Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/LHtvpe1RDjiM5FZS4Kv0CWT4iM4.roa
File: LHtvpe1RDjiM5FZS4Kv0CWT4iM4.roa (raw, json)
Hash identifier: nW/W5UCGfCVEzZooE/vVY0JckOFphZmX6WGA31FDL1s=
Subject key identifier: 2C:7B:6F:A5:ED:51:0E:38:8C:E4:56:52:E0:AB:F4:09:64:F8:88:CE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0886
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LHtvpe1RDjiM5FZS4Kv0CWT4iM4.roa
Signing time: Sun 26 Jan 2025 06:55:13 +0000
ROA not before: Sun 26 Jan 2025 06:55:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2182 (0x886)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 06:55:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2C7B6FA5ED510E388CE45652E0ABF40964F888CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:94:58:b4:32:40:8f:bb:91:03:94:34:5c:ee:
af:2d:7f:6b:ca:4a:97:59:a7:d8:52:17:2e:a4:fb:
55:f6:17:88:98:f9:fa:d9:21:78:71:4d:e4:c9:e0:
b2:1c:7d:6a:93:20:ea:dc:5e:87:65:a9:9d:18:3a:
a4:89:06:fe:51:29:43:dd:4b:49:c3:40:e3:a9:28:
af:93:b2:6f:16:b4:b4:7f:1c:da:b0:b4:5b:12:e4:
52:69:c3:a3:52:3e:5c:a5:92:8b:0e:93:0b:61:a5:
42:4d:e5:b5:e9:c5:40:3c:04:ef:e3:8d:34:d7:9d:
84:39:cd:cf:6e:48:f9:b3:d5:54:51:c9:6a:25:94:
1d:10:97:07:8a:19:fe:b7:1e:94:a6:30:58:88:fa:
f4:88:f8:53:f1:3e:9a:17:01:32:3e:d3:27:d8:d4:
42:9b:a1:28:46:66:fc:b9:39:b8:e5:4c:aa:b6:cf:
c0:79:0b:ed:47:e2:43:2e:8b:fd:c4:6d:af:c7:0e:
28:2b:9b:6e:bd:59:25:dd:da:fa:d8:15:b7:da:cc:
a8:f4:3c:29:b7:f3:4c:da:4b:70:be:78:35:f8:f7:
fa:91:7e:29:1c:03:f9:af:63:da:e0:82:19:2b:ec:
0a:95:ef:ce:37:3d:06:df:6f:19:91:83:8b:49:59:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7B:6F:A5:ED:51:0E:38:8C:E4:56:52:E0:AB:F4:09:64:F8:88:CE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/LHtvpe1RDjiM5FZS4Kv0CWT4iM4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
81:24:c6:bd:73:fa:40:5d:ed:a7:41:44:68:74:d2:2d:e1:3f:
d2:b0:89:35:60:f4:01:bd:7b:30:7f:c2:db:a2:e1:83:d2:9a:
65:ea:1d:8e:0f:26:df:0d:28:07:9a:44:84:0a:ad:72:b9:61:
17:9a:50:1a:a4:2b:b9:1a:0d:3c:5b:da:41:5b:44:4c:89:a9:
d3:09:c2:85:cc:1d:54:45:6d:9f:7a:26:4d:ee:c6:d3:27:78:
64:a9:4c:30:5f:a1:89:62:c5:1e:4f:aa:f2:73:92:4f:f7:5a:
9f:66:84:36:6a:e1:9c:4d:7f:e5:c0:66:60:3a:c1:34:1c:37:
ab:68:64:3b:78:f6:9e:1b:6b:9b:cb:57:c3:53:b9:43:d1:e1:
65:e1:73:cb:82:58:1e:46:8e:91:37:b1:90:3a:b4:18:6e:ba:
c4:c0:e1:dd:4e:68:02:5c:4a:4b:15:eb:3a:d6:39:fb:5f:5c:
5c:0e:25:b4:8b:e3:81:12:c1:8a:81:ec:9e:2e:73:9a:ea:e3:
c7:02:74:f2:7a:fa:87:06:5d:90:fc:72:f6:4b:84:a7:17:23:
4f:c4:40:4e:2b:1a:ff:20:ea:0b:5c:90:ce:63:88:de:d3:02:
6f:2f:30:09:d2:c4:91:ec:f6:8a:53:29:a0:21:84:6f:4f:86:
7e:62:89:b3
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCIYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjYw
NjU1MTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDJDN0I2RkE1RUQ1MTBF
Mzg4Q0U0NTY1MkUwQUJGNDA5NjRGODg4Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCalFi0MkCPu5EDlDRc7q8tf2vKSpdZp9hSFy6k+1X2F4iY+frZ
IXhxTeTJ4LIcfWqTIOrcXodlqZ0YOqSJBv5RKUPdS0nDQOOpKK+Tsm8WtLR/HNqw
tFsS5FJpw6NSPlylkosOkwthpUJN5bXpxUA8BO/jjTTXnYQ5zc9uSPmz1VRRyWol
lB0QlweKGf63HpSmMFiI+vSI+FPxPpoXATI+0yfY1EKboShGZvy5ObjlTKq2z8B5
C+1H4kMui/3Eba/HDigrm269WSXd2vrYFbfazKj0PCm380zaS3C+eDX49/qRfikc
A/mvY9rgghkr7AqV7843PQbfbxmRg4tJWdlJAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQULHtvpe1RDjiM5FZS4Kv0CWT4iM4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0xIdHZwZTFSRGppTTVG
WlM0S3YwQ1dUNGlNNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIEkxr1z+kBd7adBRGh00i3h
P9KwiTVg9AG9ezB/wtui4YPSmmXqHY4PJt8NKAeaRIQKrXK5YReaUBqkK7kaDTxb
2kFbREyJqdMJwoXMHVRFbZ96Jk3uxtMneGSpTDBfoYlixR5PqvJzkk/3Wp9mhDZq
4ZxNf+XAZmA6wTQcN6toZDt49p4ba5vLV8NTuUPR4WXhc8uCWB5GjpE3sZA6tBhu
usTA4d1OaAJcSksV6zrWOftfXFwOJbSL44ESwYqB7J4uc5rq48cCdPJ6+ocGXZD8
cvZLhKcXI0/EQE4rGv8g6gtckM5jiN7TAm8vMAnSxJHs9opTKaAhhG9Phn5iibM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:30:48 2025 by rpki-client