Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/kD6fvBSTmbN80VylYRbg7Onob4g.roa
File: kD6fvBSTmbN80VylYRbg7Onob4g.roa (raw, json)
Hash identifier: tLMK3dtGoOwRqw8YjY+eEm+i1uiCmSW2ENOppemH89A=
Subject key identifier: 90:3E:9F:BC:14:93:99:B3:7C:D1:5C:A5:61:16:E0:EC:E9:E8:6F:88
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AA6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kD6fvBSTmbN80VylYRbg7Onob4g.roa
Signing time: Fri 31 Jan 2025 22:55:34 +0000
ROA not before: Fri 31 Jan 2025 22:55:34 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 22:55:34 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=903E9FBC149399B37CD15CA56116E0ECE9E86F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c9:4e:09:2c:55:1f:fa:51:a0:ec:4a:08:d6:
91:64:fb:81:13:b8:c0:8c:0a:41:49:2d:fa:90:49:
ef:4b:06:23:6b:0e:c1:61:5b:93:6a:d2:72:ef:76:
84:33:6d:e3:72:64:d4:4c:0c:e3:7f:2e:96:6d:49:
55:20:d9:c9:e8:ba:a6:65:01:4b:ae:4e:39:b0:e3:
50:42:37:80:78:a2:50:a6:88:92:d6:1e:f0:20:70:
22:0e:78:df:2a:5a:67:7e:e1:47:6c:43:69:12:64:
9e:cd:5e:6f:43:85:4c:ee:50:22:18:b3:bb:a3:09:
36:30:2f:54:8d:96:5e:a8:de:dd:14:79:74:01:76:
02:29:e2:16:7f:51:ed:21:4d:c2:4e:41:16:bc:1a:
a6:7b:98:99:50:49:17:6a:b6:cb:a0:8a:a9:09:14:
45:fa:90:d3:48:ec:70:4e:32:53:c4:75:fc:e1:62:
8a:3d:42:43:19:2c:6a:fb:50:c7:d0:5c:09:f2:a2:
6d:b7:b6:48:50:d2:38:23:0c:45:63:e2:36:87:82:
b7:2b:10:47:4e:72:c9:2d:f0:f5:30:e5:36:c9:d5:
22:c4:87:e2:bf:2a:95:dd:d5:b1:39:36:ee:de:5b:
ec:29:aa:77:91:71:5f:26:51:1b:57:e3:6d:cb:57:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3E:9F:BC:14:93:99:B3:7C:D1:5C:A5:61:16:E0:EC:E9:E8:6F:88
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kD6fvBSTmbN80VylYRbg7Onob4g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:90:8a:20:db:cf:bd:84:82:12:9d:b9:4e:96:b1:ef:e5:9a:
4a:3a:85:e4:a4:85:4f:fe:2d:30:dd:73:5e:a2:34:b4:3f:71:
9e:fb:a8:cc:dd:98:0e:0e:de:e0:77:18:50:23:ae:c1:43:9f:
1c:b1:bc:ea:93:b7:7f:da:ce:60:2d:ad:13:11:f0:5f:d7:3e:
f5:d9:cd:0d:42:74:29:ae:61:d7:1b:f9:f3:41:0b:81:57:02:
98:6c:62:73:93:7f:6e:66:11:d2:89:d4:98:0e:e3:be:d5:f0:
41:e7:c0:ad:53:4e:09:ec:16:3c:9c:2f:3d:a0:3e:99:e1:24:
29:b7:01:ee:9f:e0:1e:2f:b3:4a:03:4f:04:4a:a8:12:cb:5f:
9a:79:8d:36:47:61:5b:f1:75:32:26:e1:90:12:08:79:bc:2d:
b7:05:30:c3:36:57:60:4a:e5:85:2a:f8:1c:f8:bc:91:dd:1a:
33:c4:b8:44:34:2d:e7:f6:11:65:ea:ea:f2:48:f9:c1:7f:dc:
40:9c:0c:0a:7c:7e:24:d0:c6:6d:26:77:14:00:e8:87:bc:45:
c7:b9:48:e9:b3:be:cf:91:46:e1:74:22:77:f9:13:7d:df:d6:
61:5a:3f:c7:17:91:6d:db:9f:a0:62:0a:72:1e:ce:94:c7:4e:
59:e5:c4:cc
-----BEGIN CERTIFICATE-----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=
Generated at Sat Feb 1 02:38:00 2025 by rpki-client on console.sobornost.net