Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/VoO2ag6S86TpgahFQawqYp_r8Cs.roa
File: VoO2ag6S86TpgahFQawqYp_r8Cs.roa (raw, json)
Hash identifier: qtXEpjOSJwoLGhNqzsiX2VBWMkpw/xgUoMx83kWGea4=
Subject key identifier: 56:83:B6:6A:0E:92:F3:A4:E9:81:A8:45:41:AC:2A:62:9F:EB:F0:2B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08DC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VoO2ag6S86TpgahFQawqYp_r8Cs.roa
Signing time: Mon 27 Jan 2025 04:26:47 +0000
ROA not before: Mon 27 Jan 2025 04:26:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2268 (0x8dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 27 04:26:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5683B66A0E92F3A4E981A84541AC2A629FEBF02B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:83:b3:a7:72:f4:27:36:3f:e3:37:f3:d1:
39:38:5b:07:2a:1d:f8:60:f7:82:0e:94:09:56:95:
76:90:c7:e6:9f:d1:a1:fb:24:8a:4d:ce:f3:17:59:
27:77:bd:5a:d2:6a:3b:3d:8b:eb:95:7a:e5:6b:1e:
12:18:0c:9b:ae:58:82:b0:58:35:5c:25:9f:da:f4:
ea:e0:05:60:89:0e:bb:32:d6:25:f4:84:4a:5d:bc:
4d:b0:bc:12:63:2f:cf:62:c6:55:97:cc:6e:7c:60:
ac:aa:78:ef:30:6a:4c:83:fa:7c:78:7f:f7:2d:2c:
de:12:35:d9:0b:92:ed:54:31:90:89:ad:dd:17:ca:
19:40:2e:b1:2f:8d:36:c3:34:c2:77:b8:04:26:12:
b2:e6:0c:88:a0:b1:fa:27:d1:b6:b6:5f:eb:64:47:
a7:c5:ca:8c:29:53:65:0c:96:f1:2b:49:3d:7e:f4:
9f:8e:ac:05:3d:ea:b7:85:96:ba:f8:78:23:06:a0:
18:ca:d1:2e:a1:1d:19:d8:49:ea:8f:92:bc:22:c6:
5e:9c:5e:93:8e:f3:ae:d0:d0:85:5a:22:e4:52:99:
78:9f:a4:d3:00:75:32:a9:86:1d:12:a5:4f:a9:aa:
f7:43:3d:75:c9:c7:25:b8:fc:a0:f3:4c:48:1a:0f:
49:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:B6:6A:0E:92:F3:A4:E9:81:A8:45:41:AC:2A:62:9F:EB:F0:2B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VoO2ag6S86TpgahFQawqYp_r8Cs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:2e:3b:a6:51:b6:cc:23:f6:89:82:0f:07:e8:d8:b8:1f:98:
bc:ae:0f:84:25:48:68:71:d7:59:f9:7a:f6:45:51:98:4e:4c:
92:15:0f:ef:7a:32:c7:4b:9c:d9:3d:12:35:ad:97:b7:bb:d8:
56:da:ab:6c:fa:a9:9d:26:46:39:7c:cb:ad:97:06:6f:16:9a:
af:48:1d:58:cb:19:1d:59:9a:8a:51:7e:4f:35:b4:c6:82:e5:
32:5c:ba:b2:f6:40:d4:08:a8:ba:77:3c:c9:de:c9:4a:71:53:
41:bd:18:ca:73:ed:a9:fb:c8:ec:22:73:97:78:ac:1c:4c:1d:
9b:e6:29:4e:2e:4f:c3:ba:95:f2:19:7d:24:01:3e:1a:a0:8f:
57:20:31:91:81:4d:97:d5:69:9e:43:1b:df:5b:95:f0:25:1b:
99:6d:62:f6:83:22:91:f3:f6:fb:b1:9e:56:2f:6c:29:ad:e7:
f9:38:a6:08:82:3b:ac:41:de:53:73:bd:a0:52:f3:5e:6d:9a:
5a:f9:bf:a0:33:7d:f6:72:74:0a:d0:be:b4:39:23:3c:87:ef:
16:73:c5:5b:a3:79:e1:81:40:34:70:63:41:56:b1:1c:ef:38:
43:0f:c6:10:cd:04:25:47:e6:23:72:c8:ed:9f:8d:11:a4:c6:
de:2d:95:86
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjcw
NDI2NDdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU2ODNCNjZBMEU5MkYz
QTRFOTgxQTg0NTQxQUMyQTYyOUZFQkYwMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuJIOzp3L0JzY/4zfz0Tk4WwcqHfhg94IOlAlWlXaQx+af0aH7
JIpNzvMXWSd3vVrSajs9i+uVeuVrHhIYDJuuWIKwWDVcJZ/a9OrgBWCJDrsy1iX0
hEpdvE2wvBJjL89ixlWXzG58YKyqeO8wakyD+nx4f/ctLN4SNdkLku1UMZCJrd0X
yhlALrEvjTbDNMJ3uAQmErLmDIigsfon0ba2X+tkR6fFyowpU2UMlvErST1+9J+O
rAU96reFlrr4eCMGoBjK0S6hHRnYSeqPkrwixl6cXpOO867Q0IVaIuRSmXifpNMA
dTKphh0SpU+pqvdDPXXJxyW4/KDzTEgaD0kbAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUVoO2ag6S86TpgahFQawqYp/r8CswHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1ZvTzJhZzZTODZUcGdh
aEZRYXdxWXBfcjhDcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALUuO6ZRtswj9omCDwfo2Lgf
mLyuD4QlSGhx11n5evZFUZhOTJIVD+96MsdLnNk9EjWtl7e72Fbaq2z6qZ0mRjl8
y62XBm8Wmq9IHVjLGR1ZmopRfk81tMaC5TJcurL2QNQIqLp3PMneyUpxU0G9GMpz
7an7yOwic5d4rBxMHZvmKU4uT8O6lfIZfSQBPhqgj1cgMZGBTZfVaZ5DG99blfAl
G5ltYvaDIpHz9vuxnlYvbCmt5/k4pgiCO6xB3lNzvaBS815tmlr5v6AzffZydArQ
vrQ5IzyH7xZzxVujeeGBQDRwY0FWsRzvOEMPxhDNBCVH5iNyyO2fjRGkxt4tlYY=
-----END CERTIFICATE-----
Generated at Sun May 18 02:00:33 2025 by rpki-client