Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/yQNOH6cpw8_BGJAGUNfC9B9eGQU.roa
File: yQNOH6cpw8_BGJAGUNfC9B9eGQU.roa (raw, json)
Hash identifier: cT5tLdf5FvBilVRI+NxorydPlda8aOfG8+yPliSIFrM=
Subject key identifier: C9:03:4E:1F:A7:29:C3:CF:C1:18:90:06:50:D7:C2:F4:1F:5E:19:05
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B70
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yQNOH6cpw8_BGJAGUNfC9B9eGQU.roa
Signing time: Mon 03 Feb 2025 01:26:18 +0000
ROA not before: Mon 03 Feb 2025 01:26:18 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2928 (0xb70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 01:26:18 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C9034E1FA729C3CFC118900650D7C2F41F5E1905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:8f:04:32:0b:bf:5f:4d:78:7c:22:90:6f:0a:
16:ca:e1:34:dc:98:e3:65:2e:20:a6:22:07:e9:26:
f9:f5:8f:b3:5f:11:72:a5:cb:72:a1:c9:d5:27:a5:
c1:7a:99:ff:4e:5e:d1:ff:42:62:0c:8b:4f:56:1b:
e0:e0:07:c0:86:1d:40:38:29:ec:5a:53:09:8f:3f:
f4:f5:1a:90:f0:46:43:a7:c9:77:f4:fb:a5:a7:3c:
85:0d:9e:86:4d:4d:95:e0:f8:eb:d7:ee:ee:f5:f8:
aa:25:c8:b8:1a:16:0e:fa:06:7b:57:07:49:39:2a:
2e:02:b2:e0:08:29:b9:44:4e:b2:7b:4d:20:1b:ce:
f6:01:1e:08:a4:23:1f:8e:83:f3:94:35:42:96:52:
b6:ca:be:42:3d:5a:69:c4:f2:45:35:b5:93:e1:50:
8c:05:1c:62:7c:ce:0e:e4:de:2f:02:8b:4e:fc:8a:
71:34:7b:d2:c2:f8:1c:5f:be:aa:9c:3f:8f:7f:18:
83:fe:2e:20:4e:e4:d2:52:cf:4d:8f:85:24:2b:14:
20:8e:9f:45:ab:0f:f0:ca:8e:d1:41:42:03:0c:24:
50:fd:e7:47:72:76:f8:97:a7:d1:14:74:fc:f1:10:
d6:ec:fc:f5:b3:a5:55:9d:15:ab:8f:a4:ec:be:ff:
51:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:4E:1F:A7:29:C3:CF:C1:18:90:06:50:D7:C2:F4:1F:5E:19:05
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/yQNOH6cpw8_BGJAGUNfC9B9eGQU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:8e:f2:2b:f0:51:e0:ca:6e:ad:3d:37:72:42:38:2e:ba:5c:
ce:53:99:b4:ba:64:49:65:e0:f3:a3:fb:0e:d6:96:82:bc:82:
d0:b4:da:ca:5b:f9:95:f1:f2:ac:9a:54:93:9a:db:5f:d3:cc:
cf:58:b2:0b:4e:98:97:f7:8a:4f:be:8f:14:ba:3c:19:2d:c5:
47:bb:d8:e7:45:0e:24:cb:05:64:25:ae:8e:f1:b2:12:14:7a:
f2:75:00:5a:a7:2f:ca:9b:7c:93:e7:99:35:cc:32:e7:5f:33:
ab:95:63:1a:0e:6c:07:45:32:e1:88:fe:df:19:45:df:f6:c9:
0d:7f:ba:df:3e:cd:5b:85:83:fc:26:d5:8f:46:b3:35:0e:b6:
95:0c:d6:01:60:35:56:45:77:86:c3:fe:39:95:f7:59:c5:3a:
60:59:c6:ce:63:fa:10:59:80:5c:0e:65:20:79:70:82:ef:1f:
25:57:9e:08:3e:ed:0c:57:7f:41:68:24:75:a1:4e:12:94:d8:
b4:32:b0:80:5a:2f:57:de:20:2b:cb:ca:aa:f6:3f:1a:d0:42:
2d:2f:7f:c9:d6:dd:7f:11:2f:81:88:e3:98:0c:63:78:13:ee:
5c:eb:ce:59:68:38:7c:dd:f3:ac:07:e4:31:6b:73:7f:2a:12:
ee:62:03:35
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDMw
MTI2MThaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM5MDM0RTFGQTcyOUMz
Q0ZDMTE4OTAwNjUwRDdDMkY0MUY1RTE5MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzjwQyC79fTXh8IpBvChbK4TTcmONlLiCmIgfpJvn1j7NfEXKl
y3KhydUnpcF6mf9OXtH/QmIMi09WG+DgB8CGHUA4KexaUwmPP/T1GpDwRkOnyXf0
+6WnPIUNnoZNTZXg+OvX7u71+KolyLgaFg76BntXB0k5Ki4CsuAIKblETrJ7TSAb
zvYBHgikIx+Og/OUNUKWUrbKvkI9WmnE8kU1tZPhUIwFHGJ8zg7k3i8Ci078inE0
e9LC+BxfvqqcP49/GIP+LiBO5NJSz02PhSQrFCCOn0WrD/DKjtFBQgMMJFD950dy
dviXp9EUdPzxENbs/PWzpVWdFauPpOy+/1EZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUyQNOH6cpw8/BGJAGUNfC9B9eGQUwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3lRTk9INmNwdzhfQkdK
QUdVTmZDOUI5ZUdRVS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALmO8ivwUeDKbq09N3JCOC66
XM5TmbS6ZEll4POj+w7WloK8gtC02spb+ZXx8qyaVJOa21/TzM9YsgtOmJf3ik++
jxS6PBktxUe72OdFDiTLBWQlro7xshIUevJ1AFqnL8qbfJPnmTXMMudfM6uVYxoO
bAdFMuGI/t8ZRd/2yQ1/ut8+zVuFg/wm1Y9GszUOtpUM1gFgNVZFd4bD/jmV91nF
OmBZxs5j+hBZgFwOZSB5cILvHyVXngg+7QxXf0FoJHWhThKU2LQysIBaL1feICvL
yqr2PxrQQi0vf8nW3X8RL4GI45gMY3gT7lzrzlloOHzd86wH5DFrc38qEu5iAzU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:30:44 2025 by rpki-client