Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/6m0zwtGlfUCiKj7HzzrUuvhemyg.roa
File: 6m0zwtGlfUCiKj7HzzrUuvhemyg.roa (raw, json)
Hash identifier: V8WhY5F/rwr2IuW/ebc6Xtv0f7GTiWYWiPlH1NnDPVk=
Subject key identifier: EA:6D:33:C2:D1:A5:7D:40:A2:2A:3E:C7:CF:3A:D4:BA:F8:5E:9B:28
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C3E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6m0zwtGlfUCiKj7HzzrUuvhemyg.roa
Signing time: Wed 05 Feb 2025 04:55:43 +0000
ROA not before: Wed 05 Feb 2025 04:55:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3134 (0xc3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 5 04:55:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EA6D33C2D1A57D40A22A3EC7CF3AD4BAF85E9B28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f1:57:09:95:fd:33:ea:02:bf:ad:4e:f4:97:
fa:b8:5d:51:53:48:e1:76:27:3e:94:63:8e:cc:03:
dc:c9:7d:a1:51:a7:29:bc:7a:f2:da:b3:ce:fb:5e:
e2:83:a1:00:ed:de:d9:69:f6:cb:bf:12:8c:0c:e7:
81:dc:8a:1d:49:4d:48:46:e1:13:d0:85:81:e7:d5:
d5:22:4d:2d:df:5b:25:ee:61:65:5b:63:12:b5:17:
22:56:cc:e3:d0:b7:83:1b:1b:6f:0c:eb:51:2e:02:
b3:49:59:bf:28:b2:8a:3f:6c:dc:54:de:41:c4:e1:
42:5c:64:28:52:5b:bc:de:15:d5:ce:46:2b:16:52:
60:f1:dd:10:07:db:49:b2:53:e2:f5:8a:24:fc:e3:
64:de:8d:79:a1:64:36:c4:f3:5b:84:2e:ab:40:c6:
d3:cd:85:75:6e:a5:6c:c5:43:b2:61:1c:7a:f8:c1:
b7:c9:3b:f3:4b:eb:70:4b:e9:11:71:f3:20:40:d3:
85:38:75:25:78:fa:25:40:df:42:be:d7:54:26:41:
a0:8e:4d:3a:41:90:65:26:03:c0:ab:8d:1a:b7:7f:
66:4b:04:5f:65:ac:4c:d9:93:e1:82:35:b8:5b:1d:
24:0b:48:f2:6f:ab:06:17:46:7e:0e:74:77:10:f3:
61:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6D:33:C2:D1:A5:7D:40:A2:2A:3E:C7:CF:3A:D4:BA:F8:5E:9B:28
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6m0zwtGlfUCiKj7HzzrUuvhemyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
67:9c:9b:38:f8:73:20:54:2a:60:0b:0b:be:aa:0f:2b:db:19:
8b:dc:f9:4c:4f:1b:31:cf:59:de:8d:28:0a:2d:8a:be:ce:7e:
a3:75:0e:f9:23:f0:b2:d9:b3:ae:22:bf:04:40:49:32:7d:31:
c7:38:4e:1d:29:20:79:d1:df:d1:48:fc:b8:87:90:c2:e3:e2:
04:54:07:51:63:ab:fc:0e:a0:f6:7c:08:eb:c5:22:3d:ad:16:
07:22:21:6a:e8:05:f5:fd:ff:a9:2f:3b:90:24:59:99:64:d6:
b1:86:8b:59:68:e5:82:13:50:92:38:9b:25:db:c6:83:1b:be:
41:61:8e:cf:8c:84:19:b2:fc:0c:4c:30:b3:6a:09:e1:a9:60:
58:9e:00:05:bf:22:33:75:ec:bf:27:16:8b:25:b6:7e:96:b7:
0f:8e:b2:55:98:99:01:0d:ed:29:28:d5:e0:d6:8f:58:56:9f:
ef:d1:e1:ac:c3:f6:39:fd:28:1a:ad:f8:5b:d8:11:8f:24:9c:
5c:1a:f1:49:f1:59:8d:4b:f8:4b:db:34:0a:f1:b6:17:68:4a:
94:c8:ef:28:8d:fd:3c:8b:8f:24:e7:3f:37:81:5a:aa:60:18:
6b:17:f2:05:97:43:f4:ca:91:8c:10:b0:4c:1d:4c:f3:db:00:
92:2f:f2:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 5 20:21:11 2025 by rpki-client