Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/MbJnKq6uPgYP3xAEX6CWtC6OEHc.roa
File: MbJnKq6uPgYP3xAEX6CWtC6OEHc.roa (raw, json)
Hash identifier: ZCvT60/npY0xOxVqa71MdYUExMnxdOcf3yi56LFtcP0=
Subject key identifier: 31:B2:67:2A:AE:AE:3E:06:0F:DF:10:04:5F:A0:96:B4:2E:8E:10:77
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B10
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MbJnKq6uPgYP3xAEX6CWtC6OEHc.roa
Signing time: Sun 02 Feb 2025 01:27:33 +0000
ROA not before: Sun 02 Feb 2025 01:27:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2832 (0xb10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 2 01:27:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=31B2672AAEAE3E060FDF10045FA096B42E8E1077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:2d:ee:68:74:8a:f5:cd:00:75:a5:6c:9e:
05:61:d5:79:7c:ec:9a:78:98:b0:36:17:9d:00:7f:
50:cd:07:9b:fe:33:2a:89:80:90:83:61:4e:6e:a0:
21:f4:7d:57:84:7f:a3:9a:ed:e9:97:2c:1d:ad:12:
2d:6d:73:45:bc:e6:b5:51:2c:2f:59:d1:89:dd:47:
8b:1f:35:a8:7f:2a:84:95:dd:97:ec:fa:7f:53:ff:
f1:0f:36:4a:78:19:94:f0:79:9b:66:b4:b6:66:ed:
b6:ca:71:81:09:06:a8:86:44:70:90:7a:19:8e:32:
1a:26:cd:2b:dd:66:4f:02:4e:8d:3b:22:52:a0:64:
74:3b:59:18:06:5b:d1:03:e1:91:a8:30:da:c9:90:
68:b0:39:84:bd:2b:5e:bf:18:de:90:0e:bd:37:7e:
d8:ac:ff:69:e5:c4:c9:70:56:50:d6:3d:09:c2:df:
cf:49:91:c2:ad:18:f8:25:f2:26:47:d8:2c:30:3c:
a8:6f:38:16:3d:24:9a:f6:fe:7a:48:00:1a:7f:86:
e9:5b:4e:e3:64:3d:b4:e4:87:f4:e5:53:81:19:72:
2a:01:70:72:6b:c6:5a:02:ee:22:05:f7:98:26:bb:
36:a7:55:f2:3d:72:d7:45:a3:89:ea:2b:02:74:34:
db:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B2:67:2A:AE:AE:3E:06:0F:DF:10:04:5F:A0:96:B4:2E:8E:10:77
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/MbJnKq6uPgYP3xAEX6CWtC6OEHc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
63:0b:1f:3a:3c:65:09:8d:41:53:6a:2d:27:03:de:ec:8e:1f:
75:72:7e:fb:46:fd:eb:32:91:4a:96:ca:00:9e:96:f5:18:7f:
9c:39:45:4b:82:71:4b:79:96:88:44:44:ea:5e:99:90:2b:fe:
5e:b8:60:7c:4f:fa:fa:d4:c8:1c:90:3b:a3:3f:77:55:17:d5:
a8:e3:94:a5:d0:27:9c:ce:eb:43:8b:78:83:91:bd:4c:57:0c:
a8:7b:58:9a:d4:42:4f:62:85:ea:77:73:68:ff:17:b6:cf:f8:
df:24:70:54:c7:82:f8:7d:21:5b:39:ec:bd:18:fc:5c:e1:08:
d7:de:13:58:c9:a4:37:b1:a8:4d:5a:62:f2:b7:82:d4:68:bf:
cf:b8:bb:a3:61:46:1b:96:e8:de:33:9a:47:30:89:c5:98:58:
c5:59:c9:63:06:fd:21:0c:17:b6:4a:86:ce:95:f6:c5:72:ca:
d3:02:68:b0:77:79:dc:b7:1d:27:55:15:66:d9:a7:50:d8:b8:
93:6a:62:6f:8a:e7:7f:50:1c:8d:ea:8c:07:56:f8:16:e2:0d:
f6:aa:4e:55:d2:9b:73:f7:16:fa:f3:33:45:b2:d3:53:c4:df:
42:f1:ff:65:e8:64:fb:18:ef:a8:59:c2:d6:a1:c6:94:3f:40:
4e:31:6e:bc
-----BEGIN CERTIFICATE-----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=
Generated at Sun Feb 2 06:02:03 2025 by rpki-client on console.sobornost.net