4cba
uUWlbRY1t/eWwX7zKZ6gpMlUbtew3HQkTGL0Zi/zKUlJfUIX94gkzTP6gKNkRvIQ
KEpdIetkCEA8HeXz8BOiTKoU2pVsxRLBBsv9bwD1tASpVIGVx6IlCX3CMpLeVFzK
zdo9+AdJbs7vHPcH9TIs8HkumUTQ85cxo1cUmFcAh4YqdXDuYnw0iKSXyu1obf8r
8bEn+9VjN5THnV67aUmqpEQIRqoZg6aY4eKlz8cFAAAwSDx3MMK52WkGlhaXzhmT
wzlx7PZX0h4yoQ7NMuXe7CzqXWoZkCgWNBu9AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUU79OZocohCCx+BgS1P1eagMr3JMwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1U3OU9ab2NvaENDeC1C
Z1MxUDFlYWdNcjNKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEMzc5s9a26UZnp7cfknMtSn
ornqiLpY3W0UndxkJOcFTKpqWvEu2dLMSizxTVuuabj7Nqy/xlLbJ3yTHE1/Q4We
hez1AVg76bf2TsLvGHmrp29hNVNTUEOSqck6QpBfj7tq/QDSs0CXIMyoMAQmIz+F
DGQwIAhFMG9ghYyS+/1V3uReGaoRf1xT3kg41VlFW0AY2d0rKIldTRnPwfxaRm3q
gzgJ/fiukVDJXMvdtM+Ix6Z6iSsN3fNcJ/LKZrb97luB/Uz/WCl0FfKWyUfDWpDV
PWckmT160UkZoJ8U+Q4Be8ovc3cePsny+OooKEWeEta7qzhFlH0JnSyMcbQJNc4=
-----END CERTIFICATE-----
Generated at Sun May 18 01:59:44 2025 by rpki-client