Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/60r1mLKONJqVnsGMRqBHesy7Llo.roa
File: 60r1mLKONJqVnsGMRqBHesy7Llo.roa (raw, json)
Hash identifier: tGrrUdgJdZwA0lVTRDxCX18lBIkFN39gfZLh9vP1T3Q=
Subject key identifier: EB:4A:F5:98:B2:8E:34:9A:95:9E:C1:8C:46:A0:47:7A:CC:BB:2E:5A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 089A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/60r1mLKONJqVnsGMRqBHesy7Llo.roa
Signing time: Sun 26 Jan 2025 11:55:13 +0000
ROA not before: Sun 26 Jan 2025 11:55:13 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2202 (0x89a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 11:55:13 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EB4AF598B28E349A959EC18C46A0477ACCBB2E5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:cb:09:66:94:d6:58:1d:8d:62:47:58:ce:
78:74:7a:cb:a1:14:18:e0:8c:00:ef:8f:ff:ac:9f:
1d:e2:f9:87:20:5d:11:2b:5f:31:a0:0c:ca:08:c8:
39:c8:ea:1a:dd:d3:a9:4a:74:17:98:62:4c:1d:3d:
91:ec:b8:22:91:49:df:e8:3b:b1:19:3b:c4:d5:65:
c6:d5:bf:91:42:f2:8b:9f:90:ce:a5:4c:ba:ba:ad:
3b:bd:74:f1:e3:f8:91:9c:af:c6:72:f3:aa:5c:af:
6b:13:7f:f4:93:87:a0:0b:3d:eb:b4:1a:43:d8:c8:
f1:9c:d1:b0:9e:f0:83:84:f2:b2:eb:ca:b3:ab:fe:
26:2f:4e:b6:b8:3a:ea:34:3a:48:00:53:6b:b6:5c:
42:3b:41:35:19:fe:28:6f:ea:e5:d2:b7:ed:0b:f9:
83:62:ea:c6:59:89:35:94:43:59:31:bc:4f:e1:cf:
96:a8:d1:1e:b3:c7:01:95:1c:43:6e:e7:88:7b:7d:
52:54:42:ec:51:b8:0a:1e:6b:21:27:f4:0d:63:03:
50:37:7c:72:22:1a:48:89:36:a3:fe:fc:72:d6:2b:
d0:b1:1f:c0:13:8a:8f:16:ae:de:3e:97:62:e8:45:
08:2f:1f:84:b2:63:4f:20:cc:82:06:5f:55:55:f9:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4A:F5:98:B2:8E:34:9A:95:9E:C1:8C:46:A0:47:7A:CC:BB:2E:5A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/60r1mLKONJqVnsGMRqBHesy7Llo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
65:82:aa:93:03:43:fe:04:8d:9e:4f:cb:8f:bf:14:83:4a:ea:
2f:36:76:86:d2:47:f3:a3:0b:9d:12:02:71:af:a9:67:77:7d:
f0:f3:c7:26:68:5e:5b:47:46:ad:21:a9:0f:47:06:92:56:e1:
70:66:9b:1e:60:4d:33:ec:60:8c:bd:ba:85:de:ed:2e:6e:d1:
2c:a5:31:39:19:34:b2:7e:b0:3a:b0:1c:b5:7f:2d:e0:09:c0:
e7:86:e0:e9:cb:26:92:4d:96:33:16:c3:07:ed:aa:82:b3:cf:
4e:63:66:23:2f:f6:2e:89:6b:0f:27:8e:e5:2c:63:86:2c:16:
77:b8:62:f8:e0:81:87:16:dd:21:1e:37:44:97:22:1c:cd:aa:
a2:cc:0b:46:37:a4:9e:c4:61:ce:2a:95:c3:c2:77:00:0b:4f:
8b:d7:9c:90:63:ab:43:6c:65:ae:54:8c:5b:d2:e6:21:61:95:
2e:e7:cc:33:02:f9:ea:fc:16:5d:87:cb:b6:ff:0b:1c:f3:f2:
a1:6a:4c:59:a9:d3:2b:96:75:ef:ae:5a:44:db:2a:f5:2f:74:
10:00:f9:2c:e5:7f:68:0e:f7:76:61:94:80:86:6c:02:4d:d4:
1a:99:f0:10:30:fc:4b:24:1e:9b:8b:97:ca:61:5f:90:c3:99:
04:56:4d:9f
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCJowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjYx
MTU1MTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEVCNEFGNTk4QjI4RTM0
OUE5NTlFQzE4QzQ2QTA0NzdBQ0NCQjJFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDEJcsJZpTWWB2NYkdYznh0esuhFBjgjADvj/+snx3i+YcgXREr
XzGgDMoIyDnI6hrd06lKdBeYYkwdPZHsuCKRSd/oO7EZO8TVZcbVv5FC8oufkM6l
TLq6rTu9dPHj+JGcr8Zy86pcr2sTf/STh6ALPeu0GkPYyPGc0bCe8IOE8rLryrOr
/iYvTra4Ouo0OkgAU2u2XEI7QTUZ/ihv6uXSt+0L+YNi6sZZiTWUQ1kxvE/hz5ao
0R6zxwGVHENu54h7fVJUQuxRuAoeayEn9A1jA1A3fHIiGkiJNqP+/HLWK9CxH8AT
io8Wrt4+l2LoRQgvH4SyY08gzIIGX1VV+S8RAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQU60r1mLKONJqVnsGMRqBHesy7LlowHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwLzYwcjFtTEtPTkpxVm5z
R01ScUJIZXN5N0xsby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAGWCqpMDQ/4EjZ5Py4+/FINK
6i82dobSR/OjC50SAnGvqWd3ffDzxyZoXltHRq0hqQ9HBpJW4XBmmx5gTTPsYIy9
uoXe7S5u0SylMTkZNLJ+sDqwHLV/LeAJwOeG4OnLJpJNljMWwwftqoKzz05jZiMv
9i6Jaw8njuUsY4YsFne4YvjggYcW3SEeN0SXIhzNqqLMC0Y3pJ7EYc4qlcPCdwAL
T4vXnJBjq0NsZa5UjFvS5iFhlS7nzDMC+er8Fl2Hy7b/Cxzz8qFqTFmp0yuWde+u
WkTbKvUvdBAA+Szlf2gO93ZhlICGbAJN1BqZ8BAw/EskHpuLl8phX5DDmQRWTZ8=
Generated at Sun Jan 26 16:03:48 2025 by rpki-client on console.sobornost.net