Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/R0EJm30bw0eSzuQnmRDwA_6C9mI.roa
File: R0EJm30bw0eSzuQnmRDwA_6C9mI.roa (raw, json)
Hash identifier: AHLSLrt/NWdmERJo0SkaBGAz9Cj+92hiQ++8e+giOKc=
Subject key identifier: 47:41:09:9B:7D:1B:C3:47:92:CE:E4:27:99:10:F0:03:FE:82:F6:62
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0550
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/R0EJm30bw0eSzuQnmRDwA_6C9mI.roa
Signing time: Fri 17 Jan 2025 17:25:15 +0000
ROA not before: Fri 17 Jan 2025 17:25:15 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 17 17:25:15 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4741099B7D1BC34792CEE4279910F003FE82F662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:b2:cb:51:92:33:0b:0a:09:c3:94:1e:1d:
93:49:4b:3d:42:d0:53:18:8a:66:40:b5:84:d7:fe:
1b:22:64:e7:9b:ab:53:7e:c5:1c:33:cd:ca:e0:80:
32:6a:eb:0d:4e:83:19:45:c8:91:e3:36:68:d1:ef:
6d:06:ac:4f:5a:b2:bf:7e:bd:95:23:8d:6d:da:87:
e8:91:be:7e:24:3b:cf:c5:29:0b:84:8a:0d:7e:27:
84:10:b0:b4:20:cc:c4:ca:f1:3d:0d:6c:7a:6d:40:
1d:7b:0b:e3:95:42:93:97:7d:46:94:1f:63:b0:50:
b4:7b:c0:73:5f:bd:64:1c:4c:eb:a6:d3:69:2c:76:
ea:ad:4e:75:48:7e:7f:97:e9:18:9c:01:20:b2:4a:
65:c8:dd:da:74:47:b7:ba:17:c3:d8:81:9e:a7:d4:
98:a3:ba:cf:d6:68:47:4b:af:91:16:df:41:e9:16:
7c:2d:46:2a:d8:17:ad:b9:54:e9:97:2f:96:66:ef:
9b:de:30:bd:1d:2f:e2:a0:34:17:24:7d:7f:51:15:
e6:af:c9:46:24:84:b8:d0:2d:d7:d8:71:79:78:45:
68:ae:27:d2:43:b2:c2:e2:ca:08:93:92:5c:be:56:
e6:11:70:fc:90:1a:76:c3:2b:1e:e3:11:56:20:fe:
c1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:41:09:9B:7D:1B:C3:47:92:CE:E4:27:99:10:F0:03:FE:82:F6:62
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/R0EJm30bw0eSzuQnmRDwA_6C9mI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
21:9d:df:4d:a7:a7:56:ed:d6:d0:28:7a:9d:13:90:3e:7c:43:
67:bc:28:30:a7:78:fc:56:85:d5:8c:1f:4a:ed:e6:81:67:94:
91:f6:2a:fa:18:0b:bf:0b:96:64:e0:95:57:35:5a:02:75:66:
45:a5:24:f6:fe:9f:18:d0:a2:aa:60:c5:f9:d3:b8:58:00:87:
7a:f4:63:25:8a:e4:6a:bd:f3:2a:48:9c:7a:a1:64:86:27:00:
e4:f1:03:76:92:f1:d3:96:42:05:98:a0:fa:45:e3:e2:1c:0e:
42:d9:66:2e:ce:e4:09:21:fe:9c:87:6e:3d:60:1c:98:a9:45:
08:41:68:2c:1f:a5:6b:50:3e:9d:15:7a:fd:18:38:28:8c:cd:
f1:cb:88:04:1d:c9:fe:15:c9:38:6f:6b:28:ab:58:d3:2a:58:
d2:aa:36:67:ed:53:c4:ab:0c:0f:89:d1:f0:6f:e1:a7:84:94:
f3:8d:e8:6e:2d:d8:ac:57:d8:a8:f7:05:50:b1:f6:0d:98:95:
73:3d:be:91:f4:d8:4d:5d:c6:76:26:20:27:48:32:9e:9b:0d:
a1:99:15:19:15:38:f0:2e:d7:91:54:d2:90:1a:57:a7:db:d8:
4f:ef:2b:b8:55:2d:a5:f2:fa:8d:c2:a7:9f:a3:7c:64:ed:2d:
e6:11:61:c4
-----BEGIN CERTIFICATE-----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=
Generated at Fri Jan 17 21:21:22 2025 by rpki-client on console.sobornost.net