Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/Btvbt7a6bJOtQX2SkjNOzX6x7s4.roa
File: Btvbt7a6bJOtQX2SkjNOzX6x7s4.roa (raw, json)
Hash identifier: J3x/jdknojHsR20lDH9aYiM3WVDFNo+J9G/bqXoCwhA=
Subject key identifier: 06:DB:DB:B7:B6:BA:6C:93:AD:41:7D:92:92:33:4E:CD:7E:B1:EE:CE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CB4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Btvbt7a6bJOtQX2SkjNOzX6x7s4.roa
Signing time: Thu 06 Feb 2025 10:25:46 +0000
ROA not before: Thu 06 Feb 2025 10:25:46 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3252 (0xcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 10:25:46 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=06DBDBB7B6BA6C93AD417D9292334ECD7EB1EECE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:87:5b:10:fb:76:43:fb:01:02:31:e3:b6:
8e:5a:7f:26:b3:45:ad:f7:f3:a0:b1:6d:eb:34:50:
90:e1:46:8b:6b:85:50:4b:da:c1:84:63:4c:d2:1f:
da:91:5b:21:f4:d5:4c:75:e6:21:e6:49:1c:b2:d2:
77:26:76:13:f0:38:f2:de:cd:77:49:0d:80:b2:f6:
9c:fe:a3:8a:7a:f9:ea:86:da:23:42:6e:35:72:59:
e7:20:f9:90:a2:29:08:f6:96:3d:6f:16:75:f0:9f:
fe:75:0a:fc:5d:0a:25:a9:92:a6:d7:da:e0:25:7a:
e0:be:3b:ae:68:ec:ff:b0:ca:a5:0c:62:a2:4e:0a:
d2:da:09:d0:52:09:9f:c6:7a:2b:17:30:f8:35:af:
6a:c8:06:55:bc:98:a0:9c:a8:10:b7:d3:f0:9b:48:
a5:06:78:79:bf:24:52:07:6e:95:74:de:90:04:c2:
a1:66:56:72:6b:ef:4b:22:f9:bf:c5:a2:0a:95:ee:
74:66:bf:86:a4:cd:c5:6b:04:8e:eb:3d:c6:b8:42:
20:67:10:09:ae:91:b0:57:c8:01:5a:93:38:a7:33:
d9:83:60:cb:57:2d:30:8f:da:5b:3c:50:7b:d2:98:
af:f5:b4:b9:58:b2:5a:89:da:30:85:e8:35:6b:e7:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DB:DB:B7:B6:BA:6C:93:AD:41:7D:92:92:33:4E:CD:7E:B1:EE:CE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/Btvbt7a6bJOtQX2SkjNOzX6x7s4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1c:af:ef:7f:5c:f6:ae:d1:57:41:c5:fe:0c:19:ba:a6:ec:a4:
b2:5b:29:40:bf:a4:76:0b:8c:dc:42:d7:c5:ef:a7:0c:30:7c:
ca:78:87:a4:d0:90:10:60:c6:26:62:5c:01:28:e4:b1:5c:0b:
e5:77:92:45:c3:2f:d1:1b:a5:92:b3:ea:49:b6:63:33:86:2e:
c1:f7:97:47:2d:ce:bf:02:72:ff:69:f1:33:8b:de:56:df:2f:
00:d2:ea:81:01:4a:e3:ed:c9:66:cb:66:89:02:1c:78:ca:34:
6a:18:66:05:86:b2:1a:e2:bd:4c:33:08:7c:68:1b:a9:53:24:
57:cf:cd:5f:0c:b6:e9:ec:1c:98:8f:a6:37:3d:16:4e:13:83:
0c:78:68:22:ce:c4:d8:f2:49:b8:98:41:fc:06:df:6f:17:c9:
37:71:d5:4a:e0:9a:95:eb:a7:92:89:a1:92:77:27:3b:e0:fb:
47:34:41:4a:95:3a:0b:46:d8:75:6e:25:45:3c:1e:7e:a9:95:
16:6e:34:b4:13:c8:80:e0:82:cb:e9:18:78:b2:99:51:46:98:
66:be:2b:4b:fe:13:0a:03:93:d9:57:1d:69:ba:55:9a:a5:4d:
c4:aa:df:18:c6:d0:b7:01:80:bf:31:18:83:6b:51:a6:0f:55:
28:1e:00:c4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Feb 6 14:02:07 2025 by rpki-client on console.sobornost.net