Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Rp5XEKQ_erKM1r9H1GxEq0QK6Y8.roa
File: Rp5XEKQ_erKM1r9H1GxEq0QK6Y8.roa (raw, json)
Hash identifier: GGrLOATIYv9RHObmUhXsmjmb+8AV2Yrj8XXIOv2LKyo=
Subject key identifier: 46:9E:57:10:A4:3F:7A:B2:8C:D6:BF:47:D4:6C:44:AB:44:0A:E9:8F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0522
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Rp5XEKQ_erKM1r9H1GxEq0QK6Y8.roa
Signing time: Fri 17 Jan 2025 05:54:41 +0000
ROA not before: Fri 17 Jan 2025 05:54:41 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1314 (0x522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 05:54:41 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=469E5710A43F7AB28CD6BF47D46C44AB440AE98F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:37:40:b1:0c:03:d3:a6:c0:70:d1:eb:4a:
19:31:33:80:6b:dd:2e:96:f7:20:9f:97:27:a9:79:
66:7f:1b:d6:12:f7:cc:fe:27:54:97:39:94:e0:83:
65:fa:6a:9f:11:0a:32:70:0d:25:0c:cc:6f:04:6f:
37:6b:5c:ac:b9:14:2d:3f:a6:94:d4:c8:95:62:21:
c9:fd:3e:6e:23:57:32:76:aa:fe:3a:aa:41:96:e6:
58:ec:cc:49:45:23:18:e8:38:2c:24:e2:d8:f2:f6:
49:f4:57:01:d7:99:bd:0c:33:97:b5:95:13:07:b5:
a9:e8:93:86:32:54:82:93:da:17:18:8a:e2:39:ae:
a6:92:6c:a6:39:12:17:e2:b7:c3:6c:77:0c:26:fd:
52:52:9a:2e:25:c3:38:c9:28:9c:b0:3e:5d:cd:ac:
4a:0a:5a:ed:c2:4a:9d:28:6d:84:02:4c:c3:de:2f:
98:a8:9c:2c:4a:06:77:4d:b7:ca:51:32:e3:cf:9f:
87:32:c5:a0:61:1b:cb:1e:51:b5:35:22:33:07:da:
65:c0:02:b1:68:80:0f:24:ae:0f:de:57:1e:3f:8b:
01:0a:85:d8:b0:e2:52:05:7d:21:44:f9:5a:a3:4b:
4e:fa:1d:c9:b3:e3:66:cd:5b:98:8c:f4:71:a0:4c:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:9E:57:10:A4:3F:7A:B2:8C:D6:BF:47:D4:6C:44:AB:44:0A:E9:8F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Rp5XEKQ_erKM1r9H1GxEq0QK6Y8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:64:9f:10:a5:79:0d:94:4d:f1:4e:8e:f2:bb:d1:c2:5a:d4:
08:2a:be:24:53:44:a6:a4:31:23:14:d9:dd:4a:80:cd:1d:ef:
25:9b:92:90:ac:f6:81:5c:02:c1:05:b3:ad:ca:40:b3:ce:df:
78:72:a3:3e:fc:f6:8e:31:25:2f:47:95:9e:60:22:21:d1:49:
e4:f7:e6:d0:82:7a:4d:81:d8:02:f7:30:b8:4a:be:2c:ae:22:
cd:8b:f8:1d:bb:1e:c3:f3:01:fe:94:41:07:e5:82:43:ee:da:
2e:7b:3c:e9:a3:99:f3:0d:24:b7:30:dc:62:0c:23:17:67:33:
9e:60:2a:26:f2:25:86:1f:ad:fa:49:23:f1:ed:28:61:be:d9:
62:1e:d5:3a:b5:ca:69:a5:6d:a5:c5:82:ed:9f:d0:44:c7:03:
5a:4b:53:ae:75:f7:1c:a8:47:1f:d3:41:f5:a4:98:c5:0a:f5:
b6:c7:11:da:94:5d:d2:25:c4:85:71:36:36:b3:cc:c8:b8:62:
32:6a:11:fb:c8:46:11:d4:b6:34:42:6e:15:6c:db:e8:22:c0:
f5:d4:f1:b9:48:02:e3:10:af:ac:b4:2f:83:e1:d7:13:68:a7:
d1:1e:09:58:39:1a:b4:29:ad:d5:f7:3a:5f:38:b9:e7:c6:db:
13:bb:e4:a0
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTcw
NTU0NDFaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ2OUU1NzEwQTQzRjdB
QjI4Q0Q2QkY0N0Q0NkM0NEFCNDQwQUU5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQOjdAsQwD06bAcNHrShkxM4Br3S6W9yCflyepeWZ/G9YS98z+
J1SXOZTgg2X6ap8RCjJwDSUMzG8EbzdrXKy5FC0/ppTUyJViIcn9Pm4jVzJ2qv46
qkGW5ljszElFIxjoOCwk4tjy9kn0VwHXmb0MM5e1lRMHtanok4YyVIKT2hcYiuI5
rqaSbKY5Ehfit8Nsdwwm/VJSmi4lwzjJKJywPl3NrEoKWu3CSp0obYQCTMPeL5io
nCxKBndNt8pRMuPPn4cyxaBhG8seUbU1IjMH2mXAArFogA8krg/eVx4/iwEKhdiw
4lIFfSFE+VqjS076Hcmz42bNW5iM9HGgTMatAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQURp5XEKQ/erKM1r9H1GxEq0QK6Y8wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1JwNVhFS1FfZXJLTTFy
OUgxR3hFcTBRSzZZOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIpknxCleQ2UTfFOjvK70cJa
1AgqviRTRKakMSMU2d1KgM0d7yWbkpCs9oFcAsEFs63KQLPO33hyoz789o4xJS9H
lZ5gIiHRSeT35tCCek2B2AL3MLhKviyuIs2L+B27HsPzAf6UQQflgkPu2i57POmj
mfMNJLcw3GIMIxdnM55gKibyJYYfrfpJI/HtKGG+2WIe1Tq1ymmlbaXFgu2f0ETH
A1pLU6519xyoRx/TQfWkmMUK9bbHEdqUXdIlxIVxNjazzMi4YjJqEfvIRhHUtjRC
bhVs2+giwPXU8blIAuMQr6y0L4Ph1xNop9EeCVg5GrQprdX3Ol84uefG2xO75KA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:40 2025 by rpki-client