Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/RQOyEXElhyT7JKaI7WGUGl2MkUA.roa
File: RQOyEXElhyT7JKaI7WGUGl2MkUA.roa (raw, json)
Hash identifier: 6GgM73LidcQoQ5tqDI5JG1h8cTVsNpznACWvikE702w=
Subject key identifier: 45:03:B2:11:71:25:87:24:FB:24:A6:88:ED:61:94:1A:5D:8C:91:40
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0854
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RQOyEXElhyT7JKaI7WGUGl2MkUA.roa
Signing time: Sat 25 Jan 2025 18:25:51 +0000
ROA not before: Sat 25 Jan 2025 18:25:51 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2132 (0x854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 18:25:51 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=4503B21171258724FB24A688ED61941A5D8C9140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:fa:3d:5f:47:f7:ae:0f:0f:2e:ea:36:19:
57:e2:69:73:62:03:02:1f:c5:77:66:50:56:ac:29:
82:b2:9c:83:81:40:3f:45:da:e8:d5:ae:47:61:22:
b5:34:76:64:7a:b1:cd:48:98:0e:91:5f:09:2b:e9:
86:79:43:97:42:6d:b5:7d:ba:dc:0c:00:d0:06:f0:
27:a3:bc:9e:d9:17:19:cc:e5:11:82:33:d0:9e:98:
24:5a:4d:2b:40:10:f6:00:92:bc:f9:0a:02:b9:f3:
e7:ff:22:de:c1:3a:22:86:33:97:df:bd:49:2d:b9:
d0:ac:3c:a3:c7:31:d6:ea:e7:8a:90:e5:50:91:06:
c7:f1:1b:c8:08:52:98:f9:58:db:4b:3d:8c:83:8f:
49:60:fd:5b:c7:1b:ec:a7:e4:1c:3e:cc:e3:4f:01:
32:14:f7:c3:6a:62:78:9a:51:35:d5:d7:0f:6c:b4:
72:f9:97:2f:d4:f2:38:17:07:33:78:23:4d:09:92:
9d:03:b8:ba:2b:96:99:ba:c3:d0:78:51:86:bb:f8:
cd:06:2f:7f:43:3f:89:73:20:95:74:45:7e:5f:cf:
02:62:9b:2f:b7:8b:cf:c2:15:96:d8:01:da:b2:02:
f1:92:af:68:8f:7f:1e:62:de:c7:72:7c:ab:72:4d:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:03:B2:11:71:25:87:24:FB:24:A6:88:ED:61:94:1A:5D:8C:91:40
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/RQOyEXElhyT7JKaI7WGUGl2MkUA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:78:39:d8:6d:56:c2:7a:fb:b2:58:25:ae:77:65:0f:d0:0d:
30:e4:3d:fd:c0:e6:d9:08:ab:bf:66:62:bc:2b:82:e8:9f:c4:
83:a2:9a:6b:74:bc:a1:06:2c:0b:a9:8b:76:a6:ab:e2:76:d8:
79:6f:be:23:d4:55:2c:9b:55:ce:a0:cc:24:92:f5:9e:20:25:
55:15:eb:6d:13:d4:a7:8d:17:32:ca:57:f8:92:3d:f7:d6:bd:
79:c0:65:32:77:16:50:14:34:3b:dc:01:6b:ec:02:79:8d:e3:
51:87:19:5b:0d:c5:79:af:ee:26:d1:4b:db:0a:84:8e:f3:51:
be:0d:c2:6a:c7:55:49:bd:63:6c:27:ac:80:1d:df:81:3c:a9:
e5:07:18:51:b6:a0:f9:6e:6d:0e:00:7f:dc:0a:8c:cc:02:e9:
5d:56:c6:cd:8a:88:8c:e0:b5:1e:9b:ba:15:8d:c1:b4:76:97:
97:cb:7e:55:f1:1e:6c:4f:15:0c:e7:ae:0f:29:27:53:36:98:
6c:76:0b:ad:99:b5:06:4d:74:3a:77:51:ae:94:e5:37:5f:ff:
be:e4:e6:f2:db:4e:ef:7b:6a:48:fe:ba:f4:c6:23:dc:d2:97:
6a:1c:d8:8a:a5:36:7a:5e:cb:7d:d7:86:9a:64:e5:96:89:16:
b4:41:a5:ca
-----BEGIN CERTIFICATE-----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=
Generated at Sat Jan 25 22:43:06 2025 by rpki-client on console.sobornost.net