Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/mVc_L5XNrD46d8O6285PZUfzI3I.roa
File: mVc_L5XNrD46d8O6285PZUfzI3I.roa (raw, json)
Hash identifier: QPJ0i8TLEJzepXFzI9oMhC0X7VGzsKTnXpnB8Nk+RGc=
Subject key identifier: 99:57:3F:2F:95:CD:AC:3E:3A:77:C3:BA:DB:CE:4F:65:47:F3:23:72
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0782
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/mVc_L5XNrD46d8O6285PZUfzI3I.roa
Signing time: Thu 23 Jan 2025 13:56:24 +0000
ROA not before: Thu 23 Jan 2025 13:56:24 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1922 (0x782)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 13:56:24 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=99573F2F95CDAC3E3A77C3BADBCE4F6547F32372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:07:a3:d0:33:a8:9b:74:bd:8e:68:60:fb:
23:b7:dd:dd:9a:e6:55:1e:d7:3a:24:59:99:54:1a:
06:9c:8d:97:fc:13:e0:47:af:fc:1d:a3:52:90:35:
4d:9d:41:c7:f5:2c:25:ed:ea:6e:24:26:a5:88:19:
e3:c0:bb:7b:cb:e2:37:d2:28:64:0b:9f:34:59:bc:
57:bd:da:8b:9b:c2:b9:71:1d:98:00:25:e1:74:18:
b1:79:d3:4b:81:62:38:fc:63:40:3e:85:5d:ea:de:
6c:79:ab:1d:36:17:79:1a:c4:1a:f6:2e:80:0c:a9:
e4:88:3b:68:ad:82:8f:01:49:f4:09:5f:1e:dc:ba:
eb:7f:b9:e6:74:28:be:59:a8:99:02:cb:ea:bc:8d:
aa:f4:06:b0:9e:d4:15:d0:cf:6b:68:2d:ee:05:1b:
32:83:0f:42:07:8a:f5:37:99:18:5d:33:d4:51:36:
ae:bf:00:f7:42:13:09:be:99:66:6d:78:30:84:2c:
a3:45:6d:11:5f:7d:50:38:20:81:63:bf:3a:7c:80:
9c:3c:79:88:b6:f3:f8:9b:5d:0c:05:d3:18:e9:ac:
11:78:e6:06:c1:28:3d:23:1f:6a:80:5a:ee:ae:74:
5e:94:df:7a:ee:6b:c1:a2:0d:74:87:f5:f0:d1:9d:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:3F:2F:95:CD:AC:3E:3A:77:C3:BA:DB:CE:4F:65:47:F3:23:72
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/mVc_L5XNrD46d8O6285PZUfzI3I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
90:f5:2d:32:fe:ec:34:63:65:bd:8a:fc:d0:1f:ec:b9:dd:92:
6c:75:a0:c4:fc:10:8b:d9:ca:a4:14:d2:9c:81:3e:84:58:12:
06:cc:69:9f:c6:f8:47:3d:46:03:50:9d:da:9b:68:58:85:16:
45:b4:69:1a:87:e2:de:4f:02:1f:ec:f7:c0:fe:ee:49:ff:7f:
d3:df:a0:84:1f:16:94:91:6a:6f:df:7e:42:b1:1f:b6:8a:2c:
a5:eb:24:fe:64:cf:f8:5b:b0:3e:12:9e:8a:a8:a1:20:7c:0b:
d3:f6:2b:9b:aa:2a:ff:e2:a7:da:46:ce:b6:8f:5d:e6:2e:93:
fe:08:bb:cd:a6:c7:d2:3a:af:78:5b:c3:78:81:52:d5:94:6c:
15:a5:3b:f1:b1:b7:5b:de:fb:0f:06:a8:93:1a:4f:05:f2:40:
5e:e6:2b:4e:49:3f:a4:e9:c6:d3:9e:0c:18:22:34:ea:ef:ce:
c6:80:91:ac:56:1d:85:0d:85:b0:03:e6:98:1a:53:af:e0:65:
b6:15:81:58:ce:f9:32:26:9f:da:2c:d3:f8:b7:49:d0:12:d4:
ee:79:f6:c5:2a:da:68:97:01:ce:fe:63:20:0e:78:d3:a2:8f:
c4:39:0d:5c:5f:72:dc:49:a4:ab:6d:b1:14:e0:e7:55:70:0e:
db:7a:24:42
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjMx
MzU2MjRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDk5NTczRjJGOTVDREFD
M0UzQTc3QzNCQURCQ0U0RjY1NDdGMzIzNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLLQej0DOom3S9jmhg+yO33d2a5lUe1zokWZlUGgacjZf8E+BH
r/wdo1KQNU2dQcf1LCXt6m4kJqWIGePAu3vL4jfSKGQLnzRZvFe92oubwrlxHZgA
JeF0GLF500uBYjj8Y0A+hV3q3mx5qx02F3kaxBr2LoAMqeSIO2itgo8BSfQJXx7c
uut/ueZ0KL5ZqJkCy+q8jar0BrCe1BXQz2toLe4FGzKDD0IHivU3mRhdM9RRNq6/
APdCEwm+mWZteDCELKNFbRFffVA4IIFjvzp8gJw8eYi28/ibXQwF0xjprBF45gbB
KD0jH2qAWu6udF6U33rua8GiDXSH9fDRndWfAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUmVc/L5XNrD46d8O6285PZUfzI3IwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL21WY19MNVhOckQ0NmQ4
TzYyODVQWlVmekkzSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAJD1LTL+7DRjZb2K/NAf7Lnd
kmx1oMT8EIvZyqQU0pyBPoRYEgbMaZ/G+Ec9RgNQndqbaFiFFkW0aRqH4t5PAh/s
98D+7kn/f9PfoIQfFpSRam/ffkKxH7aKLKXrJP5kz/hbsD4SnoqooSB8C9P2K5uq
Kv/ip9pGzraPXeYuk/4Iu82mx9I6r3hbw3iBUtWUbBWlO/Gxt1ve+w8GqJMaTwXy
QF7mK05JP6TpxtOeDBgiNOrvzsaAkaxWHYUNhbAD5pgaU6/gZbYVgVjO+TImn9os
0/i3SdAS1O559sUq2miXAc7+YyAOeNOij8Q5DVxfctxJpKttsRTg51VwDtt6JEI=
-----END CERTIFICATE-----
Generated at Sat May 17 22:45:53 2025 by rpki-client