Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/6rX6xDqrus_37wkYcyYYly_KK7I.roa
File: 6rX6xDqrus_37wkYcyYYly_KK7I.roa (raw, json)
Hash identifier: QFx4WZXnTY0903WSbaazbzDCy9oNMq06ipKETfB919s=
Subject key identifier: EA:B5:FA:C4:3A:AB:BA:CF:F7:EF:09:18:73:26:18:97:2F:CA:2B:B2
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0C8C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6rX6xDqrus_37wkYcyYYly_KK7I.roa
Signing time: Thu 06 Feb 2025 00:25:44 +0000
ROA not before: Thu 06 Feb 2025 00:25:44 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3212 (0xc8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 00:25:44 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=EAB5FAC43AABBACFF7EF0918732618972FCA2BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e7:cc:f3:1f:79:e1:7c:78:53:8b:ef:db:78:
ed:1d:46:93:4b:40:e3:4d:06:ea:ea:d1:ae:88:d8:
17:96:57:2b:8d:4f:d8:40:33:fb:6e:5d:55:5a:f3:
0d:7e:0a:b3:dc:d5:b5:76:b2:ab:8a:a2:86:63:60:
4a:6a:32:fc:5a:4d:34:45:8e:54:c2:84:69:bd:1d:
1a:20:b2:da:0a:27:ba:e9:87:46:67:29:ca:75:99:
55:37:d7:d1:3f:a2:45:94:96:c9:17:36:51:aa:7e:
d3:1e:3b:a5:75:99:f5:85:c7:74:8f:ec:79:de:55:
00:f9:e5:ed:6a:81:c1:9b:a5:a7:fa:77:93:83:13:
ed:08:24:e9:5f:47:1c:20:cb:a5:b0:f7:2c:7b:07:
44:5c:92:d9:fa:78:90:d1:95:17:ab:b8:59:1a:c7:
20:a0:46:15:0d:44:76:fa:27:a9:b5:62:d5:5c:ea:
66:03:5a:bb:f4:3d:83:c0:ed:86:b1:bf:d2:11:31:
f7:82:95:f1:04:12:18:3e:92:12:13:e2:e4:a5:bc:
e7:b6:57:67:ca:df:1e:7d:04:4d:bb:1e:23:2f:20:
9b:c8:e2:db:ad:d1:10:7b:9f:0d:be:52:c0:da:3c:
8c:52:94:d4:7f:7b:d1:c3:fd:38:76:22:4a:66:92:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B5:FA:C4:3A:AB:BA:CF:F7:EF:09:18:73:26:18:97:2F:CA:2B:B2
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6rX6xDqrus_37wkYcyYYly_KK7I.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
78:27:06:3f:15:f6:fc:2e:5a:2f:96:7b:9a:aa:20:4c:47:31:
4e:04:37:20:8c:c4:be:f9:99:cf:6a:46:63:db:55:46:40:58:
28:38:73:db:ff:90:a6:85:fc:5a:2f:e3:18:91:3d:e3:69:6c:
d0:98:90:16:64:6c:2a:ba:30:76:9a:a9:b3:47:12:45:21:8e:
c1:c4:63:7c:e5:65:38:64:c8:bb:e4:99:02:65:1d:7c:a9:72:
63:d4:1b:5b:b7:bf:b6:ce:2a:d2:03:7f:f2:e2:45:66:3b:af:
a3:fb:20:1c:2a:4f:f6:2d:fc:c9:da:fd:fc:6b:24:b7:11:33:
54:3d:26:b0:ea:72:f5:2b:e0:d2:0e:1b:a2:41:d7:c3:7b:69:
a8:44:fb:ee:b2:d9:f9:25:d6:ff:f6:14:aa:92:60:9c:6f:40:
55:2d:a1:87:f3:de:66:ba:b4:9b:ed:99:b5:59:bd:a1:93:fd:
15:e4:0b:ac:a0:f2:c1:c2:3c:55:23:fc:dd:ea:9f:95:93:28:
a7:55:10:49:cf:36:aa:8d:41:b9:3e:61:72:65:8e:cf:62:48:
dc:7d:cb:b4:71:a2:de:20:a1:6b:c3:54:08:de:f8:28:9e:8e:
f0:9c:95:b9:66:9d:31:b3:06:42:af:ce:8a:3b:9f:da:86:2c:
9d:38:17:3b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:45:42 2025 by rpki-client