Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/1iUAok09Ly6I2CoiPfju2NQvR9M.roa
File: 1iUAok09Ly6I2CoiPfju2NQvR9M.roa (raw, json)
Hash identifier: ry/DfQr4nKFlYpW0JX9rIooTfe8VdhhCkpriFW81yu8=
Subject key identifier: D6:25:00:A2:4D:3D:2F:2E:88:D8:2A:22:3D:F8:EE:D8:D4:2F:47:D3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0766
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1iUAok09Ly6I2CoiPfju2NQvR9M.roa
Signing time: Thu 23 Jan 2025 06:55:02 +0000
ROA not before: Thu 23 Jan 2025 06:55:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1894 (0x766)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 06:55:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=D62500A24D3D2F2E88D82A223DF8EED8D42F47D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:80:87:39:57:1c:9e:88:18:2c:5d:44:f8:c9:
44:6c:af:53:9c:0c:e9:49:c3:44:f5:09:88:09:34:
64:ba:ba:99:b8:26:df:b7:99:42:b3:94:82:89:a3:
25:19:a9:5d:38:a1:0c:f7:67:91:8e:5d:8a:3c:ab:
69:65:c8:b9:d6:47:b5:05:54:8d:41:03:03:5d:ea:
52:ed:33:a6:6e:0d:22:e0:42:5b:6e:07:fa:89:f5:
8e:74:55:d2:62:b8:b8:04:a6:d1:99:b1:62:c5:0c:
17:db:f0:96:f0:8d:f2:60:9b:4a:0d:4c:bc:e7:6a:
a9:d8:2e:ed:03:09:42:7f:6b:b4:6a:78:5f:8e:d8:
62:f2:71:72:94:2d:90:b7:c1:41:f4:66:f6:7a:72:
af:6c:79:06:e9:bc:4b:19:de:d9:69:65:6f:b7:72:
2d:c0:03:44:53:30:5a:28:b8:8a:7e:cc:3c:6c:33:
88:35:46:f8:70:35:ba:97:c4:bc:98:c5:a2:db:17:
25:53:d7:3e:61:4e:36:b7:05:5d:cd:d4:ba:40:08:
e0:4c:27:4f:8f:30:0d:26:16:0b:4c:b7:87:8b:57:
33:fc:8b:04:44:e6:8e:09:be:63:6c:c5:ba:d7:e5:
b0:d5:4e:6e:49:46:98:a1:e9:d9:39:c3:e9:4e:94:
b7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:00:A2:4D:3D:2F:2E:88:D8:2A:22:3D:F8:EE:D8:D4:2F:47:D3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/1iUAok09Ly6I2CoiPfju2NQvR9M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
44:6d:3c:37:6d:4f:de:fc:0b:4d:b8:92:3f:25:36:fa:ff:c3:
2a:d6:04:f5:56:b7:bb:21:25:53:3a:25:f9:42:1d:bf:2f:17:
4e:2d:aa:b3:c5:56:1a:11:aa:be:f4:4a:05:1e:b0:4c:4c:26:
50:be:31:1c:2e:b0:69:82:36:63:d4:81:2d:0c:d6:05:02:c5:
57:30:10:54:5d:9a:c8:5f:c5:c8:2c:49:b9:f7:52:b6:aa:53:
32:11:b4:05:75:01:f7:19:54:6e:f2:6f:2d:2b:27:bc:90:43:
4e:a9:2a:02:db:cf:71:ba:82:04:5f:5b:6d:03:9c:8a:60:cf:
6e:fd:97:bf:49:b2:cf:ae:1f:66:69:7a:e3:15:6a:8b:1c:a1:
81:44:84:20:8d:ff:94:57:95:89:e5:1f:82:53:0c:99:13:b7:
56:dc:98:98:df:ec:3e:89:2b:95:33:f6:67:40:5c:83:2a:63:
a5:ea:64:80:8b:74:84:6a:61:a5:cd:e1:73:ae:4d:39:08:b0:
f7:4a:15:0a:ae:fa:32:07:b3:c0:df:32:dc:98:97:7f:1e:b3:
c7:2d:75:42:0a:2a:9b:c3:0e:73:a6:7f:0d:85:a4:95:f7:a6:
f5:1a:81:f4:df:db:56:b4:54:09:4d:46:0c:09:85:b7:ee:6a:
3a:82:d5:4c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICB2YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjMw
NjU1MDJaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEQ2MjUwMEEyNEQzRDJG
MkU4OEQ4MkEyMjNERjhFRUQ4RDQyRjQ3RDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLgIc5VxyeiBgsXUT4yURsr1OcDOlJw0T1CYgJNGS6upm4Jt+3
mUKzlIKJoyUZqV04oQz3Z5GOXYo8q2llyLnWR7UFVI1BAwNd6lLtM6ZuDSLgQltu
B/qJ9Y50VdJiuLgEptGZsWLFDBfb8JbwjfJgm0oNTLznaqnYLu0DCUJ/a7RqeF+O
2GLycXKULZC3wUH0ZvZ6cq9seQbpvEsZ3tlpZW+3ci3AA0RTMFoouIp+zDxsM4g1
RvhwNbqXxLyYxaLbFyVT1z5hTja3BV3N1LpACOBMJ0+PMA0mFgtMt4eLVzP8iwRE
5o4JvmNsxbrX5bDVTm5JRpih6dk5w+lOlLePAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU1iUAok09Ly6I2CoiPfju2NQvR9MwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzFpVUFvazA5THk2STJD
b2lQZmp1Mk5RdlI5TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAERtPDdtT978C024kj8lNvr/
wyrWBPVWt7shJVM6JflCHb8vF04tqrPFVhoRqr70SgUesExMJlC+MRwusGmCNmPU
gS0M1gUCxVcwEFRdmshfxcgsSbn3UraqUzIRtAV1AfcZVG7yby0rJ7yQQ06pKgLb
z3G6ggRfW20DnIpgz279l79Jss+uH2ZpeuMVaoscoYFEhCCN/5RXlYnlH4JTDJkT
t1bcmJjf7D6JK5Uz9mdAXIMqY6XqZICLdIRqYaXN4XOuTTkIsPdKFQqu+jIHs8Df
MtyYl38es8ctdUIKKpvDDnOmfw2FpJX3pvUagfTf21a0VAlNRgwJhbfuajqC1Uw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:15 2025 by rpki-client