Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/I1GJyfg9Y2ibjgwauhhsZZfjsa8.roa
File: I1GJyfg9Y2ibjgwauhhsZZfjsa8.roa (raw, json)
Hash identifier: ZNE3/YbiLNMB5jquL2Qsy1dQkE1rwUHzymOaY+PUy+I=
Subject key identifier: 23:51:89:C9:F8:3D:63:68:9B:8E:0C:1A:BA:18:6C:65:97:E3:B1:AF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B56
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I1GJyfg9Y2ibjgwauhhsZZfjsa8.roa
Signing time: Sun 02 Feb 2025 18:55:37 +0000
ROA not before: Sun 02 Feb 2025 18:55:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2902 (0xb56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 18:55:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=235189C9F83D63689B8E0C1ABA186C6597E3B1AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:ac:df:a9:6f:ec:f6:19:e2:7a:8e:bd:ec:
75:f7:21:63:f5:d7:ff:41:98:61:9c:6d:b1:39:e5:
fb:aa:81:ca:c7:5c:ae:5e:6a:4c:56:dc:55:b2:4c:
b2:d0:7b:44:00:1d:05:45:7e:3a:58:57:e8:d6:f0:
29:56:48:8c:39:e0:6e:cc:8b:cf:61:1d:02:28:3e:
47:7f:8c:5a:4d:9d:3d:4d:f1:5c:0b:89:34:df:3a:
2c:15:18:a8:d1:9b:f8:3a:3f:fe:a4:83:23:5f:45:
a0:5c:40:eb:1b:5b:b0:67:27:fb:78:d8:2a:21:c2:
91:f0:f9:88:d8:30:94:dc:b8:30:05:be:08:f3:2c:
87:7a:8a:e7:a2:73:62:37:f8:be:8a:54:43:fe:19:
06:bf:cf:2a:6a:db:bb:ca:63:de:34:b9:f8:a2:c5:
59:80:b2:78:74:b8:d6:59:5c:a8:53:84:de:19:93:
9c:5a:d1:88:25:57:95:0d:76:db:69:7a:72:23:9c:
61:ed:2c:41:d5:86:76:23:6d:25:12:5d:44:ba:94:
a0:fc:fa:0f:6b:87:23:d2:0a:a5:0c:7b:0f:2e:b6:
1a:1c:a1:c2:e3:8a:54:88:c5:fc:05:b3:04:54:c4:
e7:96:c2:43:01:10:ff:5f:ef:84:59:f6:63:9a:67:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:51:89:C9:F8:3D:63:68:9B:8E:0C:1A:BA:18:6C:65:97:E3:B1:AF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/I1GJyfg9Y2ibjgwauhhsZZfjsa8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5c:d5:1f:b9:15:8d:57:cc:44:66:63:5e:9f:0f:ca:0b:79:13:
e4:05:d6:fd:4c:07:df:10:2f:b4:d9:f6:08:fd:d1:d0:d4:70:
28:71:3e:c8:46:b9:0b:6f:9f:c2:75:7a:b0:c8:a3:d9:da:db:
60:84:03:45:d0:c7:fb:fe:95:77:50:5a:ad:c0:44:fc:7e:fe:
ef:a6:f7:32:33:e2:52:0f:46:64:dd:b0:a6:fd:76:99:f7:4a:
82:84:94:65:af:83:3b:5c:e0:fd:ad:ce:ce:06:da:ba:f1:39:
44:71:68:f6:ad:d3:63:30:b8:3f:24:37:7e:80:5a:2a:48:52:
37:7a:af:d8:dd:54:f0:3a:7f:56:85:83:3c:d5:37:c1:66:51:
4b:63:8a:6f:55:c0:20:7d:47:00:f5:46:6d:d4:35:a7:ec:73:
51:b6:e6:1a:f6:76:e5:bd:a4:29:15:e8:75:0f:92:99:19:35:
fd:b8:d0:7c:dd:ba:65:64:9a:57:a2:2a:00:96:ec:c9:d8:03:
c2:c5:eb:c4:17:57:b6:0a:ab:38:0e:79:00:f7:53:e3:94:3a:
29:dc:ba:5e:7f:36:47:86:8d:17:35:6e:fa:58:44:c2:3e:17:
09:64:2a:d8:b9:71:ce:99:5e:4f:c5:3b:f1:00:fe:6c:be:62:
98:74:f9:cf
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICC1YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDIx
ODU1MzdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDIzNTE4OUM5RjgzRDYz
Njg5QjhFMEMxQUJBMTg2QzY1OTdFM0IxQUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+AazfqW/s9hnieo697HX3IWP11/9BmGGcbbE55fuqgcrHXK5e
akxW3FWyTLLQe0QAHQVFfjpYV+jW8ClWSIw54G7Mi89hHQIoPkd/jFpNnT1N8VwL
iTTfOiwVGKjRm/g6P/6kgyNfRaBcQOsbW7BnJ/t42CohwpHw+YjYMJTcuDAFvgjz
LId6iueic2I3+L6KVEP+GQa/zypq27vKY940ufiixVmAsnh0uNZZXKhThN4Zk5xa
0YglV5UNdttpenIjnGHtLEHVhnYjbSUSXUS6lKD8+g9rhyPSCqUMew8uthococLj
ilSIxfwFswRUxOeWwkMBEP9f74RZ9mOaZ9brAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUI1GJyfg9Y2ibjgwauhhsZZfjsa8wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL0kxR0p5Zmc5WTJpYmpn
d2F1aGhzWlpmanNhOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFzVH7kVjVfMRGZjXp8Pygt5
E+QF1v1MB98QL7TZ9gj90dDUcChxPshGuQtvn8J1erDIo9na22CEA0XQx/v+lXdQ
Wq3ARPx+/u+m9zIz4lIPRmTdsKb9dpn3SoKElGWvgztc4P2tzs4G2rrxOURxaPat
02MwuD8kN36AWipIUjd6r9jdVPA6f1aFgzzVN8FmUUtjim9VwCB9RwD1Rm3UNafs
c1G25hr2duW9pCkV6HUPkpkZNf240HzdumVkmleiKgCW7MnYA8LF68QXV7YKqzgO
eQD3U+OUOincul5/NkeGjRc1bvpYRMI+FwlkKti5cc6ZXk/FO/EA/my+Yph0+c8=
Generated at Sun Feb 2 22:33:30 2025 by rpki-client on console.sobornost.net