Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/xj-sm4mXxgThxPRHVInRoWgAGn4.roa
File: xj-sm4mXxgThxPRHVInRoWgAGn4.roa (raw, json)
Hash identifier: SIeeFFsHKtMV5fGPGHvbdd/65hfmFyNGLuNPqVcMsJU=
Subject key identifier: C6:3F:AC:9B:89:97:C6:04:E1:C4:F4:47:54:89:D1:A1:68:00:1A:7E
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 065A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xj-sm4mXxgThxPRHVInRoWgAGn4.roa
Signing time: Mon 20 Jan 2025 11:54:53 +0000
ROA not before: Mon 20 Jan 2025 11:54:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1626 (0x65a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 20 11:54:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C63FAC9B8997C604E1C4F4475489D1A168001A7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:72:5b:7c:ea:d7:87:bd:4b:7d:01:d8:cb:f2:
a2:3d:1d:ad:4d:6e:fa:ac:17:9a:df:5c:3c:52:11:
d5:fd:a8:2c:ec:15:ec:bf:06:29:90:9d:98:55:f5:
05:5b:a2:39:cd:c2:55:8c:c9:38:bb:19:15:02:62:
db:77:19:20:f1:50:58:56:3b:ae:c8:5e:4a:85:45:
d9:d4:63:ff:89:54:7b:36:e8:39:0d:20:c6:b9:9e:
2f:c3:ff:0c:ee:2c:d2:ac:7e:30:a5:4c:ff:0b:1f:
84:88:86:1e:20:6c:ea:cf:98:c6:e3:fe:fa:2e:eb:
ec:bb:40:21:ef:eb:16:b2:12:8b:27:44:34:c8:fd:
1a:a1:02:cb:94:48:bd:79:25:e7:0c:ac:cc:dc:e1:
65:c5:ca:38:5e:58:76:7a:af:1b:60:07:a2:3a:48:
4b:28:96:22:63:3b:f0:48:79:58:da:dc:ee:7f:5e:
18:1d:6f:72:0a:ef:07:bd:08:9a:4b:9e:0b:cf:07:
e2:9d:71:61:94:b7:79:1d:cf:78:65:b2:99:2d:a2:
e2:cf:3c:5a:e1:ee:2d:66:f5:0d:47:aa:36:ed:55:
b7:65:fe:b4:8a:80:21:12:36:07:6c:81:0b:82:45:
8d:96:e9:ad:ac:69:df:72:fa:75:f4:d8:15:b4:d7:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:AC:9B:89:97:C6:04:E1:C4:F4:47:54:89:D1:A1:68:00:1A:7E
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/xj-sm4mXxgThxPRHVInRoWgAGn4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:9f:0d:5d:bb:ff:aa:cc:21:b4:8e:c7:84:78:d3:d9:39:3f:
68:d9:5c:9c:95:4b:db:18:19:51:37:2f:43:d3:94:96:87:c9:
57:97:92:78:78:84:0a:18:f4:a5:0d:67:92:50:f9:cc:ac:fe:
ed:1f:58:ff:eb:07:83:af:c9:2c:cb:fe:5d:34:ba:0a:da:59:
d8:36:a3:4d:47:2e:71:fe:c5:cf:44:e3:d2:a3:90:ab:82:30:
c8:65:0f:7f:00:62:07:95:b2:25:1d:ab:a7:8a:57:1c:0f:3a:
a2:4e:9b:02:df:4d:c6:5f:7b:10:f3:b4:2f:b8:d4:95:ba:af:
c0:cc:8a:42:83:5d:c2:e4:c3:09:c1:78:be:2c:02:a9:ac:be:
c1:e6:ba:48:8b:6e:5d:79:c8:ae:ff:66:47:82:f2:db:18:79:
cf:7c:20:1d:61:88:ec:81:80:39:28:a7:bb:58:95:51:be:3b:
1b:43:2d:04:6b:ca:22:22:e4:9d:96:fa:b3:60:c9:13:7a:e4:
0a:2b:0d:53:aa:2d:c8:38:fb:1d:4c:49:09:14:8c:5c:b7:8f:
c6:67:12:5b:52:3e:8e:92:0e:52:6e:3e:2c:ed:0c:27:9c:23:
ea:ce:06:13:4c:a5:50:a0:83:8d:f6:02:67:b7:33:7e:e6:d2:
e9:c3:91:81
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjAx
MTU0NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEM2M0ZBQzlCODk5N0M2
MDRFMUM0RjQ0NzU0ODlEMUExNjgwMDFBN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMclt86teHvUt9AdjL8qI9Ha1NbvqsF5rfXDxSEdX9qCzsFey/
BimQnZhV9QVbojnNwlWMyTi7GRUCYtt3GSDxUFhWO67IXkqFRdnUY/+JVHs26DkN
IMa5ni/D/wzuLNKsfjClTP8LH4SIhh4gbOrPmMbj/vou6+y7QCHv6xayEosnRDTI
/RqhAsuUSL15JecMrMzc4WXFyjheWHZ6rxtgB6I6SEsoliJjO/BIeVja3O5/Xhgd
b3IK7we9CJpLngvPB+KdcWGUt3kdz3hlspktouLPPFrh7i1m9Q1HqjbtVbdl/rSK
gCESNgdsgQuCRY2W6a2sad9y+nX02BW0186ZAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUxj+sm4mXxgThxPRHVInRoWgAGn4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3hqLXNtNG1YeGdUaHhQ
UkhWSW5Sb1dnQUduNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBALWfDV27/6rMIbSOx4R409k5
P2jZXJyVS9sYGVE3L0PTlJaHyVeXknh4hAoY9KUNZ5JQ+cys/u0fWP/rB4OvySzL
/l00ugraWdg2o01HLnH+xc9E49KjkKuCMMhlD38AYgeVsiUdq6eKVxwPOqJOmwLf
TcZfexDztC+41JW6r8DMikKDXcLkwwnBeL4sAqmsvsHmukiLbl15yK7/ZkeC8tsY
ec98IB1hiOyBgDkop7tYlVG+OxtDLQRryiIi5J2W+rNgyRN65AorDVOqLcg4+x1M
SQkUjFy3j8ZnEltSPo6SDlJuPiztDCecI+rOBhNMpVCgg432Ame3M37m0unDkYE=
-----END CERTIFICATE-----
Generated at Mon Jan 20 19:38:47 2025 by rpki-client on console.sobornost.net