Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/SFc8U3Jt5XSh8J_lNbjDbBZ4LHw.roa
File: SFc8U3Jt5XSh8J_lNbjDbBZ4LHw.roa (raw, json)
Hash identifier: nfN/jlWGPfg6sHCo0URYZd/CYYbPSfwZQTp9ROJAQXU=
Subject key identifier: 48:57:3C:53:72:6D:E5:74:A1:F0:9F:E5:35:B8:C3:6C:16:78:2C:7C
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05DE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/SFc8U3Jt5XSh8J_lNbjDbBZ4LHw.roa
Signing time: Sun 19 Jan 2025 04:54:49 +0000
ROA not before: Sun 19 Jan 2025 04:54:49 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1502 (0x5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 04:54:49 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=48573C53726DE574A1F09FE535B8C36C16782C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:be:39:fc:ea:a6:eb:e1:bc:ff:45:2c:a6:
27:93:c7:6b:9d:fb:05:1c:a5:42:eb:60:5e:e2:f9:
57:a3:b0:96:d5:42:5b:b5:10:e8:7c:e8:e9:36:ef:
b4:be:d8:d6:8a:b6:a4:9f:05:e4:75:01:fd:6c:e5:
78:45:71:14:c0:50:50:46:50:77:0e:50:1e:f8:11:
0a:58:f3:32:8e:2e:b8:07:47:b8:49:77:ea:69:71:
76:c9:df:49:3e:d0:7b:d5:41:67:05:4b:0d:43:94:
e0:47:7c:28:3e:56:5f:91:3e:3b:b0:1a:68:a4:60:
13:d9:31:00:60:ab:7e:31:86:67:66:20:54:95:05:
e4:1a:80:c3:b8:d8:ba:ae:db:c4:a2:f1:c9:66:3c:
f1:a1:33:c5:ca:f9:79:c9:d6:34:6a:b6:5e:27:a5:
b8:2c:53:57:d5:97:95:b7:b9:3a:1d:54:2b:9b:cd:
a5:b9:d5:a7:4b:5e:48:89:67:d8:62:bd:7a:b3:2d:
c0:e5:5d:97:b1:f1:7b:cd:2e:8f:49:5a:99:b6:60:
9b:53:bc:c3:58:4a:ad:b2:b9:24:87:25:f2:af:ab:
a0:b9:a0:59:50:e1:bc:ad:f3:e6:af:f0:31:bf:36:
a1:4d:ce:49:6a:5f:e5:3e:a9:77:c0:6e:92:78:c6:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:57:3C:53:72:6D:E5:74:A1:F0:9F:E5:35:B8:C3:6C:16:78:2C:7C
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/SFc8U3Jt5XSh8J_lNbjDbBZ4LHw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3d:f1:6c:ac:43:d0:3c:54:f9:1b:6b:14:b4:29:ea:48:7e:c1:
91:a3:c8:73:97:e4:63:59:4c:a2:92:3a:a1:59:5c:54:08:05:
77:66:4f:ad:b0:f2:d5:28:0d:69:b8:d7:59:4f:c0:a4:97:ba:
8f:3f:8e:2b:c2:b5:de:71:dd:04:d1:3a:dd:fc:2b:f7:16:91:
32:fa:59:9f:af:54:4e:c7:e9:55:d0:8a:7b:eb:5a:33:7c:96:
4f:67:c6:00:94:74:aa:4e:69:62:11:d1:db:4d:95:e2:4d:2d:
a0:8f:cc:d3:07:22:11:c2:27:4a:a7:c5:b9:48:2e:19:67:61:
de:3b:56:a0:eb:6c:a8:5e:f6:da:50:45:43:03:55:72:8e:de:
b8:91:85:2f:6c:ef:3c:5e:65:c3:51:7c:3f:22:62:6f:4d:95:
40:c3:6a:bf:17:81:d3:90:56:7b:a2:52:30:74:27:cb:68:52:
3f:2d:c1:0d:d8:65:f0:b2:1e:d2:01:1b:7f:14:d4:27:53:f8:
da:fb:7f:a1:90:e5:a6:d5:9e:7f:3e:75:1e:c9:60:6c:65:75:
27:8c:6c:c9:e6:10:fa:b9:48:15:bd:6d:6b:60:3d:87:54:40:
57:3b:b6:03:14:9f:d9:2d:4a:0d:6d:e2:cc:c7:00:b3:f0:ea:
60:13:6c:cd
-----BEGIN CERTIFICATE-----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=
Generated at Sun Jan 19 10:22:30 2025 by rpki-client on console.sobornost.net