Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ATIxRz9jh-oH3yE7MuXeOPPZoPo.roa
File: ATIxRz9jh-oH3yE7MuXeOPPZoPo.roa (raw, json)
Hash identifier: rYvCMubxqfQquhrYjVNjdEu7ehpxSZUe6HqzinZNk2s=
Subject key identifier: 01:32:31:47:3F:63:87:EA:07:DF:21:3B:32:E5:DE:38:F3:D9:A0:FA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CC6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ATIxRz9jh-oH3yE7MuXeOPPZoPo.roa
Signing time: Thu 06 Feb 2025 14:55:45 +0000
ROA not before: Thu 06 Feb 2025 14:55:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3270 (0xcc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 14:55:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=013231473F6387EA07DF213B32E5DE38F3D9A0FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6d:5d:85:2d:39:a1:b5:97:24:b3:2c:c2:de:
92:4c:2c:8c:1c:e3:62:06:2b:3c:45:8b:15:e5:68:
5d:ff:d4:ac:65:dd:51:34:c3:64:ad:f3:9c:9a:1e:
33:51:0c:60:66:49:d9:2c:2d:fd:f2:35:35:2c:e2:
64:d1:d9:e5:75:3a:a9:39:47:78:80:b9:ee:9e:78:
d7:76:65:1e:d8:3c:34:cd:cf:34:b6:69:1f:36:83:
c5:0a:88:9f:12:37:5c:7b:62:c1:22:c0:42:4e:a0:
40:bb:1f:eb:47:b3:6d:3d:a9:11:6e:f6:76:bb:ef:
ed:11:3b:67:6a:da:83:22:ed:5a:7d:80:03:9b:6c:
cd:14:a3:3a:c8:92:ea:94:ac:f9:45:ad:0e:5f:ed:
fc:74:30:fd:c3:40:01:11:77:39:fd:8e:c7:bf:ec:
5b:22:fa:e5:20:88:8d:66:3e:aa:0a:0f:19:68:1c:
1f:a5:f9:65:3c:90:cc:bf:32:2e:63:94:de:57:98:
a2:6b:69:ca:ee:85:f4:8f:3a:c9:03:97:80:6c:d9:
74:a0:3c:d3:85:15:8a:32:3a:bf:1f:ca:dd:6f:dd:
8a:85:f7:4e:62:9c:75:5f:ca:9c:ee:ad:56:14:22:
b8:7e:f0:08:73:f4:98:43:9d:30:ed:c1:83:09:6a:
c8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:32:31:47:3F:63:87:EA:07:DF:21:3B:32:E5:DE:38:F3:D9:A0:FA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ATIxRz9jh-oH3yE7MuXeOPPZoPo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a5:b6:b0:ef:e4:5b:ea:3d:88:f1:4e:7e:50:19:86:b0:ff:04:
fe:43:d0:c9:7c:f1:6a:f3:22:35:b9:71:a7:ee:78:e8:34:9e:
81:d4:29:eb:de:b0:ca:a3:e3:ae:ba:13:e2:e5:31:ac:dd:15:
46:29:04:73:94:1c:f1:1a:d9:59:0a:e9:b3:e5:7b:0e:48:12:
56:e2:6e:58:fc:25:5a:5c:0f:c0:19:b0:3d:22:69:39:52:0a:
9e:4d:5a:eb:3e:82:f6:63:26:e8:4c:8c:be:30:21:19:e9:f6:
67:d7:6f:3e:ad:0e:97:18:de:e2:ee:ac:c9:3d:31:d8:64:a9:
51:c2:a1:3a:83:bd:b1:b9:d8:d4:67:1e:bd:d5:a1:41:d1:e7:
2f:4b:10:42:0e:3c:31:bf:df:b4:21:69:69:c5:13:fc:a6:0a:
6c:5e:55:70:84:84:c4:d3:47:b8:55:2e:fc:32:f1:1e:41:77:
d7:ce:15:83:f5:f4:4b:9a:b4:a7:84:64:4c:45:49:d1:bf:f3:
93:a0:39:a3:cf:f3:38:45:05:a5:72:12:ed:41:49:56:8b:8b:
cd:f5:00:3d:42:08:d8:4a:35:dc:9c:de:1d:21:64:3c:2f:bd:
de:66:81:60:d2:45:5c:7f:75:42:0e:ea:aa:d4:4a:f7:ed:5f:
c1:57:41:f1
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDMYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDYx
NDU1NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDAxMzIzMTQ3M0Y2Mzg3
RUEwN0RGMjEzQjMyRTVERTM4RjNEOUEwRkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3bV2FLTmhtZcksyzC3pJMLIwc42IGKzxFixXlaF3/1Kxl3VE0
w2St85yaHjNRDGBmSdksLf3yNTUs4mTR2eV1Oqk5R3iAue6eeNd2ZR7YPDTNzzS2
aR82g8UKiJ8SN1x7YsEiwEJOoEC7H+tHs209qRFu9na77+0RO2dq2oMi7Vp9gAOb
bM0UozrIkuqUrPlFrQ5f7fx0MP3DQAERdzn9jse/7Fsi+uUgiI1mPqoKDxloHB+l
+WU8kMy/Mi5jlN5XmKJracruhfSPOskDl4Bs2XSgPNOFFYoyOr8fyt1v3YqF905i
nHVfypzurVYUIrh+8Ahz9JhDnTDtwYMJasgdAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUATIxRz9jh+oH3yE7MuXeOPPZoPowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0FUSXhSejlqaC1vSDN5
RTdNdVhlT1BQWm9Qby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAKW2sO/kW+o9iPFOflAZhrD/
BP5D0Ml88WrzIjW5cafueOg0noHUKevesMqj4666E+LlMazdFUYpBHOUHPEa2VkK
6bPlew5IElbiblj8JVpcD8AZsD0iaTlSCp5NWus+gvZjJuhMjL4wIRnp9mfXbz6t
DpcY3uLurMk9MdhkqVHCoTqDvbG52NRnHr3VoUHR5y9LEEIOPDG/37QhaWnFE/ym
CmxeVXCEhMTTR7hVLvwy8R5Bd9fOFYP19EuatKeEZExFSdG/85OgOaPP8zhFBaVy
Eu1BSVaLi831AD1CCNhKNdyc3h0hZDwvvd5mgWDSRVx/dUIO6qrUSvftX8FXQfE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:09:56 2025 by rpki-client