Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/1RxJBnetCN7QMFNjYzoxAoJo3r8.roa
File: 1RxJBnetCN7QMFNjYzoxAoJo3r8.roa (raw, json)
Hash identifier: 94Dsnjs87P+ie0DLWWzpcfx66v/e0j5ceBTNFfu43Qc=
Subject key identifier: D5:1C:49:06:77:AD:08:DE:D0:30:53:63:63:3A:31:02:82:68:DE:BF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B6C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1RxJBnetCN7QMFNjYzoxAoJo3r8.roa
Signing time: Mon 03 Feb 2025 00:25:37 +0000
ROA not before: Mon 03 Feb 2025 00:25:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2924 (0xb6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 00:25:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D51C490677AD08DED0305363633A31028268DEBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:12:5c:5e:79:78:f4:75:5b:7f:2d:57:32:6f:
df:04:cb:e4:2f:a5:96:53:05:39:11:9d:7c:f9:fb:
9e:d0:9b:a7:9f:64:8d:48:dc:f3:73:95:21:42:65:
98:dc:57:26:c7:d0:64:ab:46:b9:c0:82:ef:1a:51:
e4:93:02:75:ec:40:7d:25:bd:24:55:e2:c4:5d:75:
6c:06:9f:39:c6:f9:f8:3d:7f:ea:93:ea:cd:bb:ec:
df:d2:5c:cf:17:00:66:4b:29:af:91:ae:c2:f1:b1:
f0:aa:64:f5:51:ce:02:34:c9:b5:5c:09:a5:ce:fa:
cf:7b:ea:49:85:49:cc:75:95:3f:2c:dd:b8:f2:b4:
d2:19:6e:5d:e3:bb:08:b8:fb:52:1d:2f:17:28:44:
2d:30:df:5a:36:4a:35:c0:4a:b6:a2:10:77:4c:dd:
77:a6:f2:85:60:55:11:3c:3c:ad:0e:88:09:36:8a:
44:cf:0e:6b:87:d5:4a:be:05:d6:79:58:7d:54:d3:
92:ba:14:f7:bd:95:54:e5:62:bf:81:de:c8:ce:5a:
4a:c7:3a:08:fb:0c:89:0f:9b:c4:a9:3c:f3:35:b8:
69:db:0a:74:d0:59:71:68:e2:7c:1b:b9:12:ad:0a:
79:e1:7e:1e:fb:5d:3a:27:39:c2:54:db:01:cd:73:
4e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1C:49:06:77:AD:08:DE:D0:30:53:63:63:3A:31:02:82:68:DE:BF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1RxJBnetCN7QMFNjYzoxAoJo3r8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:f3:e2:f3:8b:4f:c3:4e:22:a1:7b:38:27:14:94:e1:57:a2:
a6:8d:d6:29:e2:34:84:fa:a6:19:86:7e:90:25:ff:e8:8f:82:
63:11:d8:da:2c:cd:8d:41:3f:f7:61:ea:d6:9a:30:8c:18:81:
e4:6a:55:72:39:64:57:1b:35:2d:21:da:52:5a:db:55:ee:33:
53:ef:7c:11:fe:e5:93:5f:4d:db:9f:7f:c3:3a:63:fb:d6:28:
9a:29:d5:d7:12:50:46:dc:b4:01:63:af:37:c5:f4:c9:7a:f3:
ce:ec:57:be:ff:cc:32:4b:8b:10:ab:c2:70:08:a2:48:32:20:
83:60:0d:d5:77:8f:90:af:56:76:cc:0e:4b:e0:08:4d:1c:de:
c2:53:79:8b:d3:6e:8e:53:f7:ae:05:a9:e5:56:11:4f:e2:70:
ad:2c:0b:ab:11:7a:5c:a8:58:87:ea:39:87:7e:66:1b:b4:3c:
82:39:f3:5f:39:93:a5:98:28:6f:1a:0a:8d:39:2f:d0:ab:74:
5e:3b:54:da:fa:52:4d:c0:db:6b:23:17:06:f6:7d:1f:60:14:
e8:b9:9d:10:2e:08:79:5f:a3:da:17:69:ed:f9:69:af:3b:00:
47:6a:53:1a:9b:c7:ca:7e:69:3d:c5:2b:15:79:48:df:2d:29:
3f:a5:1a:99
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
MDI1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ1MUM0OTA2NzdBRDA4
REVEMDMwNTM2MzYzM0EzMTAyODI2OERFQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrElxeeXj0dVt/LVcyb98Ey+QvpZZTBTkRnXz5+57Qm6efZI1I
3PNzlSFCZZjcVybH0GSrRrnAgu8aUeSTAnXsQH0lvSRV4sRddWwGnznG+fg9f+qT
6s277N/SXM8XAGZLKa+RrsLxsfCqZPVRzgI0ybVcCaXO+s976kmFScx1lT8s3bjy
tNIZbl3juwi4+1IdLxcoRC0w31o2SjXASraiEHdM3Xem8oVgVRE8PK0OiAk2ikTP
DmuH1Uq+BdZ5WH1U05K6FPe9lVTlYr+B3sjOWkrHOgj7DIkPm8SpPPM1uGnbCnTQ
WXFo4nwbuRKtCnnhfh77XTonOcJU2wHNc063AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU1RxJBnetCN7QMFNjYzoxAoJo3r8wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzFSeEpCbmV0Q043UU1G
TmpZem94QW9KbzNyOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAG7z4vOLT8NOIqF7OCcUlOFX
oqaN1iniNIT6phmGfpAl/+iPgmMR2NoszY1BP/dh6taaMIwYgeRqVXI5ZFcbNS0h
2lJa21XuM1PvfBH+5ZNfTduff8M6Y/vWKJop1dcSUEbctAFjrzfF9Ml6887sV77/
zDJLixCrwnAIokgyIINgDdV3j5CvVnbMDkvgCE0c3sJTeYvTbo5T964FqeVWEU/i
cK0sC6sRelyoWIfqOYd+Zhu0PII58185k6WYKG8aCo05L9CrdF47VNr6Uk3A22sj
Fwb2fR9gFOi5nRAuCHlfo9oXae35aa87AEdqUxqbx8p+aT3FKxV5SN8tKT+lGpk=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:14:51 2025 by rpki-client