Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/6qHOS9LAPfkM6LrqcioQPzDmPyk.roa
File: 6qHOS9LAPfkM6LrqcioQPzDmPyk.roa (raw, json)
Hash identifier: ONEPuS0/0bEqvVuipQg4HJudNlpfkM5GgGb0on+NON8=
Subject key identifier: EA:A1:CE:4B:D2:C0:3D:F9:0C:E8:BA:EA:72:2A:10:3F:30:E6:3F:29
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 09CC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6qHOS9LAPfkM6LrqcioQPzDmPyk.roa
Signing time: Wed 29 Jan 2025 16:25:26 +0000
ROA not before: Wed 29 Jan 2025 16:25:26 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2508 (0x9cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 29 16:25:26 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EAA1CE4BD2C03DF90CE8BAEA722A103F30E63F29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:05:8c:f7:9f:67:72:c0:69:9f:ec:7f:f8:84:
34:62:90:51:28:74:fe:49:8e:3f:74:8f:cb:de:da:
18:8a:2d:ce:8a:43:2d:bc:e7:47:ad:35:e7:d2:a7:
70:be:12:55:e4:e3:e7:cc:8c:79:48:bc:0d:a0:a6:
80:f8:ce:db:04:33:f1:55:e5:8f:c6:36:89:ad:af:
d3:d2:60:5f:2f:d3:f3:ca:74:93:bf:34:5c:ce:4d:
ea:32:95:ce:83:f2:ce:32:7c:97:d1:ad:d3:d7:7a:
4c:a1:43:db:6c:ef:94:26:55:5f:10:a0:98:c9:db:
f6:b2:03:0a:6a:89:01:01:d6:4b:05:e6:d3:6d:a9:
4a:37:07:77:eb:6a:f9:5b:ea:b4:0c:6d:99:94:e7:
c5:e7:7d:83:f7:c0:fc:9d:4c:47:b5:70:3b:df:5f:
a4:f3:53:8d:5d:ef:c4:ea:10:a4:24:18:50:97:28:
39:3d:d5:ec:76:94:79:47:31:f9:b3:c7:ac:a6:53:
67:93:ba:4a:3c:bb:7d:bf:9d:4e:3b:a8:03:b3:17:
bc:a2:e1:5e:da:8d:09:cd:b5:8a:52:26:14:f2:9f:
08:1c:4d:0c:db:71:8b:32:f3:7b:b7:e2:e3:d5:ac:
89:d2:21:44:2d:f1:45:eb:60:f7:8f:f3:5b:f1:5a:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A1:CE:4B:D2:C0:3D:F9:0C:E8:BA:EA:72:2A:10:3F:30:E6:3F:29
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6qHOS9LAPfkM6LrqcioQPzDmPyk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:0f:49:41:8c:17:de:64:1d:2f:a1:67:9e:cc:93:7e:d4:8d:
08:8f:e8:43:35:70:67:54:c1:fb:4e:46:df:ce:b9:31:39:5c:
b8:fd:1c:9c:1d:24:96:b0:be:dd:f4:b6:b8:c3:27:a6:85:5c:
50:76:1b:0c:6b:c7:df:ac:bb:e8:91:6c:06:41:0b:2e:eb:e0:
d7:cb:2f:4c:dc:a3:03:ce:33:10:ae:ec:2e:f1:7c:6e:3e:96:
da:5d:1d:ab:8b:17:6f:fc:0d:1d:f1:b4:54:ea:f2:80:50:e7:
04:8d:8f:f8:9f:b6:58:6f:e7:f8:f5:92:c8:b8:36:ef:ec:a6:
d2:5a:a4:c0:15:47:de:35:ff:09:66:65:f7:6a:91:f3:68:7d:
32:c3:6b:f1:21:29:7c:48:99:a0:26:f8:93:0d:cf:60:1f:b7:
e8:27:91:d2:ec:a0:56:69:12:ad:70:d7:b4:65:93:8c:5d:8e:
28:37:51:30:91:1a:11:cf:94:22:40:31:f9:6b:df:8f:47:0e:
4b:69:7c:c0:c9:19:c6:b7:66:97:c7:e9:91:56:5d:a2:da:bb:
a1:a4:4f:23:28:40:95:66:dc:e1:17:f7:1a:70:18:2d:28:83:
f9:ce:39:86:86:6f:2a:8f:84:29:c4:48:ce:fb:c9:c2:99:cc:
de:c8:e8:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:39:45 2025 by rpki-client