Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QY2um3Fcl1b0sFS7Ka4wndieX9U.roa
File: QY2um3Fcl1b0sFS7Ka4wndieX9U.roa (raw, json)
Hash identifier: KBI0CgeoxnYejTsofOgTtEabXaVsCL0odU1AVBgnqIc=
Subject key identifier: 41:8D:AE:9B:71:5C:97:56:F4:B0:54:BB:29:AE:30:9D:D8:9E:5F:D5
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CAA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QY2um3Fcl1b0sFS7Ka4wndieX9U.roa
Signing time: Thu 06 Feb 2025 07:55:47 +0000
ROA not before: Thu 06 Feb 2025 07:55:47 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3242 (0xcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 07:55:47 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=418DAE9B715C9756F4B054BB29AE309DD89E5FD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:08:db:62:aa:53:71:79:90:8c:0e:7a:6a:
87:eb:de:72:8d:21:00:62:6b:eb:cc:7b:6c:aa:a8:
23:d7:39:9d:35:05:ec:f2:fc:ba:8c:50:d0:ee:9e:
fb:ec:17:af:a1:66:d3:49:67:7a:d0:96:95:24:a6:
b6:7d:d2:83:c5:89:83:ea:ce:cb:5f:66:69:c3:7f:
98:14:20:86:ad:01:e2:97:f5:eb:bd:48:23:44:42:
0f:07:19:00:3b:68:25:86:08:75:9d:31:a5:25:13:
22:d1:76:45:4e:08:16:90:e8:4c:59:dd:cc:62:69:
c3:e3:b3:2e:b3:07:ca:a3:c6:0f:11:5b:5d:f5:89:
01:38:49:42:b8:fb:26:7a:4b:07:95:53:0d:68:e3:
b5:3e:84:0b:96:a4:9d:e4:22:01:0e:20:8e:7c:64:
4f:37:b4:57:bb:9a:38:21:9f:65:9f:73:f4:79:d6:
91:e2:09:61:ab:f3:30:92:3e:5b:04:be:b2:a8:fe:
d7:64:eb:8e:56:44:3a:e4:3b:df:ea:d0:11:8d:e1:
e5:71:6b:54:97:ef:3a:24:4a:e7:e7:6a:15:9f:45:
e6:5c:77:2e:11:6d:9c:85:bc:7b:5b:00:be:a2:4e:
d8:f4:83:29:dd:ae:13:90:5d:7a:c7:52:ba:60:8c:
2e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:AE:9B:71:5C:97:56:F4:B0:54:BB:29:AE:30:9D:D8:9E:5F:D5
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QY2um3Fcl1b0sFS7Ka4wndieX9U.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
77:ac:6f:25:1d:8c:6f:d7:c9:ea:aa:7e:bc:19:75:e8:94:09:
df:40:86:68:73:d3:5e:e8:05:33:97:eb:a6:bc:92:c0:e2:91:
d9:c1:f4:84:a0:8d:4a:8f:5e:ea:b1:8c:13:e9:14:04:1b:53:
d3:e3:c2:80:0b:74:84:4a:39:f7:2b:a8:66:87:22:bb:39:ae:
89:64:d1:86:5a:5d:c6:46:81:4b:9b:06:e9:0c:4a:6b:ed:95:
de:73:e5:9f:1e:c2:35:da:4c:7d:d1:98:08:7d:1a:82:76:5c:
87:38:fb:57:e9:9b:c5:bd:ef:5c:d0:e7:a6:44:38:ca:68:18:
9e:65:02:d4:e5:2b:43:59:9f:46:15:97:80:5e:63:60:73:bc:
76:88:36:b9:47:67:a6:6a:46:77:fa:65:1d:b0:bc:23:f8:3d:
e8:57:33:d9:e4:cf:ba:7f:86:ef:cd:8b:dc:1f:23:1b:d9:07:
53:e0:47:d0:f4:d9:97:c1:13:d9:db:c9:9d:0b:ac:bf:9c:f8:
6a:1e:25:b6:4b:4f:0f:0b:28:1d:26:8b:2c:80:84:ca:53:73:
27:76:e4:05:58:05:9c:d2:ee:5d:cb:4a:60:ff:4e:2d:0b:08:
4c:02:02:d7:66:a6:c4:f2:06:af:d8:e5:f6:fe:ee:96:ca:28:
f5:b0:79:0b
-----BEGIN CERTIFICATE-----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=
Generated at Thu Feb 6 11:54:32 2025 by rpki-client on console.sobornost.net