Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/J1XKVYPWhriWv_XVgXj56vyQCGI.roa
File: J1XKVYPWhriWv_XVgXj56vyQCGI.roa (raw, json)
Hash identifier: yabHpnnvIatNnGjb8v9Pk+CuVJR9h0Z2LxkUZbZimJU=
Subject key identifier: 27:55:CA:55:83:D6:86:B8:96:BF:F5:D5:81:78:F9:EA:FC:90:08:62
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B5E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/J1XKVYPWhriWv_XVgXj56vyQCGI.roa
Signing time: Sun 02 Feb 2025 20:55:36 +0000
ROA not before: Sun 02 Feb 2025 20:55:36 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2910 (0xb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 20:55:36 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=2755CA5583D686B896BFF5D58178F9EAFC900862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1e:31:3b:24:61:07:1d:4b:70:36:c0:6c:48:
13:1f:08:7a:08:75:d6:a4:1b:6c:11:05:7a:14:e1:
c7:22:ba:be:e3:d7:f9:4b:7b:68:b0:98:48:d3:a4:
d4:48:e6:72:d2:c1:69:d9:33:ca:be:17:16:d9:89:
9c:3e:df:29:fd:3b:6f:7b:46:03:0d:97:6e:12:f8:
7f:4d:bf:08:88:7f:b6:7f:5e:36:32:8a:b6:e3:53:
24:d3:6f:54:1b:03:73:e4:f2:dc:50:83:7d:3d:ee:
a9:23:19:9d:de:ae:43:ce:98:50:8f:39:fd:a2:9b:
f5:6d:64:12:77:22:e2:70:aa:21:04:e2:52:d8:43:
95:09:83:33:9f:52:ed:04:d6:a5:4e:a6:15:99:c4:
19:06:c4:14:ab:4d:d1:b1:d5:a8:3c:1d:60:11:29:
30:4e:7f:9b:19:9a:74:34:c2:46:0d:5c:e8:e9:e2:
44:9b:71:e4:ef:0f:87:5f:a8:f1:ef:de:07:c7:3d:
04:2f:5d:a5:c4:03:90:79:a7:3e:8a:da:b0:c6:86:
e0:2f:f8:d2:6f:a2:81:19:01:b7:7a:18:86:77:ce:
72:11:37:5a:c2:2c:3c:18:46:de:3e:14:69:82:b8:
17:74:bd:86:c2:01:05:2c:88:6d:90:6d:11:60:a8:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:55:CA:55:83:D6:86:B8:96:BF:F5:D5:81:78:F9:EA:FC:90:08:62
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/J1XKVYPWhriWv_XVgXj56vyQCGI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:42:08:fb:87:fe:2c:6d:cb:a5:c6:fc:b3:0e:82:2f:1b:ab:
01:fb:46:3c:10:6a:97:0f:ed:30:ae:e8:3d:31:15:1d:a4:8e:
a4:77:75:23:9a:0d:59:66:7c:63:9c:41:13:69:6b:70:a0:06:
05:86:e3:b3:b6:dc:0e:5f:24:13:a6:9c:1c:bb:e7:95:d0:e2:
67:e8:99:70:14:03:49:93:2f:a5:b6:c2:29:5f:0f:a0:63:b8:
1b:86:94:11:f9:23:34:f2:cd:6f:21:27:fc:4f:9e:28:2e:45:
51:e2:18:5d:55:79:8a:45:d0:5c:4a:77:dd:70:14:24:63:83:
d2:56:97:84:64:44:6c:b0:26:99:ff:89:1c:f4:02:85:86:f1:
39:8e:20:38:e3:49:69:50:49:9a:65:95:eb:5a:b8:04:07:d8:
52:c5:eb:26:c8:e4:47:c8:00:b5:c4:60:1a:11:77:80:ff:1e:
1b:8e:c8:5c:62:70:7a:8b:d3:33:09:b6:88:e0:71:5c:43:71:
f4:84:de:b6:85:3b:e5:65:96:17:13:a4:c8:5f:6d:b4:de:28:
f7:8c:c9:39:6d:d5:e5:44:e4:22:ec:39:56:bb:63:6c:ad:4c:
8a:f2:4c:4b:15:05:a9:de:df:13:29:2d:75:22:48:14:f3:c6:
ce:c9:8d:8a
-----BEGIN CERTIFICATE-----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=
Generated at Mon Feb 3 00:41:39 2025 by rpki-client on console.sobornost.net