Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/lIcQ7sP5pIbkFsvCO9TkKnCr0-s.roa
File: lIcQ7sP5pIbkFsvCO9TkKnCr0-s.roa (raw, json)
Hash identifier: ezAcIJuTUBJNp71YxNwioWJ8MEAyT0ihb5lpF6mQmc8=
Subject key identifier: 94:87:10:EE:C3:F9:A4:86:E4:16:CB:C2:3B:D4:E4:2A:70:AB:D3:EB
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0546
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/lIcQ7sP5pIbkFsvCO9TkKnCr0-s.roa
Signing time: Fri 17 Jan 2025 14:54:45 +0000
ROA not before: Fri 17 Jan 2025 14:54:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1350 (0x546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 14:54:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=948710EEC3F9A486E416CBC23BD4E42A70ABD3EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3d:57:4a:2b:d6:c3:3f:3c:40:3e:e8:d8:24:
28:92:55:17:18:56:7a:35:7a:d9:d3:6f:b9:39:bd:
23:8c:94:d8:5b:eb:62:be:c9:87:5f:38:eb:96:3a:
bf:cf:9d:ac:72:12:c2:b4:b8:b4:0c:25:a8:35:81:
98:f6:a0:fd:bb:da:ba:e2:04:cb:79:11:86:9f:60:
06:d2:9a:1c:98:1e:a9:40:78:2b:81:f1:0c:0a:5b:
58:27:01:e1:a9:77:51:5a:6b:23:86:86:93:6d:b4:
8e:b1:a0:14:6c:09:31:8c:ce:23:c7:4c:09:42:c7:
a7:54:30:fb:2e:a4:e5:26:9c:4a:61:09:c5:23:ff:
76:62:d8:67:5e:a8:bb:d9:24:ce:59:6c:1c:55:66:
eb:2d:03:96:90:b6:49:2c:9c:3b:da:18:d3:6f:72:
68:83:6c:ad:b0:2b:4a:0c:d9:b5:14:8d:de:be:1e:
94:38:78:68:37:f7:ca:9c:e9:d8:af:61:6b:af:85:
d0:92:87:a9:be:60:21:52:30:c7:20:af:53:5b:2e:
6c:a2:08:5c:ef:ca:7f:32:71:3e:15:9f:82:19:30:
3f:38:cc:bb:51:6d:b1:11:d4:3e:44:bd:dc:a8:d2:
95:c2:4c:8d:85:5b:ff:5a:3f:c7:1b:7f:d2:bf:84:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:87:10:EE:C3:F9:A4:86:E4:16:CB:C2:3B:D4:E4:2A:70:AB:D3:EB
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/lIcQ7sP5pIbkFsvCO9TkKnCr0-s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
58:03:57:b8:e8:be:d6:e8:71:8e:71:65:1c:dd:b4:71:51:81:
e2:a8:c2:27:ae:16:a8:ee:5d:ce:f7:6d:4f:9e:3c:32:29:0c:
d4:57:e4:5e:be:1b:32:a4:42:9f:01:47:cd:26:44:4d:60:40:
df:a5:64:91:eb:79:3b:12:82:f8:77:ba:81:56:48:1f:8f:ad:
3f:a1:bd:2a:03:59:87:0b:5e:0b:52:26:71:b7:9d:5a:51:09:
a3:94:59:52:7a:62:c6:16:03:be:0c:86:5c:15:16:86:1b:4f:
4f:6f:e7:94:29:38:64:40:de:9b:ee:0e:e7:0f:8d:96:14:ea:
4a:d9:50:f5:10:a4:f5:17:ad:ed:b7:f1:56:22:30:16:35:97:
94:01:42:07:93:f7:ac:4d:61:ab:78:0b:97:9d:40:ab:01:38:
04:fe:33:a4:c5:ef:08:69:1a:01:7e:41:13:b6:53:7f:ac:8f:
0d:b4:51:cd:d3:53:c9:70:93:0c:60:3a:0a:ad:df:28:c5:03:
40:df:f1:39:e5:4c:ca:8a:f9:84:68:ee:6b:ce:4b:ea:41:0a:
13:3a:4a:57:b1:de:8c:6a:f3:6e:2b:58:22:89:ab:2d:af:c5:
a6:63:27:31:5c:64:35:1a:a3:f4:37:46:30:62:5d:6e:ee:a6:
c9:76:5b:6f
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTcx
NDU0NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk0ODcxMEVFQzNGOUE0
ODZFNDE2Q0JDMjNCRDRFNDJBNzBBQkQzRUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHPVdKK9bDPzxAPujYJCiSVRcYVno1etnTb7k5vSOMlNhb62K+
yYdfOOuWOr/PnaxyEsK0uLQMJag1gZj2oP272rriBMt5EYafYAbSmhyYHqlAeCuB
8QwKW1gnAeGpd1FaayOGhpNttI6xoBRsCTGMziPHTAlCx6dUMPsupOUmnEphCcUj
/3Zi2GdeqLvZJM5ZbBxVZustA5aQtkksnDvaGNNvcmiDbK2wK0oM2bUUjd6+HpQ4
eGg398qc6divYWuvhdCSh6m+YCFSMMcgr1NbLmyiCFzvyn8ycT4Vn4IZMD84zLtR
bbER1D5Evdyo0pXCTI2FW/9aP8cbf9K/hNPFAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUlIcQ7sP5pIbkFsvCO9TkKnCr0+swHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2xJY1E3c1A1cElia0Zz
dkNPOVRrS25DcjAtcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFgDV7jovtbocY5xZRzdtHFR
geKowieuFqjuXc73bU+ePDIpDNRX5F6+GzKkQp8BR80mRE1gQN+lZJHreTsSgvh3
uoFWSB+PrT+hvSoDWYcLXgtSJnG3nVpRCaOUWVJ6YsYWA74MhlwVFoYbT09v55Qp
OGRA3pvuDucPjZYU6krZUPUQpPUXre238VYiMBY1l5QBQgeT96xNYat4C5edQKsB
OAT+M6TF7whpGgF+QRO2U3+sjw20Uc3TU8lwkwxgOgqt3yjFA0Df8TnlTMqK+YRo
7mvOS+pBChM6Slex3oxq824rWCKJqy2vxaZjJzFcZDUao/Q3RjBiXW7upsl2W28=
-----END CERTIFICATE-----
Generated at Sun May 18 09:53:57 2025 by rpki-client