Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/4KEwoQOXs2AzkHy3OyIqUp9-rug.roa
File: 4KEwoQOXs2AzkHy3OyIqUp9-rug.roa (raw, json)
Hash identifier: yxxQa+ePGtiXQMfYILzZNduRw9Og/n70K6XzSKuteMc=
Subject key identifier: E0:A1:30:A1:03:97:B3:60:33:90:7C:B7:3B:22:2A:52:9F:7E:AE:E8
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 051C
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4KEwoQOXs2AzkHy3OyIqUp9-rug.roa
Signing time: Fri 17 Jan 2025 04:24:43 +0000
ROA not before: Fri 17 Jan 2025 04:24:43 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1308 (0x51c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 04:24:43 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E0A130A10397B36033907CB73B222A529F7EAEE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:24:af:85:ac:33:d2:a4:f8:56:b0:13:39:
f3:bf:04:bf:c3:39:55:39:f2:4f:88:bf:5f:58:c1:
77:20:aa:49:76:b8:21:f6:76:b9:6b:40:1c:3b:53:
81:b8:8a:a4:21:ca:23:8c:3e:47:4c:f9:7c:dd:54:
bd:9e:39:97:db:ae:15:0a:32:25:55:f9:b3:0a:09:
99:27:39:c2:62:5c:09:f3:d9:07:59:60:41:72:ba:
86:5e:14:15:49:07:83:0e:81:15:5b:5b:fe:6a:c6:
59:95:3f:5c:58:92:f8:c6:ec:ca:3f:6b:8f:65:f4:
14:28:57:bc:9e:6f:bc:96:2a:78:8d:0a:d9:e6:f7:
33:19:7e:25:b9:5a:28:11:b2:7b:b3:c7:a3:41:45:
f4:5c:a9:de:8a:67:b1:36:d6:95:93:39:2e:41:03:
04:86:6c:4e:f6:c3:6f:6d:3f:2b:d9:95:d7:b5:eb:
0f:68:0c:42:07:db:2d:d8:a3:25:2b:a8:d7:51:84:
04:c0:9c:91:cd:4e:5b:4c:7d:33:8d:79:10:da:b5:
18:ce:9b:b5:3d:a6:33:7a:fc:58:32:df:5c:7a:be:
3f:cd:52:9e:72:31:1c:3a:4c:bb:c6:25:e1:6e:99:
da:69:8d:f0:7a:7d:8a:09:62:94:25:0a:d7:e8:b2:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:30:A1:03:97:B3:60:33:90:7C:B7:3B:22:2A:52:9F:7E:AE:E8
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/4KEwoQOXs2AzkHy3OyIqUp9-rug.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
34:45:7e:34:0a:9e:73:16:3d:b1:c2:83:53:9f:64:7f:cf:d3:
bc:11:98:bf:14:15:f0:b0:ba:23:52:90:fb:07:d5:b9:17:98:
f3:fb:8a:cf:82:fe:c0:37:ee:55:af:82:3e:19:14:cb:cc:e5:
1b:ed:64:bd:57:06:b8:f7:bb:6c:5f:fa:2a:20:d3:9a:3c:b5:
52:ef:ae:0a:7c:33:f2:89:60:c8:0f:47:46:52:ff:f5:b3:78:
98:78:fd:6e:63:d7:0e:69:06:b8:7a:fd:df:30:4b:c2:4b:e6:
05:3b:f3:69:ff:84:37:b8:ff:4c:5f:38:79:47:5b:d6:32:55:
35:18:30:4a:21:33:95:03:79:bc:1f:20:84:a9:39:5f:43:ee:
0b:ad:92:57:e9:86:5f:c9:50:3e:5f:a2:77:2b:a7:c6:1b:75:
14:e3:9c:95:97:d5:da:63:d4:30:55:f4:01:4c:b8:44:da:f7:
b6:d5:da:c2:83:be:c6:92:71:98:a9:88:fa:b9:4b:f0:f5:1a:
3c:0f:cd:16:07:6a:ba:0a:d1:b7:52:fc:b1:e0:76:3f:62:58:
5c:2a:b9:60:fe:72:49:cf:10:e7:27:99:a8:64:5f:ca:c2:6c:
9b:70:ad:59:39:97:db:da:af:0c:2f:43:98:49:b1:98:3b:cb:
27:77:2a:e8
-----BEGIN CERTIFICATE-----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=
Generated at Fri Jan 17 08:40:18 2025 by rpki-client on console.sobornost.net