
Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
File: 8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa (raw, json)
Hash identifier: wnOvxAOmGWJ9cBbtn+fzW7+zA5QBoBlJ34iHlv4J8tM=
Subject key identifier: F2:4E:81:8C:5F:90:C6:AA:60:A0:4D:FE:B5:37:DC:F0:03:1B:2E:1F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 087C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
Signing time: Sun 26 Jan 2025 04:25:14 +0000
ROA not before: Sun 26 Jan 2025 04:25:14 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2172 (0x87c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 04:25:14 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F24E818C5F90C6AA60A04DFEB537DCF0031B2E1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:49:56:f7:87:b6:a2:af:8e:a6:a7:f4:23:56:
49:83:b4:85:06:cb:81:32:94:33:fb:52:98:61:e7:
0e:ad:b7:23:dc:6f:98:33:93:78:8b:ea:1a:c4:00:
13:72:f7:f6:cc:9a:68:f4:ec:fa:f8:4a:a8:6f:bb:
c1:7f:a2:41:7b:08:cd:33:16:08:13:55:db:17:b4:
80:1d:01:3b:4c:36:be:c1:7f:4a:86:b6:ff:e5:e7:
33:35:63:74:98:96:95:dc:42:51:a6:74:39:73:c0:
b9:e6:ac:b8:1d:28:4c:83:bb:c7:f3:47:b8:79:73:
df:f5:65:05:1d:d7:83:74:67:76:73:c5:cf:ca:c5:
0f:7b:42:53:71:40:46:6a:10:cd:7b:ff:0b:d0:3c:
38:a3:60:b9:59:23:89:37:89:33:c1:e8:a5:e4:77:
98:fb:f8:5a:6b:af:c5:bf:95:9a:5e:d2:96:44:43:
ba:29:48:a2:5f:ea:51:df:6b:a6:51:db:cd:32:89:
3c:e8:6d:e7:a5:c3:09:d8:01:c8:0b:96:6d:28:c8:
8d:bd:1c:80:27:6b:21:f0:14:54:2d:8c:2f:90:2d:
15:9b:bf:8d:a9:84:a2:6b:78:07:68:3a:18:e1:6b:
8b:74:8b:8d:ea:ec:b0:b9:ee:ad:81:33:8b:6b:aa:
fd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:4E:81:8C:5F:90:C6:AA:60:A0:4D:FE:B5:37:DC:F0:03:1B:2E:1F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8k6BjF-QxqpgoE3-tTfc8AMbLh8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
69:59:cc:89:32:1d:ff:b6:fe:49:bc:c0:09:cd:ea:0d:d7:6f:
2b:03:3b:2a:6c:f1:b4:9f:2f:ee:ea:15:75:f3:22:8c:b2:4a:
d1:10:24:79:7f:a8:9d:05:a5:f8:9b:fe:6c:b7:98:55:9b:bd:
f6:9b:bc:c2:3d:0d:a2:ef:e8:3c:cd:bc:20:f1:69:7d:f4:75:
49:0a:98:f1:8a:9e:c0:da:0d:9a:53:75:9c:6f:97:1f:c1:62:
68:a8:fd:98:3c:e7:4e:8c:20:21:0e:3a:ce:24:86:3e:50:16:
84:ee:bb:52:65:e9:5a:68:95:62:3a:74:b6:49:ff:b7:77:58:
74:9f:d1:74:42:b5:55:35:86:32:d7:15:b9:f3:75:0b:d9:e6:
9d:2d:9e:85:ff:c1:cc:f0:ce:67:f1:07:c0:ee:9f:b3:81:cf:
62:94:5c:4d:68:03:5e:c6:e4:72:44:bf:29:d0:13:08:ce:fa:
f1:fb:80:bb:8b:02:92:bb:f6:11:79:db:cc:0c:d8:d3:36:43:
29:be:b0:72:1f:f4:2b:dd:cd:fc:96:96:08:21:b6:a7:4c:b3:
ce:92:3f:05:db:6c:7f:7c:58:db:d3:ad:73:ea:7c:39:19:73:
94:dc:52:9a:98:bc:44:df:a9:e4:cf:a7:87:67:43:84:73:26:
9e:43:04:a1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 18 01:59:32 2025 by rpki-client