Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/a596TTB2yRTsu3-gRtaiqbXYJME.roa
File: a596TTB2yRTsu3-gRtaiqbXYJME.roa (raw, json)
Hash identifier: +M2EqeqhPK/V80IF5mW8M0yL/vsVz59OBGnAvriPzoY=
Subject key identifier: 6B:9F:7A:4D:30:76:C9:14:EC:BB:7F:A0:46:D6:A2:A9:B5:D8:24:C1
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0690
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/a596TTB2yRTsu3-gRtaiqbXYJME.roa
Signing time: Tue 21 Jan 2025 01:24:56 +0000
ROA not before: Tue 21 Jan 2025 01:24:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1680 (0x690)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 01:24:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=6B9F7A4D3076C914ECBB7FA046D6A2A9B5D824C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5e:a5:bb:64:ad:8e:f2:e2:91:e9:b0:9e:00:
4a:1c:c1:e9:65:76:c7:75:14:65:ef:6f:95:ee:34:
51:c7:b4:16:2d:09:0f:f5:e2:b1:d8:70:d2:db:69:
b3:b8:9f:9b:64:21:12:81:30:7a:a6:39:18:f9:19:
f5:3b:b2:b0:43:a6:2d:e4:50:84:45:de:1c:93:91:
68:0d:23:d0:be:7b:79:55:57:28:f5:e0:46:fc:b4:
eb:d0:39:7e:bb:22:71:7b:3c:39:8b:e0:b3:93:5e:
7b:91:57:c5:6d:cd:83:23:db:61:d2:ef:1e:73:73:
01:c1:c1:15:86:da:14:82:f6:19:9c:44:6c:08:56:
60:38:54:23:cd:6c:46:60:60:98:4b:e4:9f:7e:1c:
50:58:9b:db:b7:a2:9a:0f:56:d5:7a:a9:04:15:bd:
b6:50:e3:b8:b9:e8:8e:44:22:f9:7b:df:74:f0:17:
2f:7a:d8:48:e8:c0:a6:bb:76:7b:94:d6:ca:95:6b:
22:94:55:d7:fe:94:7f:0e:01:35:f5:1b:c1:6f:71:
d7:4c:b9:44:20:1a:4c:70:de:18:4a:70:3d:6d:21:
e4:ce:24:f5:a5:60:68:ae:d1:46:c7:25:e4:f4:b3:
56:91:b7:f2:4b:76:e6:a9:d9:e2:05:47:d0:69:c8:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9F:7A:4D:30:76:C9:14:EC:BB:7F:A0:46:D6:A2:A9:B5:D8:24:C1
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/a596TTB2yRTsu3-gRtaiqbXYJME.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
72:26:4f:6d:15:77:40:50:39:3d:32:9e:9f:1d:8c:18:b9:04:
94:2b:7f:ec:83:a3:53:62:82:f5:37:6d:ed:ec:31:5e:75:13:
21:d6:cb:02:bb:58:2a:83:52:a5:d5:60:34:73:76:f3:b3:f8:
cf:db:4c:53:ac:e7:70:47:4b:ca:38:56:ec:9b:b8:c9:aa:79:
b8:01:21:ef:c3:b5:d3:18:f6:3c:d0:03:4d:42:27:60:e6:91:
d1:ef:64:0c:45:ef:b4:5c:56:92:f8:b2:3d:b0:65:fa:a2:0f:
74:9e:c8:b6:d5:19:fd:39:ec:97:6a:9d:c9:2c:26:01:04:4b:
3e:22:5e:71:8f:6b:2a:7a:ca:f5:12:f3:fc:03:1e:52:34:a5:
8b:93:76:24:c5:1d:d7:3d:d2:f8:0e:24:e2:18:94:83:c7:57:
7a:d8:da:29:7b:29:fd:3b:a5:4e:53:5d:9e:a3:b6:fc:82:8f:
03:5e:73:fc:f2:1d:ec:a6:8d:44:b0:8a:18:a3:35:ad:af:e9:
97:8a:49:05:27:96:96:5d:6f:5e:98:85:56:06:f3:dd:6a:78:
c2:a3:4b:e8:d1:12:a8:c0:fc:93:10:af:55:8b:8a:09:00:64:
86:d4:05:de:05:eb:f9:86:95:61:b6:01:f9:d2:1a:f2:d6:e3:
e5:36:a6:ec
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjEw
MTI0NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDZCOUY3QTREMzA3NkM5
MTRFQ0JCN0ZBMDQ2RDZBMkE5QjVEODI0QzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlXqW7ZK2O8uKR6bCeAEocwelldsd1FGXvb5XuNFHHtBYtCQ/1
4rHYcNLbabO4n5tkIRKBMHqmORj5GfU7srBDpi3kUIRF3hyTkWgNI9C+e3lVVyj1
4Eb8tOvQOX67InF7PDmL4LOTXnuRV8VtzYMj22HS7x5zcwHBwRWG2hSC9hmcRGwI
VmA4VCPNbEZgYJhL5J9+HFBYm9u3opoPVtV6qQQVvbZQ47i56I5EIvl733TwFy96
2EjowKa7dnuU1sqVayKUVdf+lH8OATX1G8FvcddMuUQgGkxw3hhKcD1tIeTOJPWl
YGiu0UbHJeT0s1aRt/JLduap2eIFR9BpyAzLAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUa596TTB2yRTsu3+gRtaiqbXYJMEwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2E1OTZUVEIyeVJUc3Uz
LWdSdGFpcWJYWUpNRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAHImT20Vd0BQOT0ynp8djBi5
BJQrf+yDo1NigvU3be3sMV51EyHWywK7WCqDUqXVYDRzdvOz+M/bTFOs53BHS8o4
VuybuMmqebgBIe/DtdMY9jzQA01CJ2DmkdHvZAxF77RcVpL4sj2wZfqiD3SeyLbV
Gf057JdqncksJgEESz4iXnGPayp6yvUS8/wDHlI0pYuTdiTFHdc90vgOJOIYlIPH
V3rY2il7Kf07pU5TXZ6jtvyCjwNec/zyHeymjUSwihijNa2v6ZeKSQUnlpZdb16Y
hVYG891qeMKjS+jREqjA/JMQr1WLigkAZIbUBd4F6/mGlWG2AfnSGvLW4+U2puw=
-----END CERTIFICATE-----
Generated at Sat May 17 19:42:18 2025 by rpki-client