Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/XuHoR3a43q_yhFFXGBc1zS-duKU.roa
File: XuHoR3a43q_yhFFXGBc1zS-duKU.roa (raw, json)
Hash identifier: A6YlWSsl3jB3uDnU7ckXqW+Uq9dqqbX/NaeiyDV4B6s=
Subject key identifier: 5E:E1:E8:47:76:B8:DE:AF:F2:84:51:57:18:17:35:CD:2F:9D:B8:A5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0DAC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XuHoR3a43q_yhFFXGBc1zS-duKU.roa
Signing time: Sun 09 Feb 2025 00:25:56 +0000
ROA not before: Sun 09 Feb 2025 00:25:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3500 (0xdac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 9 00:25:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=5EE1E84776B8DEAFF2845157181735CD2F9DB8A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:77:1d:d1:e1:94:73:af:34:13:6e:82:44:
eb:c4:9e:de:fa:9a:21:b3:7a:a2:cd:1c:f3:ae:75:
4e:b9:87:50:5b:26:73:e2:dd:f5:8f:77:2a:54:27:
ab:88:43:97:70:73:60:3a:ae:65:07:dc:dc:a1:54:
fe:2f:40:21:06:b2:06:b3:bd:1a:7b:bd:57:72:ec:
6f:40:5a:61:96:5c:a3:eb:65:ab:81:99:88:e6:35:
cd:fc:87:ee:34:87:90:29:1e:0b:6d:a7:61:a8:b0:
cb:e5:39:9c:fb:32:2e:7d:f8:7d:5a:ca:b0:49:db:
c5:5a:fa:84:60:7b:04:ed:d6:c4:97:62:b1:ef:a1:
29:e6:07:35:f3:84:d4:1d:e5:b6:08:28:48:7b:0b:
67:14:0c:5b:6e:98:74:5a:1d:fb:70:9d:ed:69:5e:
1d:c0:c3:96:84:b6:1f:2d:df:74:a2:b7:41:bc:c1:
86:59:11:77:25:82:4c:03:d1:22:8c:84:1b:db:ce:
09:2e:e9:31:8e:ce:25:5f:6a:76:00:59:f2:7a:e1:
7b:0e:42:2a:4d:05:8a:b6:69:6d:dc:35:f4:6c:91:
77:e8:63:33:38:3c:a9:47:1b:77:8a:d0:6e:c4:82:
38:14:d1:40:41:f8:f7:44:b3:b3:a8:ef:2c:70:7d:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E1:E8:47:76:B8:DE:AF:F2:84:51:57:18:17:35:CD:2F:9D:B8:A5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/XuHoR3a43q_yhFFXGBc1zS-duKU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:c5:11:31:78:2c:9d:50:84:c3:6c:6b:99:22:21:04:9e:b2:
94:0c:16:23:b5:21:64:36:0e:c5:94:d9:44:a0:e4:05:f2:fe:
11:f1:46:18:bd:97:d8:12:28:6e:50:51:be:4c:d4:b3:bf:2a:
27:8c:50:e0:57:67:9d:2d:f6:d2:2e:61:29:84:07:f6:5f:dd:
07:d2:f0:23:fe:1f:1f:d1:35:d2:37:03:1e:9a:f0:96:1d:c8:
14:ee:a5:83:76:ca:7f:8e:b8:3a:f8:27:db:50:56:6a:da:20:
92:31:42:b6:f4:a3:1c:cb:f3:08:88:a1:e0:7f:d1:be:ed:58:
b2:82:b9:4e:33:f5:79:f4:ef:34:4a:96:6d:09:72:d7:23:2d:
12:b9:92:df:81:4f:5a:9b:49:aa:11:0e:f9:62:99:43:c3:eb:
78:d8:5b:6a:aa:c9:11:cd:4d:54:9d:fa:bf:24:29:c1:8d:a2:
7f:09:75:c3:18:92:b2:d2:fa:79:6d:05:a9:c6:4b:27:85:32:
3f:b0:6a:52:2b:2a:d4:ef:da:c7:6e:2e:e9:b3:92:ef:76:0c:
84:27:22:8e:af:c7:62:f0:b8:01:fd:f8:cb:b1:f2:b7:d1:13:
ca:a9:ff:8f:c3:02:78:e7:61:ae:32:54:83:d8:86:d4:9d:62:
ab:d5:f0:eb
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICDawwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDkw
MDI1NTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDVFRTFFODQ3NzZCOERF
QUZGMjg0NTE1NzE4MTczNUNEMkY5REI4QTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDiGHcd0eGUc680E26CROvEnt76miGzeqLNHPOudU65h1BbJnPi
3fWPdypUJ6uIQ5dwc2A6rmUH3NyhVP4vQCEGsgazvRp7vVdy7G9AWmGWXKPrZauB
mYjmNc38h+40h5ApHgttp2GosMvlOZz7Mi59+H1ayrBJ28Va+oRgewTt1sSXYrHv
oSnmBzXzhNQd5bYIKEh7C2cUDFtumHRaHftwne1pXh3Aw5aEth8t33Sit0G8wYZZ
EXclgkwD0SKMhBvbzgku6TGOziVfanYAWfJ64XsOQipNBYq2aW3cNfRskXfoYzM4
PKlHG3eK0G7EgjgU0UBB+PdEs7Oo7yxwfeOJAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUXuHoR3a43q/yhFFXGBc1zS+duKUwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1h1SG9SM2E0M3FfeWhG
RlhHQmMxelMtZHVLVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBACXFETF4LJ1QhMNsa5kiIQSe
spQMFiO1IWQ2DsWU2USg5AXy/hHxRhi9l9gSKG5QUb5M1LO/KieMUOBXZ50t9tIu
YSmEB/Zf3QfS8CP+Hx/RNdI3Ax6a8JYdyBTupYN2yn+OuDr4J9tQVmraIJIxQrb0
oxzL8wiIoeB/0b7tWLKCuU4z9Xn07zRKlm0JctcjLRK5kt+BT1qbSaoRDvlimUPD
63jYW2qqyRHNTVSd+r8kKcGNon8JdcMYkrLS+nltBanGSyeFMj+walIrKtTv2sdu
Lumzku92DIQnIo6vx2LwuAH9+Mux8rfRE8qp/4/DAnjnYa4yVIPYhtSdYqvV8Os=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:10 2025 by rpki-client