Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/6G-6UOjxvopBYDwDX3fRuujBwJ8.roa
File: 6G-6UOjxvopBYDwDX3fRuujBwJ8.roa (raw, json)
Hash identifier: GlsJI0cLlBLb/qRklGAk5ATOqr+BH0HIsYP8czlLZs4=
Subject key identifier: E8:6F:BA:50:E8:F1:BE:8A:41:60:3C:03:5F:77:D1:BA:E8:C1:C0:9F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C76
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6G-6UOjxvopBYDwDX3fRuujBwJ8.roa
Signing time: Wed 05 Feb 2025 18:55:45 +0000
ROA not before: Wed 05 Feb 2025 18:55:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3190 (0xc76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 18:55:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E86FBA50E8F1BE8A41603C035F77D1BAE8C1C09F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:30:21:e7:89:79:66:f4:d2:59:0d:4e:a5:
5d:52:d4:68:ab:e1:0c:11:f9:46:b7:74:20:01:44:
73:98:0d:2b:16:20:fd:a7:3f:4e:0b:a5:92:05:bb:
9a:b3:18:24:a9:db:d7:af:1b:b6:73:ba:f3:61:50:
85:2b:ee:5a:5d:0f:13:59:40:4e:fd:89:c9:72:83:
ac:c9:68:84:e7:1d:f8:04:7b:39:93:ef:8a:96:91:
b8:f3:3f:54:15:6e:4d:e6:44:ca:35:df:2a:8c:23:
95:a5:8e:39:be:89:8b:ba:56:36:3f:b7:c9:46:d3:
9e:e3:26:44:77:f4:47:e8:29:1a:01:92:69:15:ea:
91:60:f1:07:83:e7:08:cd:0e:3f:de:5d:f4:42:e0:
ce:3e:fe:be:5a:6e:74:31:f1:36:16:67:86:58:d1:
a9:ea:f3:1b:56:b3:07:78:61:9d:50:a1:2c:56:47:
00:ed:5b:d2:09:19:f0:22:4f:3a:eb:be:fc:b6:52:
0e:d6:ce:3b:74:0a:6b:99:17:c2:b9:26:0b:cc:d5:
08:4d:f0:96:75:f5:25:fc:ca:45:e6:a8:2c:57:a3:
96:7c:e1:a4:86:aa:61:dd:bb:2d:26:6f:2f:7b:d1:
c8:b0:c8:f2:3b:f6:94:db:ed:39:9f:c6:02:18:ca:
e0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6F:BA:50:E8:F1:BE:8A:41:60:3C:03:5F:77:D1:BA:E8:C1:C0:9F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6G-6UOjxvopBYDwDX3fRuujBwJ8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
7c:4f:4a:cc:a4:b0:11:69:aa:e2:0d:e0:27:10:0d:f0:b5:ba:
4d:ad:ae:83:6f:f1:b0:08:f9:51:23:21:38:6a:3d:01:8e:c1:
6f:5b:f9:29:1a:fe:d7:d5:ba:0f:fc:08:5d:4e:35:67:2a:bd:
1d:89:db:00:8c:bf:66:86:c4:62:ec:42:36:f2:b3:cb:d3:77:
fb:c1:22:d0:f7:0e:84:22:a6:ae:4c:44:20:ab:7d:14:35:85:
03:d5:60:f0:57:98:75:9e:78:83:34:f3:f6:55:0c:c5:4a:08:
3c:63:bf:41:95:69:8c:12:1a:da:0e:83:25:c7:b6:65:27:c0:
3c:4c:ef:c5:d9:da:58:2d:4c:89:75:2a:7d:6f:df:c4:5e:5b:
7f:eb:a5:68:6b:45:cc:9a:f9:c7:f3:c4:0c:5a:7b:f7:51:08:
8f:fd:aa:79:ef:3b:2e:cf:5c:92:e4:bd:30:92:0f:c6:90:dc:
6e:36:87:8e:52:e6:62:b7:21:b9:f4:59:99:2e:71:90:5a:6f:
62:7b:be:da:30:f2:de:ee:22:f3:7a:3d:ca:49:f8:51:d9:22:
1a:51:2a:ce:ee:2b:5c:60:1c:fd:a9:7d:5f:b9:c4:7e:aa:d5:
a1:dd:3a:1f:71:c7:46:10:44:53:08:1e:c7:36:ca:1a:c3:40:
44:87:44:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:44:34 2025 by rpki-client