Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/8pGNwCedDeLFe6GYkKsBdLc9868.roa
File: 8pGNwCedDeLFe6GYkKsBdLc9868.roa (raw, json)
Hash identifier: Iv09kSm0Nyza0n4CrcwIsPjHibBkNZ4Ar66w7gUWpsg=
Subject key identifier: F2:91:8D:C0:27:9D:0D:E2:C5:7B:A1:98:90:AB:01:74:B7:3D:F3:AF
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0878
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8pGNwCedDeLFe6GYkKsBdLc9868.roa
Signing time: Sun 26 Jan 2025 03:25:11 +0000
ROA not before: Sun 26 Jan 2025 03:25:11 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2168 (0x878)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 26 03:25:11 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=F2918DC0279D0DE2C57BA19890AB0174B73DF3AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:60:22:1d:1d:8a:b5:b5:9e:e8:f8:87:76:
01:ad:1b:23:4f:4a:09:24:2d:29:80:be:cc:3a:94:
66:6f:80:a8:bd:a4:24:60:5b:f6:70:8e:67:92:eb:
51:3a:db:f0:7d:77:6f:ac:41:25:da:b1:20:86:0e:
a2:9b:92:68:a4:73:66:09:89:f8:8a:56:1f:03:05:
bd:27:54:3f:ca:74:82:fb:e1:9c:3e:7b:ca:77:72:
1c:7e:90:1b:1f:cf:7b:25:04:49:5e:34:b1:f9:6e:
92:3c:ca:18:9c:3f:3f:81:e0:a3:80:f9:67:27:0b:
6c:29:e9:f9:0e:cb:b6:77:56:f3:d9:b6:1d:2e:94:
7d:44:98:3a:8c:02:d7:5d:13:0a:c8:eb:9a:ec:a2:
e9:26:db:ea:2b:91:1b:41:d3:c4:d5:4d:d5:31:7b:
77:28:45:8d:7e:13:e5:3a:bb:fd:16:2b:45:96:09:
2d:57:99:dd:7a:6d:56:69:b0:ec:39:e7:23:cc:d7:
74:05:23:42:af:03:02:42:1f:67:61:f2:5d:e2:ee:
f4:e5:fa:83:ad:a7:5c:75:88:ad:15:ca:0c:b1:ad:
63:9b:1b:c8:2a:89:98:0e:44:74:3d:f2:e3:4f:3f:
70:e0:e3:51:55:09:a5:f1:53:19:a6:a4:1d:b9:d8:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:8D:C0:27:9D:0D:E2:C5:7B:A1:98:90:AB:01:74:B7:3D:F3:AF
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/8pGNwCedDeLFe6GYkKsBdLc9868.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8c:85:76:2d:57:f6:43:cc:fe:63:7b:89:e4:d2:31:7f:69:91:
8b:eb:c4:14:3e:5a:ff:92:17:b4:e7:b8:ec:db:07:bf:95:96:
a6:17:81:61:d6:6a:f2:07:c6:22:d4:e4:21:a9:d8:73:e4:bb:
85:3f:2d:d8:dc:49:92:8b:5c:49:cb:66:aa:53:8c:fb:2c:c8:
b7:75:63:f0:e0:e4:85:0d:b4:2e:81:33:52:de:cb:81:07:d7:
82:65:88:17:df:ba:dd:22:26:bf:45:63:e4:6d:94:16:06:9f:
a5:d1:8b:ad:f1:7e:8a:5e:e2:b2:b0:0a:77:bf:6c:87:bb:e9:
76:48:25:3b:f5:3d:53:af:bd:05:d7:10:7f:29:80:58:2e:1b:
72:0a:3f:fd:73:36:d5:9d:b5:6e:69:e0:52:c6:3b:c0:ad:79:
44:00:28:0a:74:33:a1:6d:60:07:84:c3:f8:e9:a8:e5:9e:4a:
77:73:98:c4:24:98:1a:a4:25:f3:db:e0:ef:40:6f:c8:62:01:
4d:74:86:cb:0e:30:4e:ec:db:0a:98:2b:b2:8d:a6:65:7c:73:
0d:92:9b:42:cb:07:28:9c:fb:b7:0b:01:33:c5:e4:9b:1c:6b:
73:10:81:6b:e2:16:fd:62:e7:1d:ea:d4:e3:e6:b8:f9:b1:34:
d2:41:c4:65
-----BEGIN CERTIFICATE-----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=
Generated at Sun Jan 26 13:44:12 2025 by rpki-client on console.sobornost.net