Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/JupNG1OoH_ZwSXGQX1rDCJYQt_Q.roa
File: JupNG1OoH_ZwSXGQX1rDCJYQt_Q.roa (raw, json)
Hash identifier: FQXoeelrQRSOvqvVGOd4TNxFmlkgD36uaCCMhXyyHYw=
Subject key identifier: 26:EA:4D:1B:53:A8:1F:F6:70:49:71:90:5F:5A:C3:08:96:10:B7:F4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DB8
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/JupNG1OoH_ZwSXGQX1rDCJYQt_Q.roa
Signing time: Sun 09 Feb 2025 03:25:53 +0000
ROA not before: Sun 09 Feb 2025 03:25:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3512 (0xdb8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 03:25:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=26EA4D1B53A81FF6704971905F5AC3089610B7F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:7b:fd:44:e0:6c:3c:17:33:41:f2:64:03:
7e:c2:4e:fa:23:f2:91:c6:27:91:6d:57:a9:53:8d:
a4:b2:f5:3d:77:17:f3:e9:31:87:e1:7f:20:cd:67:
a4:ff:a5:2c:29:21:a7:17:c6:96:90:ff:69:2d:e9:
8c:26:5b:8b:cd:9b:1a:1c:11:d7:ca:b4:c8:39:0c:
0a:eb:a9:3d:b1:84:40:18:f6:b0:aa:b9:dc:ae:4d:
d2:13:24:a1:21:e8:ab:24:62:67:75:dd:c4:2a:36:
7a:9b:38:70:19:70:b3:a1:f5:a8:2c:02:d3:d7:da:
10:a6:dc:f9:2a:3f:25:ba:4e:70:f8:75:67:cd:70:
1a:b0:9f:1b:90:91:3f:8c:7a:c7:f3:30:a3:ea:ea:
3b:c7:64:ed:fc:13:65:d4:a4:f4:dd:2f:c5:77:bd:
44:06:ff:2f:49:70:ff:31:34:99:86:1a:86:43:9d:
80:49:c8:c3:b3:93:86:b3:f8:f8:57:89:22:fb:0b:
0b:7a:96:7e:85:ca:5d:9e:08:4f:41:17:01:c8:a8:
31:af:7a:80:c1:46:ce:43:23:61:d8:83:71:d0:c3:
95:bf:33:10:a2:5c:de:03:9c:86:3c:2c:89:3f:d2:
e6:01:de:7c:8a:13:35:9b:90:cc:8b:43:99:b6:c5:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EA:4D:1B:53:A8:1F:F6:70:49:71:90:5F:5A:C3:08:96:10:B7:F4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/JupNG1OoH_ZwSXGQX1rDCJYQt_Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
64:26:fe:4f:49:fb:87:35:ee:d7:9d:6f:de:a7:47:b7:4b:0f:
73:97:97:59:12:e8:47:38:ff:76:1e:76:c0:bf:e8:e6:08:e7:
b6:19:6d:83:f0:de:ce:d8:cb:8d:d0:1d:3f:b1:50:51:78:97:
e8:86:d5:b4:0b:c7:65:61:22:a2:6e:36:b6:75:cf:c5:65:4f:
b6:3a:39:33:d9:6f:9f:87:9f:43:a6:03:c6:5c:e5:28:de:c2:
11:7d:10:70:b4:ef:b9:8e:66:b9:30:c1:15:90:90:a5:ab:c0:
8c:4e:10:bb:3b:7f:8c:74:86:f1:44:ce:0b:27:2b:c1:b9:19:
da:5b:41:e4:3f:21:65:1e:fa:3c:07:4f:b4:6a:a9:c4:b4:d8:
8d:1a:5f:ed:e6:45:00:fc:c2:53:04:f0:c8:85:c2:be:cf:51:
a4:fc:09:63:f2:8a:5c:d7:f0:ce:c0:e4:01:98:ad:ee:0b:9f:
6e:d5:1f:9f:e0:6d:d6:47:43:1a:af:2b:53:a0:f4:45:04:18:
7a:01:cf:a9:a9:c9:0c:20:ca:0c:80:72:d3:ba:39:48:c5:91:
5e:81:a5:5d:53:08:2e:df:14:92:09:38:8a:0b:2a:e8:03:93:
16:ab:35:55:8e:f6:3b:8f:09:d8:ca:e1:36:69:cb:4d:09:e8:
80:d4:54:18
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDkw
MzI1NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDI2RUE0RDFCNTNBODFG
RjY3MDQ5NzE5MDVGNUFDMzA4OTYxMEI3RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvs3v9ROBsPBczQfJkA37CTvoj8pHGJ5FtV6lTjaSy9T13F/Pp
MYfhfyDNZ6T/pSwpIacXxpaQ/2kt6YwmW4vNmxocEdfKtMg5DArrqT2xhEAY9rCq
udyuTdITJKEh6KskYmd13cQqNnqbOHAZcLOh9agsAtPX2hCm3PkqPyW6TnD4dWfN
cBqwnxuQkT+MesfzMKPq6jvHZO38E2XUpPTdL8V3vUQG/y9JcP8xNJmGGoZDnYBJ
yMOzk4az+PhXiSL7Cwt6ln6Fyl2eCE9BFwHIqDGveoDBRs5DI2HYg3HQw5W/MxCi
XN4DnIY8LIk/0uYB3nyKEzWbkMyLQ5m2xZGFAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUJupNG1OoH/ZwSXGQX1rDCJYQt/QwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0p1cE5HMU9vSF9ad1NY
R1FYMXJEQ0pZUXRfUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAGQm/k9J+4c17tedb96nR7dL
D3OXl1kS6Ec4/3YedsC/6OYI57YZbYPw3s7Yy43QHT+xUFF4l+iG1bQLx2VhIqJu
NrZ1z8VlT7Y6OTPZb5+Hn0OmA8Zc5SjewhF9EHC077mOZrkwwRWQkKWrwIxOELs7
f4x0hvFEzgsnK8G5GdpbQeQ/IWUe+jwHT7RqqcS02I0aX+3mRQD8wlME8MiFwr7P
UaT8CWPyilzX8M7A5AGYre4Ln27VH5/gbdZHQxqvK1Og9EUEGHoBz6mpyQwgygyA
ctO6OUjFkV6BpV1TCC7fFJIJOIoLKugDkxarNVWO9juPCdjK4TZpy00J6IDUVBg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:22:15 2025 by rpki-client