Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/d-qioBXL9oivNzHWuoWvuTkybCk.roa
File: d-qioBXL9oivNzHWuoWvuTkybCk.roa (raw, json)
Hash identifier: Fh0O4ETKf14AiWWlzBujWt8baLoEXIPHYnv0/m+yd58=
Subject key identifier: 77:EA:A2:A0:15:CB:F6:88:AF:37:31:D6:BA:85:AF:B9:39:32:6C:29
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 08AC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d-qioBXL9oivNzHWuoWvuTkybCk.roa
Signing time: Sun 26 Jan 2025 16:25:16 +0000
ROA not before: Sun 26 Jan 2025 16:25:16 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2220 (0x8ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 16:25:16 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=77EAA2A015CBF688AF3731D6BA85AFB939326C29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:82:18:64:98:68:a2:85:b9:b5:63:71:95:59:
c9:bc:1a:db:9b:99:2b:3e:16:2a:24:78:94:7a:c6:
fd:86:1d:e9:a2:0c:b9:e2:c2:6d:2e:f8:41:b5:b3:
c2:64:8f:fb:41:38:7c:95:c7:f3:e9:0f:ef:42:9f:
5a:f2:39:65:89:30:21:94:b3:73:b7:f6:c8:8e:c3:
20:98:aa:f6:12:8e:59:6c:31:aa:da:d7:47:c3:84:
6a:18:38:b9:2e:63:2c:fa:37:de:a3:b6:d2:ec:15:
65:c1:4b:db:fc:e1:24:c9:56:38:8c:c6:68:f9:51:
6c:1d:31:bd:56:96:1f:9b:8b:19:e9:9d:e2:3c:30:
d9:9a:17:9e:13:67:a6:43:b8:b8:22:38:c9:f8:cd:
33:96:27:67:d6:b7:90:3f:21:cf:d1:3a:62:dd:39:
da:63:45:d7:63:e1:44:4c:90:91:43:24:c4:6c:c6:
a5:2c:7b:5f:34:db:8c:b5:71:7e:72:6a:a7:a9:55:
05:08:5c:40:df:b8:3e:b2:77:2d:f9:fa:cf:5f:af:
fd:f2:cf:84:f2:aa:06:63:65:37:46:06:84:0e:2d:
7d:80:d2:65:bd:1b:bf:4f:16:6d:86:35:b5:a4:7e:
29:84:33:58:80:3c:c2:7e:10:2f:09:21:09:cb:09:
4b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EA:A2:A0:15:CB:F6:88:AF:37:31:D6:BA:85:AF:B9:39:32:6C:29
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d-qioBXL9oivNzHWuoWvuTkybCk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
2e:45:c8:a6:06:9a:12:95:ed:69:62:15:fb:d3:49:b0:ab:56:
6b:0d:b0:95:9b:ad:4e:b6:57:6d:fc:3f:34:a3:28:bd:4b:b6:
24:80:9e:c5:9f:be:1b:c3:75:50:02:f2:ce:32:22:f9:99:1e:
84:0e:5c:5b:ea:c7:e0:d4:45:41:7a:ee:02:77:c3:b3:9c:b3:
8b:7b:80:a2:e1:11:d3:5e:eb:ef:36:ad:98:14:b0:09:bb:96:
a3:5c:5e:4f:c8:14:81:b0:81:aa:9f:5b:f7:00:d6:02:74:3b:
0a:04:5f:fd:8d:0b:fe:18:09:5c:88:34:ff:52:a6:f5:f2:83:
eb:7a:20:9e:c3:51:00:6f:53:d6:cb:3d:49:a6:c4:2b:7b:54:
06:f4:9b:1a:41:2d:c3:67:ba:e6:65:b6:4f:5c:a1:ae:b0:4e:
08:e7:18:14:3e:5f:1e:4a:ad:12:8c:4b:37:ec:b1:c1:6e:f3:
a2:90:8d:cf:8a:7f:c5:a6:c6:30:16:9e:1f:f1:38:c9:d7:25:
c6:db:ce:3d:e2:a5:5b:07:4c:6d:74:76:a3:86:43:ab:8d:fd:
33:d7:40:5d:2e:4c:24:81:ab:4e:a2:7c:14:97:6e:fb:6d:64:
36:a4:fd:a0:2a:97:2a:a6:57:c2:42:33:26:c4:88:97:24:1f:
77:8a:d1:1b
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjYx
NjI1MTZaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDc3RUFBMkEwMTVDQkY2
ODhBRjM3MzFENkJBODVBRkI5MzkzMjZDMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnghhkmGiihbm1Y3GVWcm8GtubmSs+FiokeJR6xv2GHemiDLni
wm0u+EG1s8Jkj/tBOHyVx/PpD+9Cn1ryOWWJMCGUs3O39siOwyCYqvYSjllsMara
10fDhGoYOLkuYyz6N96jttLsFWXBS9v84STJVjiMxmj5UWwdMb1Wlh+bixnpneI8
MNmaF54TZ6ZDuLgiOMn4zTOWJ2fWt5A/Ic/ROmLdOdpjRddj4URMkJFDJMRsxqUs
e18024y1cX5yaqepVQUIXEDfuD6ydy35+s9fr/3yz4TyqgZjZTdGBoQOLX2A0mW9
G79PFm2GNbWkfimEM1iAPMJ+EC8JIQnLCUtvAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUd+qioBXL9oivNzHWuoWvuTkybCkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL2QtcWlvQlhMOW9pdk56
SFd1b1d2dVRreWJDay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAC5FyKYGmhKV7WliFfvTSbCr
VmsNsJWbrU62V238PzSjKL1LtiSAnsWfvhvDdVAC8s4yIvmZHoQOXFvqx+DURUF6
7gJ3w7Ocs4t7gKLhEdNe6+82rZgUsAm7lqNcXk/IFIGwgaqfW/cA1gJ0OwoEX/2N
C/4YCVyINP9SpvXyg+t6IJ7DUQBvU9bLPUmmxCt7VAb0mxpBLcNnuuZltk9coa6w
TgjnGBQ+Xx5KrRKMSzfsscFu86KQjc+Kf8WmxjAWnh/xOMnXJcbbzj3ipVsHTG10
dqOGQ6uN/TPXQF0uTCSBq06ifBSXbvttZDak/aAqlyqmV8JCMybEiJckH3eK0Rs=
Generated at Sun Jan 26 20:44:32 2025 by rpki-client on console.sobornost.net