Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/MvN1W1gMsn2jhRJfYLcmM1sdxJw.roa
File: MvN1W1gMsn2jhRJfYLcmM1sdxJw.roa (raw, json)
Hash identifier: UhYfyyy7lRNG06CMFc0ISMb0t2op3e2XPqC8F4PdY9w=
Subject key identifier: 32:F3:75:5B:58:0C:B2:7D:A3:85:12:5F:60:B7:26:33:5B:1D:C4:9C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06CC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MvN1W1gMsn2jhRJfYLcmM1sdxJw.roa
Signing time: Tue 21 Jan 2025 16:24:56 +0000
ROA not before: Tue 21 Jan 2025 16:24:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1740 (0x6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 16:24:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=32F3755B580CB27DA385125F60B726335B1DC49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:67:5c:0c:a1:bc:ed:83:1f:0e:de:20:9e:31:
3e:db:5b:88:9a:c0:66:e1:22:8a:0d:9b:76:d2:6d:
ba:e9:5b:58:40:37:98:1c:cb:51:36:06:3f:4b:a5:
2a:14:ab:87:4c:8d:ef:81:88:87:fe:5f:1b:83:b7:
ac:72:7f:03:91:53:e2:4f:dc:c9:5d:ea:c4:33:c1:
92:e2:91:3b:85:9d:d8:f0:2b:dd:0a:92:92:07:a3:
97:ba:b3:dd:79:cb:6a:11:29:ad:db:2c:0a:0e:e2:
fc:d4:14:0e:d6:6c:85:3a:44:8c:91:36:88:3a:0c:
a7:e1:ed:61:90:f5:a3:85:81:a7:3c:f9:48:f3:0a:
6e:b4:7d:32:ae:59:66:15:ec:f8:32:d4:f4:fa:43:
9c:04:48:65:f3:d4:d2:1f:d5:da:54:35:7b:53:8f:
f2:9a:7b:11:c1:89:38:fc:a5:b0:e5:fc:9c:f5:db:
87:3f:6d:e9:d2:8e:62:b0:23:b0:a1:99:f5:98:71:
8b:54:f4:a1:44:21:8a:5e:4e:94:bc:1d:83:ce:02:
5e:02:ef:fb:cb:87:8c:93:dc:77:98:f0:1c:6c:ef:
18:af:5b:33:91:3a:86:56:ff:6b:f7:45:50:f0:71:
62:5b:cc:59:bb:16:c4:7c:13:74:82:73:f3:d6:04:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F3:75:5B:58:0C:B2:7D:A3:85:12:5F:60:B7:26:33:5B:1D:C4:9C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MvN1W1gMsn2jhRJfYLcmM1sdxJw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8d:cd:cf:f2:05:cf:9b:23:7a:e9:8b:d8:29:e5:c6:11:93:bd:
ff:ac:7d:98:57:94:11:64:de:48:51:15:04:55:f2:6e:8e:25:
40:5d:dc:8f:fa:f3:3a:a6:c4:23:ed:5a:9c:43:b9:af:87:b7:
0f:97:d4:c7:48:e0:52:a6:fa:40:2e:e0:f1:6d:ae:55:88:f1:
c3:f0:b0:6f:bf:a4:d9:88:93:24:17:6a:b2:38:b8:1c:79:9b:
e9:ff:3b:c2:08:bd:5b:f4:84:10:f7:8e:f8:00:f1:fc:45:5d:
66:31:24:c9:e8:d7:d3:da:6f:26:82:a4:ce:64:fc:6a:b6:cf:
ea:21:0b:1d:5c:29:6b:42:ce:c3:a0:31:2d:f6:f1:7d:7f:93:
1e:18:d4:a4:d8:ec:54:c8:bc:28:ca:0f:43:2c:41:8c:bf:19:
b7:57:8c:69:f6:26:1f:20:63:6b:e2:d8:68:46:53:e2:ec:ed:
be:20:a8:9f:8a:6a:8d:91:6f:e2:2e:68:86:00:02:d8:e8:c8:
d3:ce:de:39:c1:c8:c3:10:66:e7:54:b6:a3:10:d1:12:31:18:
14:e3:cf:67:89:bd:fb:d8:b1:e4:cf:23:35:8b:f6:44:ee:e6:
fb:0c:3f:8f:13:9c:a7:4b:bb:35:ee:3d:9f:25:37:4a:dd:b0:
ff:98:90:cf
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjEx
NjI0NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDMyRjM3NTVCNTgwQ0Iy
N0RBMzg1MTI1RjYwQjcyNjMzNUIxREM0OUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7Z1wMobztgx8O3iCeMT7bW4iawGbhIooNm3bSbbrpW1hAN5gc
y1E2Bj9LpSoUq4dMje+BiIf+XxuDt6xyfwORU+JP3Mld6sQzwZLikTuFndjwK90K
kpIHo5e6s915y2oRKa3bLAoO4vzUFA7WbIU6RIyRNog6DKfh7WGQ9aOFgac8+Ujz
Cm60fTKuWWYV7Pgy1PT6Q5wESGXz1NIf1dpUNXtTj/KaexHBiTj8pbDl/Jz124c/
benSjmKwI7ChmfWYcYtU9KFEIYpeTpS8HYPOAl4C7/vLh4yT3HeY8Bxs7xivWzOR
OoZW/2v3RVDwcWJbzFm7FsR8E3SCc/PWBOljAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUMvN1W1gMsn2jhRJfYLcmM1sdxJwwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL012TjFXMWdNc24yamhS
SmZZTGNtTTFzZHhKdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAI3Nz/IFz5sjeumL2CnlxhGT
vf+sfZhXlBFk3khRFQRV8m6OJUBd3I/68zqmxCPtWpxDua+Htw+X1MdI4FKm+kAu
4PFtrlWI8cPwsG+/pNmIkyQXarI4uBx5m+n/O8IIvVv0hBD3jvgA8fxFXWYxJMno
19PabyaCpM5k/Gq2z+ohCx1cKWtCzsOgMS328X1/kx4Y1KTY7FTIvCjKD0MsQYy/
GbdXjGn2Jh8gY2vi2GhGU+Ls7b4gqJ+Kao2Rb+IuaIYAAtjoyNPO3jnByMMQZudU
tqMQ0RIxGBTjz2eJvfvYseTPIzWL9kTu5vsMP48TnKdLuzXuPZ8lN0rdsP+YkM8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:19:24 2025 by rpki-client