Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/S6eqFNa_ovjagHumwxJZuYvR8Tc.roa
File: S6eqFNa_ovjagHumwxJZuYvR8Tc.roa (raw, json)
Hash identifier: D5secW/VV6fGzJGZpNEW/4iiBFCk2DDyqz6u5CenaYA=
Subject key identifier: 4B:A7:AA:14:D6:BF:A2:F8:DA:80:7B:A6:C3:12:59:B9:8B:D1:F1:37
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AF6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/S6eqFNa_ovjagHumwxJZuYvR8Tc.roa
Signing time: Sat 01 Feb 2025 18:55:34 +0000
ROA not before: Sat 01 Feb 2025 18:55:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2806 (0xaf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 18:55:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4BA7AA14D6BFA2F8DA807BA6C31259B98BD1F137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:ec:29:21:75:a8:2b:91:33:f4:47:9f:e8:
ea:24:96:49:24:79:d7:b7:74:1d:1c:ec:06:4e:83:
fc:f1:00:e9:fc:1e:24:5a:da:39:9e:bf:3f:b9:54:
02:9e:0b:75:4f:3a:03:6c:7a:da:d6:07:b3:71:04:
d2:e0:c7:e2:6a:f1:87:54:8b:7c:78:ec:a5:7d:17:
f9:2b:c3:cf:13:41:19:f3:83:49:53:75:89:fc:df:
25:02:ef:e9:9c:31:d2:41:fe:a4:27:5e:17:98:9f:
26:8b:09:65:0f:bc:5f:f7:f9:aa:b1:67:07:aa:2f:
a3:d5:5e:e0:89:cd:4f:3c:e7:77:67:9f:e2:db:1d:
f2:82:83:31:d6:b7:d3:aa:ea:44:d0:20:ae:39:b1:
4a:9a:fb:52:8b:b9:6c:62:f3:44:c4:5c:99:08:24:
5e:ce:66:ed:0a:04:65:02:f6:a7:5c:56:7a:10:bc:
a2:c4:83:f9:cd:eb:11:21:b0:53:b1:ec:4e:65:aa:
ef:ed:c4:96:ca:9d:e2:b0:3d:e0:36:2b:12:1d:a2:
ca:22:37:35:b9:c3:77:87:f2:67:49:98:c5:d8:61:
ef:48:3f:3e:d3:f0:2f:a1:48:c2:62:44:59:3f:d8:
f1:ab:89:3b:2c:4b:66:2d:c0:34:42:73:1d:76:fc:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A7:AA:14:D6:BF:A2:F8:DA:80:7B:A6:C3:12:59:B9:8B:D1:F1:37
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/S6eqFNa_ovjagHumwxJZuYvR8Tc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:3e:b0:3e:e7:03:5f:61:9a:62:60:49:07:87:45:28:4c:70:
5e:3c:08:b2:1c:89:db:f9:00:f8:5e:fe:28:15:a8:16:a4:a2:
5c:46:05:49:28:78:78:8e:f2:c8:56:99:fb:bb:36:b2:e6:2e:
84:f8:ef:f6:e0:1e:af:47:5e:f4:18:b0:ca:9f:cb:86:db:07:
69:df:d4:34:04:a9:20:7f:11:51:f5:7c:60:e6:e5:e5:cf:5c:
f5:75:5e:32:85:c2:82:4d:87:da:6c:e1:1a:a2:7b:1f:f2:ce:
21:ae:c0:c9:82:9b:8d:41:64:5d:20:2a:03:02:9e:03:56:47:
8e:6f:3c:fc:3c:50:0a:e9:91:d1:f0:46:c8:12:34:8c:d0:e8:
d0:1a:2d:5d:52:eb:03:2f:ad:2a:47:56:5e:eb:0a:d8:c2:11:
a2:c5:ed:47:15:37:2d:50:08:9d:e2:2a:b5:c6:a3:ff:dc:5b:
57:5d:78:b2:bf:21:d9:65:64:6b:61:fb:79:b8:88:66:3c:5a:
43:b8:e9:4d:eb:2c:91:15:f1:d9:88:de:77:8d:76:37:16:20:
58:f2:5d:d0:3c:b9:8c:1a:12:12:33:ae:fd:93:76:a2:82:b9:
41:88:32:4e:0e:66:0b:43:b7:6d:f1:eb:1a:d5:e2:9c:24:32:
6c:a4:05:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat May 17 22:39:22 2025 by rpki-client