Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa
File: szjcp8IwSRNqLE13YroyiF9DDYA.roa (raw, json)
Hash identifier: i2LNGDSUAj4anqNW7NsvflXyj7kSntKY3+StXIiuS2s=
Subject key identifier: B3:38:DC:A7:C2:30:49:13:6A:2C:4D:77:62:BA:32:88:5F:43:0D:80
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0EA0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa
Signing time: Mon 10 Mar 2025 15:09:35 +0000
ROA not before: Mon 10 Mar 2025 15:09:35 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 4134
IP address blocks: 113.31.128.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3744 (0xea0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Mar 10 15:09:35 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B338DCA7C23049136A2C4D7762BA32885F430D80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:9e:e0:ac:af:39:1a:6e:4a:af:9e:05:83:
ea:19:5c:ab:56:e1:ea:24:49:33:7e:02:57:45:03:
41:3a:67:eb:0a:01:4c:ff:f1:32:2c:39:25:96:ef:
6d:da:71:f9:d8:28:b3:65:44:16:3e:27:2a:8f:fc:
d0:18:9d:3c:4a:c4:97:b9:73:04:ed:da:82:7d:cc:
12:7f:61:dd:a7:07:df:e4:f3:ca:6e:ed:7c:12:d2:
dc:44:36:56:86:5b:79:da:7e:0e:5b:2d:2e:49:2e:
4b:9e:88:7b:38:8a:ea:f8:2a:de:6a:f2:5b:0e:05:
fe:b9:cb:5f:b0:93:38:e4:f6:70:28:71:b5:4a:5b:
c4:aa:ed:3e:a2:4c:9d:55:42:d7:ab:21:9d:06:86:
59:e7:77:c8:26:ac:71:e4:aa:6d:ef:8a:33:6f:7f:
c2:20:54:d7:82:d8:00:24:7b:4b:cc:b3:50:e5:c3:
e2:8a:76:66:71:39:a5:79:d4:b9:05:bf:92:74:d2:
9e:df:49:49:65:bc:e4:0b:50:e3:d3:39:5a:ad:c7:
db:6a:1f:44:51:21:4c:01:d9:b6:3d:0a:23:0f:7e:
53:7c:5b:0f:17:07:ce:a5:32:8b:92:a7:84:be:41:
dc:13:41:83:e9:02:c5:e7:0f:fa:85:fe:93:19:03:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:38:DC:A7:C2:30:49:13:6A:2C:4D:77:62:BA:32:88:5F:43:0D:80
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/szjcp8IwSRNqLE13YroyiF9DDYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.128.0/21
Signature Algorithm: sha256WithRSAEncryption
69:d8:1e:a5:1c:27:54:26:13:fe:8b:8e:bb:b7:bf:42:6c:cf:
48:1f:3c:36:1b:7a:f8:21:7d:3e:c7:67:c3:9a:e8:f0:ff:7e:
d8:82:71:ac:10:74:bf:88:c3:7c:3b:99:1c:ff:81:63:a5:e8:
1a:8c:5d:ee:58:7c:48:94:31:49:36:c5:8b:36:42:a7:03:10:
9f:18:4a:0c:1c:47:97:ed:6a:91:f0:64:b0:78:35:d3:a9:83:
7e:7d:2b:2e:ef:4b:f2:7d:fc:a9:ac:a0:a3:2b:3c:25:21:ac:
00:18:25:e2:ab:5f:16:40:ca:78:22:8e:15:c5:44:37:0a:ad:
43:3c:de:d7:b6:11:85:41:a0:f7:af:b0:42:6b:e6:bc:d7:c0:
3a:73:1f:08:f9:77:f9:57:f0:76:75:05:82:48:db:35:be:8d:
98:8f:e9:4d:41:db:60:51:b6:8f:08:ca:03:fb:41:ee:c1:51:
03:9e:a8:8c:c4:c2:ad:98:a2:9b:ed:21:5e:fa:c6:f4:3a:25:
d2:4f:c4:3e:11:18:15:da:1f:b8:66:74:96:10:f1:a9:d2:69:
f6:ff:fa:a0:7d:0d:2a:d0:4e:78:f0:e9:99:4f:c6:84:51:7b:
fc:c3:ee:e6:9f:34:77:90:a5:73:b9:36:1a:0b:7b:52:94:0e:
43:3d:b2:e3
-----BEGIN CERTIFICATE-----
MIIE1TCCA72gAwIBAgICDqAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAzMTAx
NTA5MzVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEIzMzhEQ0E3QzIzMDQ5
MTM2QTJDNEQ3NzYyQkEzMjg4NUY0MzBEODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCeSp7grK85Gm5Kr54Fg+oZXKtW4eokSTN+AldFA0E6Z+sKAUz/
8TIsOSWW723acfnYKLNlRBY+JyqP/NAYnTxKxJe5cwTt2oJ9zBJ/Yd2nB9/k88pu
7XwS0txENlaGW3nafg5bLS5JLkueiHs4iur4Kt5q8lsOBf65y1+wkzjk9nAocbVK
W8Sq7T6iTJ1VQterIZ0Ghlnnd8gmrHHkqm3vijNvf8IgVNeC2AAke0vMs1Dlw+KK
dmZxOaV51LkFv5J00p7fSUllvOQLUOPTOVqtx9tqH0RRIUwB2bY9CiMPflN8Ww8X
B86lMouSp4S+QdwTQYPpAsXnD/qF/pMZA1fNAgMBAAGjggHxMIIB7TAdBgNVHQ4E
FgQUszjcp8IwSRNqLE13YroyiF9DDYAwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3N6amNwOEl3U1JOcUxF
MTNZcm95aUY5RERZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BANxH4AwDQYJKoZIhvcNAQELBQADggEBAGnYHqUcJ1QmE/6Ljru3v0Jsz0gfPDYb
evghfT7HZ8Oa6PD/ftiCcawQdL+Iw3w7mRz/gWOl6BqMXe5YfEiUMUk2xYs2QqcD
EJ8YSgwcR5ftapHwZLB4NdOpg359Ky7vS/J9/KmsoKMrPCUhrAAYJeKrXxZAyngi
jhXFRDcKrUM83te2EYVBoPevsEJr5rzXwDpzHwj5d/lX8HZ1BYJI2zW+jZiP6U1B
22BRto8IygP7Qe7BUQOeqIzEwq2YopvtIV76xvQ6JdJPxD4RGBXaH7hmdJYQ8anS
afb/+qB9DSrQTnjw6ZlPxoRRe/zD7uafNHeQpXO5NhoLe1KUDkM9suM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:26:10 2025 by rpki-client