Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/vnsLM_r9FxtHgx6cc7R_Z31VInM.roa
File: vnsLM_r9FxtHgx6cc7R_Z31VInM.roa (raw, json)
Hash identifier: 79JDjsHmwKDcynAQa/UlsTvj3YaeQ86+AFkLv8bSe18=
Subject key identifier: BE:7B:0B:33:FA:FD:17:1B:47:83:1E:9C:73:B4:7F:67:7D:55:22:73
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B72
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vnsLM_r9FxtHgx6cc7R_Z31VInM.roa
Signing time: Mon 03 Feb 2025 01:55:51 +0000
ROA not before: Mon 03 Feb 2025 01:55:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2930 (0xb72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 01:55:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=BE7B0B33FAFD171B47831E9C73B47F677D552273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:9b:9d:49:d5:a1:0f:85:77:89:82:d3:a3:
cd:50:23:ca:b6:89:59:1a:0a:f2:bd:ca:f9:39:66:
fc:47:40:b0:e0:b8:f0:7c:19:a6:dd:35:9a:e2:7c:
83:b5:f0:e4:25:55:53:4f:09:03:d9:14:88:c1:7c:
2c:1f:f6:ce:63:1c:8b:76:1e:40:ca:b8:23:5f:78:
20:94:99:d5:1a:f3:ba:6d:e9:a8:d6:ef:92:41:97:
66:01:0e:f5:8c:73:12:17:0d:16:a2:fe:47:e0:76:
9b:d2:71:f3:3f:e1:8d:43:6b:3e:0b:90:35:9b:fc:
3d:e8:13:6a:07:ba:c9:9b:2e:74:d9:db:92:2d:87:
4f:c2:62:1d:3b:83:6e:f3:ef:fb:aa:49:26:66:50:
7f:9f:14:24:e3:02:46:be:d1:46:b5:d8:b6:1f:cd:
84:91:d2:ce:df:2a:28:21:a0:39:a6:75:e6:0b:94:
c5:68:61:a1:9a:05:72:d0:b5:68:6b:c1:7f:cd:8d:
8b:45:e4:81:7d:c6:4c:5e:1d:c6:18:ce:a4:b0:59:
5b:a7:67:20:e5:70:80:c5:37:ec:c5:5c:80:30:4b:
80:4b:ad:61:e3:61:de:d7:6d:23:bc:e3:38:4f:35:
a3:a3:3d:63:86:ce:41:c0:1b:23:5b:e7:f7:7f:95:
11:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7B:0B:33:FA:FD:17:1B:47:83:1E:9C:73:B4:7F:67:7D:55:22:73
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/vnsLM_r9FxtHgx6cc7R_Z31VInM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:88:e1:bb:31:11:7b:25:e6:44:b4:9b:46:26:5d:85:40:e1:
70:01:db:d0:7b:8a:3e:67:eb:93:fb:57:c0:a3:d1:bf:4f:8d:
10:e6:9e:26:bf:b2:d4:05:e5:57:ac:15:39:fa:1d:55:51:b9:
41:48:48:a6:92:8f:b7:0e:3f:78:f8:f8:64:18:04:61:1a:30:
cb:f7:8f:32:a7:2b:f6:e2:37:87:97:ce:0a:3b:82:8e:fe:ca:
ab:21:67:8a:1b:4d:80:a1:c0:1c:c3:45:cf:7a:b8:ab:c3:60:
f1:58:e8:b0:af:0c:9c:79:b5:f5:66:90:0c:eb:31:db:8f:51:
e7:be:91:0d:d9:36:ae:56:9e:ae:41:54:10:26:13:54:2a:d3:
76:ce:99:a0:8c:07:cb:bb:25:a8:22:00:18:41:06:f2:87:98:
ef:45:e3:4d:a7:10:2d:25:55:e8:86:33:94:13:ae:43:15:40:
23:3f:9f:59:58:b3:b6:83:0e:ee:c2:80:ca:fb:29:a7:b2:e9:
7c:32:db:fd:80:b4:fb:5e:26:94:f5:ef:91:57:a7:af:9f:60:
40:ec:59:b7:ee:17:85:37:e3:75:6e:ed:6b:e6:f4:2f:9b:ac:
6f:ae:a1:1e:f3:05:4d:e5:d5:07:2f:fa:c3:d0:9d:63:0d:95:
b1:7b:8a:a6
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
MTU1NTFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEJFN0IwQjMzRkFGRDE3
MUI0NzgzMUU5QzczQjQ3RjY3N0Q1NTIyNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDFpudSdWhD4V3iYLTo81QI8q2iVkaCvK9yvk5ZvxHQLDguPB8
GabdNZrifIO18OQlVVNPCQPZFIjBfCwf9s5jHIt2HkDKuCNfeCCUmdUa87pt6ajW
75JBl2YBDvWMcxIXDRai/kfgdpvScfM/4Y1Daz4LkDWb/D3oE2oHusmbLnTZ25It
h0/CYh07g27z7/uqSSZmUH+fFCTjAka+0Ua12LYfzYSR0s7fKighoDmmdeYLlMVo
YaGaBXLQtWhrwX/NjYtF5IF9xkxeHcYYzqSwWVunZyDlcIDFN+zFXIAwS4BLrWHj
Yd7XbSO84zhPNaOjPWOGzkHAGyNb5/d/lRGFAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUvnsLM/r9FxtHgx6cc7R/Z31VInMwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3Zuc0xNX3I5Rnh0SGd4
NmNjN1JfWjMxVkluTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAI6I4bsxEXsl5kS0m0YmXYVA
4XAB29B7ij5n65P7V8Cj0b9PjRDmnia/stQF5VesFTn6HVVRuUFISKaSj7cOP3j4
+GQYBGEaMMv3jzKnK/biN4eXzgo7go7+yqshZ4obTYChwBzDRc96uKvDYPFY6LCv
DJx5tfVmkAzrMduPUee+kQ3ZNq5Wnq5BVBAmE1Qq03bOmaCMB8u7JagiABhBBvKH
mO9F402nEC0lVeiGM5QTrkMVQCM/n1lYs7aDDu7CgMr7Kaey6Xwy2/2AtPteJpT1
75FXp6+fYEDsWbfuF4U343Vu7Wvm9C+brG+uoR7zBU3l1Qcv+sPQnWMNlbF7iqY=
-----END CERTIFICATE-----
Generated at Sat May 17 19:38:53 2025 by rpki-client