Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/cL7YiOiCUg6lhFAi3DCjxXk49jI.roa
File: cL7YiOiCUg6lhFAi3DCjxXk49jI.roa (raw, json)
Hash identifier: cXddn2NGmH5GYENPo2nZ+9zR6Z3fMJe9gpgy2CQpLhw=
Subject key identifier: 70:BE:D8:88:E8:82:52:0E:A5:84:50:22:DC:30:A3:C5:79:38:F6:32
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 082C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cL7YiOiCUg6lhFAi3DCjxXk49jI.roa
Signing time: Sat 25 Jan 2025 08:25:54 +0000
ROA not before: Sat 25 Jan 2025 08:25:54 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2092 (0x82c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 08:25:54 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=70BED888E882520EA5845022DC30A3C57938F632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:8d:a2:38:16:91:1a:ea:96:a9:cf:00:7d:
56:84:6a:96:db:d5:f6:8c:5e:3d:df:66:b7:d1:8b:
24:24:40:78:a9:86:9b:a1:00:93:d8:74:1e:7a:db:
f3:ca:b1:8f:e5:56:a1:7a:72:aa:c2:6d:74:8a:cb:
ef:08:0a:4c:bf:11:92:94:7a:54:c7:6d:46:de:22:
63:46:25:88:30:73:d0:e3:24:7e:2e:14:2d:c3:e9:
f3:e1:e1:f9:e9:29:c9:1f:09:12:4d:44:5d:ef:c6:
48:b3:4b:25:a3:b7:2c:70:67:d3:0f:74:59:13:c3:
b9:ff:aa:30:8b:64:1c:87:ab:02:e9:36:e2:3f:2d:
3f:69:12:39:71:ce:e0:e8:d5:23:86:3d:72:ed:9a:
aa:75:2c:33:86:6a:a5:e8:9d:51:dc:9f:10:f4:7e:
56:c6:4e:db:04:b7:3d:79:11:41:59:92:f1:5e:f0:
8e:a5:96:f4:2c:59:76:60:57:0e:d8:e7:1c:81:b6:
4f:4d:dd:31:9f:57:83:08:1c:de:36:1c:f4:79:68:
bd:a5:a4:2d:88:0a:4f:1e:4c:a3:5a:1f:54:8a:0c:
db:b3:e4:65:8d:ff:7c:87:b6:cf:8c:ca:98:f0:22:
18:d1:de:2c:24:85:da:00:16:c5:87:24:68:3a:b4:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BE:D8:88:E8:82:52:0E:A5:84:50:22:DC:30:A3:C5:79:38:F6:32
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/cL7YiOiCUg6lhFAi3DCjxXk49jI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
18:67:df:2a:f8:f2:4f:36:13:dd:45:32:0b:89:62:ad:99:84:
a4:2f:38:94:4a:86:a6:88:f2:a2:83:e8:e8:76:17:ec:3d:33:
a7:53:da:ba:48:61:40:e2:5c:76:ad:f5:38:6d:25:f4:73:d8:
86:35:b4:07:c8:a5:60:4e:5b:05:ef:2d:12:12:a3:75:c1:84:
44:a6:d4:db:f8:1b:23:32:96:d0:57:c3:47:af:57:f8:77:a6:
ce:c1:ff:0d:02:4a:bc:16:be:75:61:3c:9b:1e:b6:8b:22:1b:
7f:9e:9a:a0:13:7f:87:67:7b:86:86:57:bd:52:cf:77:a8:7b:
21:d2:73:f6:3a:47:e5:47:a1:41:20:3d:e4:9d:66:84:75:dc:
25:80:8f:25:6d:c1:ba:00:d1:78:aa:02:51:89:96:2d:b1:cc:
d1:0f:59:2d:7b:21:a3:29:0b:86:02:b0:ec:92:26:81:fb:34:
8f:43:89:73:d4:d0:97:1b:71:f5:1b:b6:d6:60:1d:3e:30:a4:
7d:cc:1f:18:de:63:47:48:f6:87:22:a1:c9:22:dc:37:ec:70:
23:37:2d:1c:6a:e5:66:38:e5:1d:e6:59:b3:5e:ef:54:09:72:
38:67:57:3d:9a:cb:ab:c6:4e:0e:8a:ff:8f:d2:ae:14:c6:d9:
a8:9d:43:b9
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCCwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjUw
ODI1NTRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDcwQkVEODg4RTg4MjUy
MEVBNTg0NTAyMkRDMzBBM0M1NzkzOEY2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBzo2iOBaRGuqWqc8AfVaEapbb1faMXj3fZrfRiyQkQHiphpuh
AJPYdB562/PKsY/lVqF6cqrCbXSKy+8ICky/EZKUelTHbUbeImNGJYgwc9DjJH4u
FC3D6fPh4fnpKckfCRJNRF3vxkizSyWjtyxwZ9MPdFkTw7n/qjCLZByHqwLpNuI/
LT9pEjlxzuDo1SOGPXLtmqp1LDOGaqXonVHcnxD0flbGTtsEtz15EUFZkvFe8I6l
lvQsWXZgVw7Y5xyBtk9N3TGfV4MIHN42HPR5aL2lpC2ICk8eTKNaH1SKDNuz5GWN
/3yHts+MypjwIhjR3iwkhdoAFsWHJGg6tExhAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUcL7YiOiCUg6lhFAi3DCjxXk49jIwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2NMN1lpT2lDVWc2bGhG
QWkzRENqeFhrNDlqSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBABhn3yr48k82E91FMguJYq2Z
hKQvOJRKhqaI8qKD6Oh2F+w9M6dT2rpIYUDiXHat9ThtJfRz2IY1tAfIpWBOWwXv
LRISo3XBhESm1Nv4GyMyltBXw0evV/h3ps7B/w0CSrwWvnVhPJsetosiG3+emqAT
f4dne4aGV71Sz3eoeyHSc/Y6R+VHoUEgPeSdZoR13CWAjyVtwboA0XiqAlGJli2x
zNEPWS17IaMpC4YCsOySJoH7NI9DiXPU0JcbcfUbttZgHT4wpH3MHxjeY0dI9oci
ocki3DfscCM3LRxq5WY45R3mWbNe71QJcjhnVz2ay6vGTg6K/4/SrhTG2aidQ7k=
-----END CERTIFICATE-----
Generated at Sun May 18 19:40:12 2025 by rpki-client