Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/fdIuD6fuEvG2FB_rnfajH99BNKk.roa
File: fdIuD6fuEvG2FB_rnfajH99BNKk.roa (raw, json)
Hash identifier: ZLGXBwpZbvvt5MKsM596YfEDk4D4rXqOe/VYw0ktwVg=
Subject key identifier: 7D:D2:2E:0F:A7:EE:12:F1:B6:14:1F:EB:9D:F6:A3:1F:DF:41:34:A9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BCE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fdIuD6fuEvG2FB_rnfajH99BNKk.roa
Signing time: Tue 04 Feb 2025 00:55:41 +0000
ROA not before: Tue 04 Feb 2025 00:55:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3022 (0xbce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 00:55:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7DD22E0FA7EE12F1B6141FEB9DF6A31FDF4134A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:da:22:48:e0:db:a4:60:00:e6:85:3c:68:
fe:09:6a:ed:ab:f4:82:2f:cf:d5:4c:e3:b6:fe:34:
24:70:69:c0:eb:c4:25:50:6f:82:39:58:a5:93:54:
33:e3:de:67:2c:a9:67:a2:a6:b0:90:0b:0d:20:d3:
a8:50:0d:bc:c6:72:8c:27:d8:71:4f:49:98:fc:54:
42:4f:b2:85:1e:34:e5:58:bb:06:bf:28:bb:35:36:
ae:1f:e9:87:85:38:e4:17:30:2f:30:9a:6b:5b:0c:
41:e6:93:94:bb:5e:60:93:7f:f2:8f:da:71:9e:20:
9d:38:5c:83:4d:ac:d6:e6:c7:90:6c:0a:63:dd:a2:
ad:1a:f5:ff:ad:93:20:e2:98:be:42:03:a7:fa:bc:
ce:c4:10:fb:63:95:5f:08:a5:89:73:83:03:29:8a:
a6:d2:91:cc:7a:10:e3:35:7b:a4:7e:7a:89:0e:12:
dd:9b:17:05:87:02:24:fc:0c:89:dd:f6:43:21:67:
fd:33:41:f0:61:d5:fe:54:6e:af:4d:65:52:15:90:
af:ca:7c:2b:66:8a:ac:54:18:da:1d:ce:89:d9:14:
7c:1e:6f:3b:a3:8d:1c:0b:37:c8:77:4a:a8:28:ca:
49:38:88:08:2b:90:86:89:5b:3d:41:4a:d9:ea:22:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:2E:0F:A7:EE:12:F1:B6:14:1F:EB:9D:F6:A3:1F:DF:41:34:A9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fdIuD6fuEvG2FB_rnfajH99BNKk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:f3:23:b3:c1:c9:27:8a:e1:b6:8a:30:61:85:f9:7f:98:0a:
07:39:86:64:9b:fe:37:b4:c0:e1:2e:0a:49:00:3c:93:45:fa:
2d:c0:3f:43:10:11:a3:76:77:67:3a:21:c5:d2:3d:50:3f:8a:
32:3e:b8:d7:65:5b:50:9c:a6:6a:3a:c9:a2:b0:3d:ec:6e:aa:
b9:d3:85:3f:9c:c6:0f:da:fb:eb:33:4a:1b:9b:dd:f6:03:e9:
9f:a2:04:2f:68:23:a3:4d:67:71:1f:06:9b:d3:9e:27:15:2a:
81:94:2d:44:e9:b8:61:ae:09:e3:c1:57:15:10:b3:3f:47:fb:
6c:48:0a:20:6f:f7:15:a1:3b:c0:bf:cb:50:6b:5a:ee:f9:ad:
b7:75:83:f9:0f:b0:23:dd:c1:fb:4d:93:07:71:58:1a:d3:0e:
04:5b:13:58:2a:50:db:01:13:92:c5:93:82:a3:d7:c4:a6:35:
60:1d:f9:78:7c:bf:0d:4a:a6:eb:3f:38:c0:61:7e:c6:68:38:
32:2d:56:7f:7d:7a:08:b2:b5:16:2b:0d:52:11:59:18:a7:00:
89:4a:86:df:de:da:77:53:93:21:95:ca:15:32:3f:ae:1a:d7:
df:b1:fd:77:6d:85:e8:3b:e1:37:6b:7c:8c:d8:25:25:78:c2:
a0:8e:dc:ed
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC84wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDQw
MDU1NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDdERDIyRTBGQTdFRTEy
RjFCNjE0MUZFQjlERjZBMzFGREY0MTM0QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrCNoiSODbpGAA5oU8aP4Jau2r9IIvz9VM47b+NCRwacDrxCVQ
b4I5WKWTVDPj3mcsqWeiprCQCw0g06hQDbzGcown2HFPSZj8VEJPsoUeNOVYuwa/
KLs1Nq4f6YeFOOQXMC8wmmtbDEHmk5S7XmCTf/KP2nGeIJ04XINNrNbmx5BsCmPd
oq0a9f+tkyDimL5CA6f6vM7EEPtjlV8IpYlzgwMpiqbSkcx6EOM1e6R+eokOEt2b
FwWHAiT8DInd9kMhZ/0zQfBh1f5Ubq9NZVIVkK/KfCtmiqxUGNodzonZFHwebzuj
jRwLN8h3Sqgoykk4iAgrkIaJWz1BStnqIloNAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUfdIuD6fuEvG2FB/rnfajH99BNKkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2ZkSXVENmZ1RXZHMkZC
X3JuZmFqSDk5Qk5Lay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIzzI7PBySeK4baKMGGF+X+Y
Cgc5hmSb/je0wOEuCkkAPJNF+i3AP0MQEaN2d2c6IcXSPVA/ijI+uNdlW1Ccpmo6
yaKwPexuqrnThT+cxg/a++szShub3fYD6Z+iBC9oI6NNZ3EfBpvTnicVKoGULUTp
uGGuCePBVxUQsz9H+2xICiBv9xWhO8C/y1BrWu75rbd1g/kPsCPdwftNkwdxWBrT
DgRbE1gqUNsBE5LFk4Kj18SmNWAd+Xh8vw1Kpus/OMBhfsZoODItVn99egiytRYr
DVIRWRinAIlKht/e2ndTkyGVyhUyP64a19+x/Xdtheg74TdrfIzYJSV4wqCO3O0=
-----END CERTIFICATE-----
Generated at Sat May 17 22:52:30 2025 by rpki-client