Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/6N51-26vxixsWPpL60k03Yil1hY.roa
File: 6N51-26vxixsWPpL60k03Yil1hY.roa (raw, json)
Hash identifier: 5isSrVUJr8/8epgUAgBtRagluu03JVYawVouu1kK6io=
Subject key identifier: E8:DE:75:FB:6E:AF:C6:2C:6C:58:FA:4B:EB:49:34:DD:88:A5:D6:16
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AB6
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6N51-26vxixsWPpL60k03Yil1hY.roa
Signing time: Sat 01 Feb 2025 02:55:32 +0000
ROA not before: Sat 01 Feb 2025 02:55:32 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2742 (0xab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 02:55:32 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=E8DE75FB6EAFC62C6C58FA4BEB4934DD88A5D616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:13:ad:3c:07:82:fc:f0:ef:a8:52:ac:db:
0e:df:09:88:50:1f:8d:a8:ca:f6:b7:b7:dd:5d:18:
1e:78:27:3c:3a:c8:8f:fe:a1:d2:b0:27:dc:42:f5:
08:fa:2e:1b:f8:9a:2f:96:87:b8:81:a1:79:4f:f7:
ca:36:c5:a9:de:eb:d3:8d:07:6c:6d:f8:ee:4a:ee:
05:c3:0a:0c:e8:c9:83:14:c1:2d:54:27:4c:6f:12:
77:1c:9a:f8:41:1c:f1:38:10:96:15:d0:34:6c:78:
a6:bb:0a:3f:7e:0e:ca:2c:76:df:60:17:08:b9:b1:
1a:9a:f5:19:bd:50:87:8d:e4:d8:e9:10:18:65:1e:
a1:4b:19:1a:57:d1:f0:42:91:57:df:59:c9:f8:66:
71:e5:03:8f:af:54:64:0e:f8:b5:48:d2:6e:1a:c4:
b2:0f:66:20:41:67:a9:96:82:9b:29:eb:5f:4c:7f:
71:c3:91:d6:ab:c6:cb:15:f5:91:ff:6d:2f:f6:6b:
7f:e4:73:8c:b5:a4:f8:93:82:66:bc:0f:7b:10:d7:
b6:8d:92:f0:66:91:de:6d:2d:c1:cf:fc:68:97:fc:
64:d7:78:d4:f8:95:95:2b:42:36:5a:e7:ca:ea:0d:
ac:1c:9c:11:78:69:bf:59:86:77:80:0f:fa:8a:0b:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DE:75:FB:6E:AF:C6:2C:6C:58:FA:4B:EB:49:34:DD:88:A5:D6:16
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/6N51-26vxixsWPpL60k03Yil1hY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
27:92:97:52:3a:95:bf:5d:ef:a1:2e:3d:f8:dd:f3:d1:15:cd:
6b:dc:54:49:51:f5:f0:30:bd:de:65:30:50:6f:90:32:94:7e:
c6:76:cb:25:9b:e1:85:d3:d8:64:f9:8d:cf:ed:9a:8a:f5:36:
af:39:64:ed:f0:68:21:ae:9b:fe:81:77:2e:63:d3:5c:ac:ca:
30:bc:bd:74:be:a2:cc:3f:48:e1:27:02:ed:14:74:36:e9:1d:
1d:86:0d:b4:6a:d7:35:b2:20:3b:59:04:2f:34:5c:74:9b:59:
3e:a9:5c:ed:00:7c:61:aa:3f:e7:57:28:a4:6d:22:d9:78:20:
49:b5:3d:18:13:e1:21:cc:e7:07:53:f5:d7:81:4c:4a:85:f6:
74:2e:10:1d:c0:28:35:3f:47:fb:cb:33:68:f2:54:74:8d:57:
92:82:f4:82:01:b6:38:c5:f4:cc:cf:6b:57:c6:ff:63:6f:05:
f2:18:f6:41:25:aa:08:91:d1:36:1c:c5:64:17:0d:9e:d3:7c:
54:6d:fe:73:2a:63:97:ce:64:25:d1:4d:60:76:52:07:fd:14:
9d:10:ab:37:b8:81:76:b1:d0:b5:e8:85:eb:9e:d4:54:69:e3:
a5:0c:33:e2:05:99:d4:a3:22:49:69:ab:e1:44:48:78:7a:45:
ad:17:81:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 1 14:14:12 2025 by rpki-client on console.sobornost.net