Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/QmmPTsmeFZGaLPmt8_kBA_dMXrk.roa
File: QmmPTsmeFZGaLPmt8_kBA_dMXrk.roa (raw, json)
Hash identifier: Oly0cV8+nq0ijvuRjs9c0TrIA+sz/UQ5JijXWUlumPU=
Subject key identifier: 42:69:8F:4E:C9:9E:15:91:9A:2C:F9:AD:F3:F9:01:03:F7:4C:5E:B9
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06EA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QmmPTsmeFZGaLPmt8_kBA_dMXrk.roa
Signing time: Tue 21 Jan 2025 23:54:57 +0000
ROA not before: Tue 21 Jan 2025 23:54:57 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1770 (0x6ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 23:54:57 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=42698F4EC99E15919A2CF9ADF3F90103F74C5EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4c:c8:a6:23:62:84:69:46:3e:75:5c:3c:73:
46:0b:d4:b2:7e:df:9b:0a:ae:ab:d2:39:32:c7:24:
b8:92:92:86:4c:a5:9f:34:fd:ab:3f:f0:62:12:c7:
82:64:fe:21:45:84:dd:63:46:0c:e1:d9:af:91:89:
1a:32:47:1f:6b:6d:70:50:3a:24:30:c8:04:13:93:
90:d0:ea:85:37:cb:9a:d6:c8:59:0f:e7:54:6f:e1:
f6:19:8d:d3:af:35:0d:a6:dd:9c:ba:31:fd:09:0f:
24:bb:a0:01:71:e0:cb:35:84:1c:4f:c0:97:cd:65:
38:a2:84:42:74:4c:a1:95:6d:58:b8:3b:2b:74:fd:
ad:e6:c6:88:cb:2f:4b:6a:d5:c3:d2:64:a6:ee:27:
bf:7b:f4:2f:c9:b9:27:10:28:ac:ad:1f:af:94:7b:
66:53:98:f3:3d:e9:f2:7c:7e:89:8d:ad:93:19:c4:
9e:92:fb:cc:e8:7c:34:ac:66:50:b3:92:99:fa:81:
0d:a4:0e:7b:81:10:47:3f:56:6d:af:3c:8d:06:22:
14:31:1c:bd:01:32:87:93:b4:5c:db:67:e3:69:5d:
93:9b:bd:c2:0d:38:86:3c:4f:15:3c:60:0e:0f:77:
19:81:89:5a:cc:0d:4b:03:ef:71:95:68:6f:f2:a7:
ea:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:8F:4E:C9:9E:15:91:9A:2C:F9:AD:F3:F9:01:03:F7:4C:5E:B9
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/QmmPTsmeFZGaLPmt8_kBA_dMXrk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
56:fc:24:66:f8:61:85:5c:7e:fd:7c:3b:21:a2:99:2c:b1:f0:
43:bc:8c:b2:6e:e9:ad:de:7d:40:a5:45:7f:f2:7d:14:31:e1:
3f:2d:74:eb:30:f8:9f:31:0e:d3:7d:85:7b:60:fb:80:20:a8:
a1:4a:67:f9:ff:0f:41:89:d2:90:f2:ec:9b:33:f3:6d:d7:55:
73:6f:d5:b4:fc:d2:a4:06:69:15:91:25:8c:17:bb:e7:c0:80:
be:31:cc:1a:94:6c:f8:78:4b:f6:ca:56:33:75:23:25:68:4d:
2a:1a:09:d9:23:58:88:3d:2e:15:52:f0:6d:5b:91:33:14:2c:
02:ac:59:75:18:bb:a1:b6:d0:e5:45:03:80:db:c6:ac:a3:ee:
c3:16:d8:21:37:67:ff:45:49:e2:d6:6e:2a:e8:32:af:9f:39:
f7:30:f1:d4:b0:6d:1a:4f:7e:de:e1:e1:22:4c:3c:26:7d:e6:
76:9d:50:93:1f:c0:da:3f:9a:56:a0:8f:2a:d8:1f:d6:31:de:
ba:21:d1:b3:a1:74:70:f6:26:37:f3:f6:8d:51:78:f1:54:78:
f8:3c:b4:ef:53:6a:fe:e4:2b:1c:4d:08:45:6a:0e:27:00:83:
7a:5f:85:64:7f:db:e7:22:51:94:51:0c:d2:af:c9:d4:72:37:
d0:7e:cf:27
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBuowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjEy
MzU0NTdaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQyNjk4RjRFQzk5RTE1
OTE5QTJDRjlBREYzRjkwMTAzRjc0QzVFQjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcTMimI2KEaUY+dVw8c0YL1LJ+35sKrqvSOTLHJLiSkoZMpZ80
/as/8GISx4Jk/iFFhN1jRgzh2a+RiRoyRx9rbXBQOiQwyAQTk5DQ6oU3y5rWyFkP
51Rv4fYZjdOvNQ2m3Zy6Mf0JDyS7oAFx4Ms1hBxPwJfNZTiihEJ0TKGVbVi4Oyt0
/a3mxojLL0tq1cPSZKbuJ7979C/JuScQKKytH6+Ue2ZTmPM96fJ8fomNrZMZxJ6S
+8zofDSsZlCzkpn6gQ2kDnuBEEc/Vm2vPI0GIhQxHL0BMoeTtFzbZ+NpXZObvcIN
OIY8TxU8YA4PdxmBiVrMDUsD73GVaG/yp+qHAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUQmmPTsmeFZGaLPmt8/kBA/dMXrkwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1FtbVBUc21lRlpHYUxQ
bXQ4X2tCQV9kTVhyay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFb8JGb4YYVcfv18OyGimSyx
8EO8jLJu6a3efUClRX/yfRQx4T8tdOsw+J8xDtN9hXtg+4AgqKFKZ/n/D0GJ0pDy
7Jsz823XVXNv1bT80qQGaRWRJYwXu+fAgL4xzBqUbPh4S/bKVjN1IyVoTSoaCdkj
WIg9LhVS8G1bkTMULAKsWXUYu6G20OVFA4Dbxqyj7sMW2CE3Z/9FSeLWbiroMq+f
Ofcw8dSwbRpPft7h4SJMPCZ95nadUJMfwNo/mlagjyrYH9Yx3roh0bOhdHD2Jjfz
9o1RePFUePg8tO9Tav7kKxxNCEVqDicAg3pfhWR/2+ciUZRRDNKvydRyN9B+zyc=
-----END CERTIFICATE-----
Generated at Wed Jan 22 04:46:08 2025 by rpki-client on console.sobornost.net