Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ovhGNAuhU6wd5iYs9HPYCOQMHsw.roa
File: ovhGNAuhU6wd5iYs9HPYCOQMHsw.roa (raw, json)
Hash identifier: egAs8XUG8+vvQ9dAGUCvWAc7fAJHTXXpo5E4triEr/o=
Subject key identifier: A2:F8:46:34:0B:A1:53:AC:1D:E6:26:2C:F4:73:D8:08:E4:0C:1E:CC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A46
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ovhGNAuhU6wd5iYs9HPYCOQMHsw.roa
Signing time: Thu 30 Jan 2025 22:55:31 +0000
ROA not before: Thu 30 Jan 2025 22:55:31 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2630 (0xa46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 30 22:55:31 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A2F846340BA153AC1DE6262CF473D808E40C1ECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:aa:b1:b9:94:7d:3a:81:82:c5:c2:11:74:
f8:b5:45:39:e3:c4:66:01:7a:c1:c1:a2:32:09:0f:
4a:ba:f1:a7:8b:23:49:be:65:14:3f:49:8b:78:36:
94:74:61:7f:9b:e4:fc:69:92:2d:11:ab:3c:d5:7f:
5f:25:13:28:ce:11:14:f9:a6:bc:a3:ab:16:b2:74:
d1:d0:aa:e8:0b:f4:81:e3:15:28:c2:24:3e:e5:a7:
2e:ca:7d:99:31:f3:0a:54:fb:97:23:0c:f9:74:95:
fb:25:be:ce:84:6e:fe:b6:91:8e:f2:4c:83:4f:91:
93:d7:fa:0c:83:ca:87:ff:35:67:d5:11:da:be:cf:
de:81:91:e9:6e:85:7d:75:f4:56:1d:8e:04:bc:8b:
3d:05:6b:c7:74:31:d1:97:7c:8b:98:08:93:14:f7:
31:dc:fd:60:fd:a7:c2:d3:21:b4:ee:62:f5:de:13:
85:62:88:96:3c:82:fd:87:b6:a2:03:44:62:9c:63:
f3:b3:a0:12:f6:dd:c0:11:75:ae:86:42:42:13:91:
96:63:05:02:f0:9a:8f:a7:ae:ca:bf:12:dc:6b:d1:
c9:ac:5d:c6:78:06:11:47:79:fb:b8:f0:fd:62:87:
00:98:50:90:f7:17:7f:23:8e:c0:1a:72:89:82:00:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F8:46:34:0B:A1:53:AC:1D:E6:26:2C:F4:73:D8:08:E4:0C:1E:CC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ovhGNAuhU6wd5iYs9HPYCOQMHsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
a9:0a:9f:b1:21:7f:7c:2a:d7:bf:38:41:2f:ba:b7:40:1e:8d:
e3:6c:a3:83:23:b8:4e:54:df:8b:1d:65:37:09:f1:e4:4c:e6:
02:d0:e3:d1:b8:d7:f3:c7:fc:a2:bd:9b:89:2e:69:8c:28:61:
57:ff:eb:e5:44:3d:bb:99:25:29:70:1a:7d:9b:40:42:0a:8b:
8f:81:e1:c8:10:cd:40:7e:48:0c:57:fe:d8:21:d1:8a:f9:f2:
01:75:06:22:11:08:44:7b:45:c5:04:4c:3d:6d:76:8e:5d:ee:
56:60:4c:5a:d5:28:c1:47:3c:ed:7f:1d:12:d6:7d:91:4e:12:
79:44:c6:ff:4a:34:cb:e3:90:ec:b2:71:ea:d1:a0:c8:67:32:
fc:8a:ec:cd:97:b2:1a:70:f8:13:3f:32:7e:3b:d7:85:c2:53:
f4:91:10:9e:f2:6a:b9:cb:9e:9f:e3:fd:74:8c:53:2a:f6:a5:
0f:7b:00:ea:f5:9d:0d:b6:77:ec:a9:bf:54:5e:e4:78:8f:df:
b6:ae:3f:5c:5d:cd:a6:4e:4d:25:0c:03:02:a9:74:93:2f:26:
9b:6c:a2:70:d2:4e:58:9a:ca:e1:ba:37:79:c0:28:7f:68:76:
18:7f:91:c3:1c:26:96:74:13:ef:a8:de:07:27:64:61:0e:53:
16:af:0f:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 19 10:38:32 2025 by rpki-client