Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/D5cAAhIHby8TgRfIPwkQoRqcJ5M.roa
File: D5cAAhIHby8TgRfIPwkQoRqcJ5M.roa (raw, json)
Hash identifier: Mec61aBu83S+fjdn0bR/9LHa8vGIHFDYU9nP+GjmjJo=
Subject key identifier: 0F:97:00:02:12:07:6F:2F:13:81:17:C8:3F:09:10:A1:1A:9C:27:93
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 04E8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/D5cAAhIHby8TgRfIPwkQoRqcJ5M.roa
Signing time: Thu 16 Jan 2025 15:24:45 +0000
ROA not before: Thu 16 Jan 2025 15:24:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1256 (0x4e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 16 15:24:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0F97000212076F2F138117C83F0910A11A9C2793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:a8:2f:cc:e8:84:5f:ad:e7:52:35:5d:c8:
f9:27:d4:d6:53:4f:23:19:04:9e:0a:29:4e:1a:cb:
73:e8:4c:27:0a:23:fd:d5:30:ea:c4:17:1d:c1:ca:
36:89:25:c2:a6:85:ab:c6:06:88:8c:78:63:ee:2f:
68:19:84:72:63:d6:4b:0e:01:ba:ad:20:3f:e5:4f:
15:c1:e6:b6:56:48:67:3f:46:9e:36:13:e8:08:ed:
7e:7b:5b:79:34:cc:be:d6:11:cc:7c:2a:b1:21:e6:
18:19:d2:c6:d0:a1:03:8d:56:6f:7c:de:21:5d:76:
70:29:91:8e:23:3a:98:fc:bc:26:ff:16:af:c2:e1:
b2:a2:93:50:3d:2b:cb:4a:98:df:a9:f7:f4:61:15:
fa:20:12:43:03:eb:5b:05:13:ed:26:5e:72:22:53:
de:0e:86:95:b1:12:55:72:0e:56:92:0f:3a:cb:c4:
cb:41:60:66:e4:d0:06:5b:54:36:fa:2a:c2:79:c8:
7d:28:c1:eb:3a:ef:cb:bc:24:4d:92:fe:47:6a:90:
bb:00:5a:d2:3d:54:2a:fa:d8:7a:57:0c:f8:8b:37:
a2:dd:70:bb:4a:f1:c1:59:98:ca:bf:a9:44:b4:af:
0b:d1:f4:b8:9f:3b:8d:4c:95:e7:62:b0:56:ef:38:
c2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:97:00:02:12:07:6F:2F:13:81:17:C8:3F:09:10:A1:1A:9C:27:93
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/D5cAAhIHby8TgRfIPwkQoRqcJ5M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
44:cb:95:2c:3b:31:28:e7:1e:f8:56:98:ae:11:1c:f2:34:e5:
c8:99:ee:91:c3:18:4a:ec:d9:c5:fd:12:d4:49:f1:bf:4d:4f:
a0:2c:3e:a3:ac:7e:85:36:d2:79:58:60:22:44:16:71:93:05:
11:66:77:13:57:5a:5f:8f:5f:a1:5a:90:a1:64:c1:e1:53:eb:
cc:1e:84:46:6b:78:43:6b:27:aa:09:be:b2:7d:f8:04:c2:7a:
a0:38:ee:39:43:0d:13:3f:d8:0d:6a:0e:97:df:ed:40:e2:4e:
a4:b5:f5:08:58:45:18:0f:02:d2:0d:55:c8:48:31:51:2f:59:
dd:43:7c:96:82:ae:d7:1c:73:66:54:2c:6a:50:0f:fa:b2:ef:
c5:11:5c:39:23:de:b2:de:86:59:14:cd:64:7f:b3:10:a9:89:
bc:bd:0e:8f:51:c8:dc:16:1b:6b:1a:60:d0:53:c6:77:4d:97:
05:86:75:9d:91:1e:5f:ac:5b:f9:46:ed:be:e7:35:04:af:12:
37:62:28:11:4f:52:14:83:7e:37:08:95:bc:db:86:8b:36:84:
eb:ee:cd:4b:6a:9f:e4:8a:9d:cf:1b:9d:d7:1a:99:fc:76:b1:
8d:cf:d0:70:78:9f:ba:82:f6:e2:bf:d6:eb:8c:ad:35:8b:49:
26:67:33:c2
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTYx
NTI0NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDBGOTcwMDAyMTIwNzZG
MkYxMzgxMTdDODNGMDkxMEExMUE5QzI3OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzEKgvzOiEX63nUjVdyPkn1NZTTyMZBJ4KKU4ay3PoTCcKI/3V
MOrEFx3ByjaJJcKmhavGBoiMeGPuL2gZhHJj1ksOAbqtID/lTxXB5rZWSGc/Rp42
E+gI7X57W3k0zL7WEcx8KrEh5hgZ0sbQoQONVm983iFddnApkY4jOpj8vCb/Fq/C
4bKik1A9K8tKmN+p9/RhFfogEkMD61sFE+0mXnIiU94OhpWxElVyDlaSDzrLxMtB
YGbk0AZbVDb6KsJ5yH0owes678u8JE2S/kdqkLsAWtI9VCr62HpXDPiLN6LdcLtK
8cFZmMq/qUS0rwvR9LifO41MledisFbvOMI7AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUD5cAAhIHby8TgRfIPwkQoRqcJ5MwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0Q1Y0FBaElIYnk4VGdS
ZklQd2tRb1JxY0o1TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAETLlSw7MSjnHvhWmK4RHPI0
5ciZ7pHDGErs2cX9EtRJ8b9NT6AsPqOsfoU20nlYYCJEFnGTBRFmdxNXWl+PX6Fa
kKFkweFT68wehEZreENrJ6oJvrJ9+ATCeqA47jlDDRM/2A1qDpff7UDiTqS19QhY
RRgPAtINVchIMVEvWd1DfJaCrtccc2ZULGpQD/qy78URXDkj3rLehlkUzWR/sxCp
iby9Do9RyNwWG2saYNBTxndNlwWGdZ2RHl+sW/lG7b7nNQSvEjdiKBFPUhSDfjcI
lbzbhos2hOvuzUtqn+SKnc8bndcamfx2sY3P0HB4n7qC9uK/1uuMrTWLSSZnM8I=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:30:38 2025 by rpki-client