Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/y6UfmW6xdAABbljpoNJhO2kNs7k.roa
File: y6UfmW6xdAABbljpoNJhO2kNs7k.roa (raw, json)
Hash identifier: H10vPQmvTsELSii/2Sq0fIivQ7PvqLz79qh8TYPxGk4=
Subject key identifier: CB:A5:1F:99:6E:B1:74:00:01:6E:58:E9:A0:D2:61:3B:69:0D:B3:B9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 09E0
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y6UfmW6xdAABbljpoNJhO2kNs7k.roa
Signing time: Wed 29 Jan 2025 21:25:28 +0000
ROA not before: Wed 29 Jan 2025 21:25:28 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2528 (0x9e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 29 21:25:28 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=CBA51F996EB17400016E58E9A0D2613B690DB3B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:04:6a:eb:dc:6f:45:ac:b8:f3:ed:58:cc:
4a:4f:e7:f7:b8:fa:86:bb:03:90:10:e4:b0:fc:a0:
b2:69:cc:b1:58:5e:c3:0b:1d:df:5a:09:a4:1e:6f:
76:7a:6c:96:11:6e:67:eb:5b:da:66:0c:63:e3:c2:
eb:2c:f2:7a:0a:f1:d9:9c:9d:3f:40:3d:49:a6:79:
8c:22:e9:ef:85:7e:e9:fe:26:89:aa:25:07:ed:72:
45:c6:33:f9:92:84:7a:33:e1:19:1a:8b:e6:9b:12:
93:27:31:74:4e:07:3f:65:e0:29:f0:56:58:66:ea:
c9:a6:70:93:5a:28:12:e6:35:dd:2d:85:dc:39:16:
bc:ec:1e:42:b1:90:3b:e3:f3:c2:05:3b:7b:68:d9:
27:1a:42:d7:3f:e7:50:0e:74:5e:42:9e:f8:b4:ff:
d9:7b:3d:3e:13:c4:6b:7c:8b:0f:b5:51:0f:59:2b:
bb:26:5c:d1:86:12:f5:01:38:6a:d7:ca:30:d0:9c:
62:d6:42:dc:f3:ce:57:d7:6f:f0:ea:38:3d:12:5c:
ed:52:73:51:1e:18:82:4b:00:ec:65:d3:f7:58:5b:
9a:c3:8b:d2:fc:78:9e:fb:1d:c6:0d:9f:cf:4b:a7:
38:d3:29:ff:31:25:2e:65:2a:99:99:64:1b:3f:1f:
4e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:1F:99:6E:B1:74:00:01:6E:58:E9:A0:D2:61:3B:69:0D:B3:B9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/y6UfmW6xdAABbljpoNJhO2kNs7k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:b0:7e:81:ff:9e:89:10:dd:74:f4:45:72:2b:98:0f:72:40:
b6:3d:ae:cd:ac:24:e8:2e:32:32:1a:37:e4:42:43:40:fa:01:
b9:dc:3f:6b:cb:90:c9:b6:19:a2:84:21:a8:73:6b:71:6c:af:
22:11:dc:6e:d3:45:99:93:99:0d:e4:66:96:54:97:21:34:2d:
8e:40:1d:1d:7d:a3:50:49:14:d5:d9:01:a4:e6:d4:d3:54:a5:
54:90:d4:f6:8e:2f:e6:aa:6e:aa:b3:6a:29:ef:56:a8:8c:bc:
9a:06:f9:75:81:60:1a:b0:61:ef:c0:ab:bf:24:65:d4:c9:b3:
05:c5:64:11:77:6b:18:33:7c:95:46:f7:bd:ce:e1:9d:0f:36:
f9:24:54:73:9f:77:b8:a8:5f:f3:61:51:09:00:ac:35:43:a5:
0d:e5:1f:65:84:2e:a7:21:4f:fd:ec:60:36:1a:94:eb:08:f8:
ad:12:38:1f:ff:7b:9a:c4:43:2b:78:16:2d:2e:50:0f:54:16:
38:14:bd:2e:1c:4e:75:cc:33:68:d3:1f:27:78:43:6a:69:8c:
ba:ec:0b:39:ac:27:e5:eb:98:05:dc:de:06:04:e0:34:07:f1:
d3:b6:38:00:c7:ee:03:2f:d6:67:b1:03:40:1b:d6:66:a4:9a:
8f:0e:12:d4
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCeAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjky
MTI1MjhaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKENCQTUxRjk5NkVCMTc0
MDAwMTZFNThFOUEwRDI2MTNCNjkwREIzQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCTrwRq69xvRay48+1YzEpP5/e4+oa7A5AQ5LD8oLJpzLFYXsML
Hd9aCaQeb3Z6bJYRbmfrW9pmDGPjwuss8noK8dmcnT9APUmmeYwi6e+Ffun+Jomq
JQftckXGM/mShHoz4Rkai+abEpMnMXROBz9l4CnwVlhm6smmcJNaKBLmNd0thdw5
FrzsHkKxkDvj88IFO3to2ScaQtc/51AOdF5Cnvi0/9l7PT4TxGt8iw+1UQ9ZK7sm
XNGGEvUBOGrXyjDQnGLWQtzzzlfXb/DqOD0SXO1Sc1EeGIJLAOxl0/dYW5rDi9L8
eJ77HcYNn89LpzjTKf8xJS5lKpmZZBs/H06HAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUy6UfmW6xdAABbljpoNJhO2kNs7kwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3k2VWZtVzZ4ZEFBQmJs
anBvTkpoTzJrTnM3ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAD2wfoH/nokQ3XT0RXIrmA9y
QLY9rs2sJOguMjIaN+RCQ0D6AbncP2vLkMm2GaKEIahza3FsryIR3G7TRZmTmQ3k
ZpZUlyE0LY5AHR19o1BJFNXZAaTm1NNUpVSQ1PaOL+aqbqqzainvVqiMvJoG+XWB
YBqwYe/Aq78kZdTJswXFZBF3axgzfJVG973O4Z0PNvkkVHOfd7ioX/NhUQkArDVD
pQ3lH2WELqchT/3sYDYalOsI+K0SOB//e5rEQyt4Fi0uUA9UFjgUvS4cTnXMM2jT
Hyd4Q2ppjLrsCzmsJ+XrmAXc3gYE4DQH8dO2OADH7gMv1mexA0Ab1makmo8OEtQ=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:31:42 2025 by rpki-client