Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/SPOgTXR-03ebqiGt5u_vUp8bo-Q.roa
File: SPOgTXR-03ebqiGt5u_vUp8bo-Q.roa (raw, json)
Hash identifier: 98ZI/y24PqwC/vK47C3gjhZHZEAS4qCeqXO81RGMGcA=
Subject key identifier: 48:F3:A0:4D:74:7E:D3:77:9B:AA:21:AD:E6:EF:EF:52:9F:1B:A3:E4
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05D4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/SPOgTXR-03ebqiGt5u_vUp8bo-Q.roa
Signing time: Sun 19 Jan 2025 02:24:45 +0000
ROA not before: Sun 19 Jan 2025 02:24:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1492 (0x5d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 02:24:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=48F3A04D747ED3779BAA21ADE6EFEF529F1BA3E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:92:f3:ea:22:1d:73:3e:02:e9:c1:f0:40:fb:
f0:f3:e4:c4:1e:ee:6f:63:77:be:16:64:8e:7e:eb:
d1:c7:7d:15:4e:52:d4:11:65:1c:cf:ab:62:2e:91:
19:5f:ae:6f:32:05:17:d1:23:aa:ad:3a:bc:d1:72:
2c:f7:9d:90:93:14:49:8e:4e:06:e4:cb:31:f3:d7:
0d:8b:69:83:50:71:f6:c7:3d:e4:39:0a:b3:35:7b:
9d:8f:fa:7e:80:8d:34:5c:37:01:ae:89:97:11:13:
eb:48:ce:2b:a4:65:a6:d5:be:52:2c:7d:54:81:10:
98:08:b3:78:12:91:a4:3e:53:63:b1:6e:ce:9c:45:
ca:70:17:9e:db:64:09:1c:d1:da:6c:b1:c7:48:98:
a0:65:87:04:38:c2:37:ce:78:9c:39:a5:3d:29:3b:
cc:e1:a9:6f:18:a0:cd:a7:60:82:60:86:34:ab:51:
9f:a6:7f:53:a0:14:7d:23:3d:5f:0c:8b:cf:fd:2b:
96:1b:2e:e6:cb:b3:37:d6:b4:63:4e:69:db:cb:cf:
4a:4e:0f:e5:10:1f:fb:cd:1c:00:eb:d1:85:93:a8:
df:29:96:92:16:99:39:a2:22:80:f5:0c:ce:e4:8b:
6a:c8:9b:e8:56:8d:70:a3:bb:0e:4b:cb:06:b5:6f:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F3:A0:4D:74:7E:D3:77:9B:AA:21:AD:E6:EF:EF:52:9F:1B:A3:E4
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/SPOgTXR-03ebqiGt5u_vUp8bo-Q.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
88:33:33:9d:3a:df:ec:f5:ba:3f:8a:d5:80:6d:cc:67:55:1b:
fd:01:f9:ff:5f:5a:bd:9d:c6:6e:31:ef:e5:51:14:97:fb:09:
ac:d9:7c:7c:3a:54:fc:da:bc:be:81:1f:d4:16:4a:99:ce:14:
b8:ce:cd:f2:e6:e6:92:e4:77:8c:cf:5c:92:d3:bf:53:e7:9c:
7c:6e:af:4f:62:2d:ad:75:2e:29:2b:ae:ea:87:1f:e4:b3:9e:
cf:4a:5c:63:32:ea:f4:61:05:87:87:1a:a9:82:f1:eb:4f:98:
64:d9:10:21:42:1e:fa:62:03:9d:85:53:79:af:15:fa:2d:58:
09:d9:06:6d:a4:96:ed:a8:e7:8a:3d:2b:1a:ea:1d:53:7c:f3:
1f:18:1f:00:5b:84:25:7a:f9:b0:1f:f6:a0:24:99:a5:ef:7e:
f5:27:7b:fe:40:fd:af:4e:f4:be:26:ea:87:fc:d5:da:01:a1:
46:36:0e:6b:7a:24:7e:bd:41:18:26:d1:28:86:99:f0:39:2c:
46:0a:f7:a7:2d:e7:df:b8:e7:fe:97:1e:a4:92:43:3b:33:b3:
81:08:a4:7d:80:54:be:d3:20:9a:5f:66:81:49:8b:34:0c:02:
96:a2:c4:60:b4:9f:a9:58:87:48:fd:45:38:f4:9e:bc:7d:87:
b9:da:b3:4d
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMTkw
MjI0NDVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDQ4RjNBMDRENzQ3RUQz
Nzc5QkFBMjFBREU2RUZFRjUyOUYxQkEzRTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhkvPqIh1zPgLpwfBA+/Dz5MQe7m9jd74WZI5+69HHfRVOUtQR
ZRzPq2IukRlfrm8yBRfRI6qtOrzRciz3nZCTFEmOTgbkyzHz1w2LaYNQcfbHPeQ5
CrM1e52P+n6AjTRcNwGuiZcRE+tIziukZabVvlIsfVSBEJgIs3gSkaQ+U2Oxbs6c
RcpwF57bZAkc0dpsscdImKBlhwQ4wjfOeJw5pT0pO8zhqW8YoM2nYIJghjSrUZ+m
f1OgFH0jPV8Mi8/9K5YbLubLszfWtGNOadvLz0pOD+UQH/vNHADr0YWTqN8plpIW
mTmiIoD1DM7ki2rIm+hWjXCjuw5Lywa1bxZ9AgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUSPOgTXR+03ebqiGt5u/vUp8bo+QwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1NQT2dUWFItMDNlYnFp
R3Q1dV92VXA4Ym8tUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAIgzM5063+z1uj+K1YBtzGdV
G/0B+f9fWr2dxm4x7+VRFJf7CazZfHw6VPzavL6BH9QWSpnOFLjOzfLm5pLkd4zP
XJLTv1PnnHxur09iLa11LikrruqHH+Szns9KXGMy6vRhBYeHGqmC8etPmGTZECFC
HvpiA52FU3mvFfotWAnZBm2klu2o54o9KxrqHVN88x8YHwBbhCV6+bAf9qAkmaXv
fvUne/5A/a9O9L4m6of81doBoUY2Dmt6JH69QRgm0SiGmfA5LEYK96ct59+45/6X
HqSSQzszs4EIpH2AVL7TIJpfZoFJizQMApaixGC0n6lYh0j9RTj0nrx9h7nas00=
Generated at Sun Jan 19 07:01:03 2025 by rpki-client on console.sobornost.net