Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/VUYgqSWXooMF1EkD2xhQpFPYCwc.roa
File: VUYgqSWXooMF1EkD2xhQpFPYCwc.roa (raw, json)
Hash identifier: iqg4cxLA87hinVVh7r78fe44fHQP/ZFITQgBVVqA33w=
Subject key identifier: 55:46:20:A9:25:97:A2:83:05:D4:49:03:DB:18:50:A4:53:D8:0B:07
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0BFE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VUYgqSWXooMF1EkD2xhQpFPYCwc.roa
Signing time: Tue 04 Feb 2025 12:55:44 +0000
ROA not before: Tue 04 Feb 2025 12:55:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3070 (0xbfe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 4 12:55:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=554620A92597A28305D44903DB1850A453D80B07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:35:19:9b:7b:d4:a8:54:aa:ac:12:8e:5f:77:
a1:ca:58:ae:eb:d1:42:28:43:4b:4b:f1:91:2f:36:
6a:3a:d9:3a:20:f5:31:3a:23:44:54:64:9c:88:7b:
6a:95:91:0a:86:9d:c7:8f:94:32:6c:a6:06:80:15:
f5:3b:e1:75:b7:69:f0:ad:d3:50:93:a5:c5:67:6c:
c6:ae:c9:38:b5:c6:7a:d7:b5:63:75:3f:51:c4:d7:
63:0e:23:b1:b6:e6:0a:f1:87:67:f7:59:53:d7:9c:
7b:7a:dc:9d:e2:a1:59:66:cd:75:e5:8c:4f:5b:16:
dd:89:da:0e:d3:5f:a8:6a:7d:88:18:88:1f:e8:23:
86:6d:bc:1b:4d:93:58:0e:05:1b:73:a2:61:cc:3e:
95:8c:29:c8:18:1e:2f:a6:10:56:a7:06:51:88:48:
93:fc:74:19:43:c4:82:b1:73:eb:1f:ee:ec:d3:28:
eb:ab:93:06:fb:83:27:63:a3:2f:a2:56:b9:8b:f3:
26:11:d6:de:ef:6b:ff:ef:bd:60:98:c3:06:2b:eb:
c5:1a:2a:3f:5a:c6:a0:6f:0e:f3:8f:58:c9:7f:67:
5e:a1:7e:ab:ac:26:87:ec:28:8c:2d:73:75:4f:0a:
eb:e0:2c:3f:c8:e8:55:ed:01:89:9f:17:83:f6:5c:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:46:20:A9:25:97:A2:83:05:D4:49:03:DB:18:50:A4:53:D8:0B:07
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/VUYgqSWXooMF1EkD2xhQpFPYCwc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
11:d0:a6:c9:57:06:4b:cc:bd:92:1e:e3:18:5c:cb:18:0d:44:
14:a8:0e:7c:2d:26:68:c3:85:7d:9c:a6:e1:22:01:8a:7b:3a:
83:1b:58:0e:0b:24:37:a1:a0:79:e4:94:e1:e7:95:d7:21:23:
60:6f:d9:89:f4:66:33:0d:56:2a:2d:65:8d:84:cb:e7:9a:a2:
2a:02:a4:97:f5:d6:db:b9:fd:b8:85:42:ce:76:e6:54:51:72:
ce:49:92:81:18:65:9c:e2:60:3a:1d:6f:d4:fe:1a:86:8f:ff:
6b:9c:e4:a3:53:5b:d2:fa:48:f0:9a:6a:a2:95:fd:10:e6:86:
97:92:d1:89:55:9a:79:5c:4a:83:cd:25:a3:d8:31:43:0f:d7:
64:89:7c:d9:c8:65:15:e8:57:83:95:e6:fb:d7:07:c0:c4:fb:
cd:f5:33:eb:53:fc:73:3d:c5:4f:b8:fc:9b:ce:1e:b9:33:79:
fd:9d:6c:86:60:71:37:63:b8:b5:65:e1:18:48:34:51:65:65:
88:b7:e5:c0:74:bf:2c:b8:9f:ba:ac:c2:32:fa:08:11:94:54:
69:38:06:52:fc:5f:cf:1b:4e:60:2f:c7:b3:e5:d0:1e:bf:35:
66:ab:b1:18:54:ae:b5:92:ca:04:a0:c3:f6:55:68:0f:56:d9:
ec:f6:47:9b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDQx
MjU1NDRaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDU1NDYyMEE5MjU5N0Ey
ODMwNUQ0NDkwM0RCMTg1MEE0NTNEODBCMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGNRmbe9SoVKqsEo5fd6HKWK7r0UIoQ0tL8ZEvNmo62Tog9TE6
I0RUZJyIe2qVkQqGncePlDJspgaAFfU74XW3afCt01CTpcVnbMauyTi1xnrXtWN1
P1HE12MOI7G25grxh2f3WVPXnHt63J3ioVlmzXXljE9bFt2J2g7TX6hqfYgYiB/o
I4ZtvBtNk1gOBRtzomHMPpWMKcgYHi+mEFanBlGISJP8dBlDxIKxc+sf7uzTKOur
kwb7gydjoy+iVrmL8yYR1t7va//vvWCYwwYr68UaKj9axqBvDvOPWMl/Z16hfqus
JofsKIwtc3VPCuvgLD/I6FXtAYmfF4P2XDtvAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUVUYgqSWXooMF1EkD2xhQpFPYCwcwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1ZVWWdxU1dYb29NRjFF
a0QyeGhRcEZQWUN3Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBABHQpslXBkvMvZIe4xhcyxgN
RBSoDnwtJmjDhX2cpuEiAYp7OoMbWA4LJDehoHnklOHnldchI2Bv2Yn0ZjMNViot
ZY2Ey+eaoioCpJf11tu5/biFQs525lRRcs5JkoEYZZziYDodb9T+GoaP/2uc5KNT
W9L6SPCaaqKV/RDmhpeS0YlVmnlcSoPNJaPYMUMP12SJfNnIZRXoV4OV5vvXB8DE
+831M+tT/HM9xU+4/JvOHrkzef2dbIZgcTdjuLVl4RhINFFlZYi35cB0vyy4n7qs
wjL6CBGUVGk4BlL8X88bTmAvx7Pl0B6/NWarsRhUrrWSygSgw/ZVaA9W2ez2R5s=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:06:49 2025 by rpki-client