Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/UKFDVn67FwY66Tsu8WT_Rh4oDwU.roa
File: UKFDVn67FwY66Tsu8WT_Rh4oDwU.roa (raw, json)
Hash identifier: y5O+gU0egonVBRWfjSjVVJ+10NGol8lR2IB4VGsbzxo=
Subject key identifier: 50:A1:43:56:7E:BB:17:06:3A:E9:3B:2E:F1:64:FF:46:1E:28:0F:05
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0A60
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UKFDVn67FwY66Tsu8WT_Rh4oDwU.roa
Signing time: Fri 31 Jan 2025 05:27:33 +0000
ROA not before: Fri 31 Jan 2025 05:27:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2656 (0xa60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 31 05:27:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=50A143567EBB17063AE93B2EF164FF461E280F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:1a:cf:d7:cf:55:82:1b:0d:69:2a:99:68:
33:e1:59:15:db:ba:a8:85:ae:d3:43:91:3b:20:e6:
29:0e:59:55:26:1c:b6:6e:1e:a6:57:a0:19:b8:68:
de:e0:27:e5:08:a3:ce:db:00:ea:4b:99:35:51:05:
4d:4a:0e:27:ef:d9:12:29:46:3e:f4:b7:3b:a3:a8:
a3:fc:6a:22:fe:21:51:1f:63:d5:9b:b0:22:5d:6b:
c1:6c:9a:c5:3c:30:a8:cb:e4:e8:25:24:0c:06:67:
f4:64:19:38:c4:aa:7f:8b:74:9e:ba:5e:03:1e:06:
72:d2:d8:07:42:27:12:7d:82:50:b1:a5:fc:b7:a8:
7b:95:40:53:36:02:9f:b4:52:aa:ef:b4:79:85:f1:
fe:70:5a:4a:7d:df:5f:23:cc:66:95:52:a5:87:98:
2d:b8:7a:1e:51:da:82:7f:5a:60:09:66:e7:95:73:
69:e6:b7:64:23:88:79:ed:70:35:82:a2:c6:82:4a:
71:e2:3b:2b:bb:72:b1:2a:6b:09:a9:a1:80:69:2e:
93:eb:7c:fd:fe:0a:66:f7:d5:af:87:56:40:a7:5a:
89:4b:11:65:5f:e2:ff:a1:45:2a:54:69:56:c7:1d:
8d:67:4d:f2:3b:e2:96:6e:63:7b:80:13:de:2e:c3:
ea:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:43:56:7E:BB:17:06:3A:E9:3B:2E:F1:64:FF:46:1E:28:0F:05
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/UKFDVn67FwY66Tsu8WT_Rh4oDwU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
47:be:54:f8:3f:9d:10:30:e1:4d:59:b6:89:01:88:95:65:54:
20:39:2e:57:40:ff:29:04:c4:4d:d4:df:5b:b3:ac:59:65:d1:
92:1f:78:36:a8:84:1b:66:14:28:35:88:85:f3:ef:70:b0:df:
39:b8:f7:94:74:6f:e0:3b:aa:49:71:da:17:fc:50:f8:7a:11:
d3:7e:d1:04:9b:33:e7:27:80:68:1e:18:eb:3b:6c:b4:f5:65:
08:39:32:55:72:33:86:dd:8c:01:8c:28:3c:ba:b1:a2:80:2b:
2a:d8:40:23:2a:50:24:6c:7d:2d:c5:e0:c4:87:38:0f:b5:d0:
38:86:66:88:de:0c:2e:40:d0:a2:37:12:3a:23:0a:8e:3e:83:
fc:2e:aa:57:cc:84:d6:3c:fc:30:95:bc:a7:71:03:c3:26:63:
fa:7b:3d:1c:68:7f:62:59:a8:8a:d3:f1:c4:62:88:1b:93:83:
00:81:b1:92:ce:5f:6c:0c:49:0b:32:99:df:80:06:78:97:9e:
ea:4f:a0:57:da:4c:a1:e7:94:66:87:79:3e:38:ba:e6:04:9d:
16:6f:7a:2b:af:27:00:48:f1:75:87:a5:ce:3d:33:44:28:9f:
d1:5d:88:5d:aa:65:ab:9d:03:4b:fe:06:4c:4e:f7:81:66:43:
5d:bf:0f:5c
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCmAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMzEw
NTI3MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDUwQTE0MzU2N0VCQjE3
MDYzQUU5M0IyRUYxNjRGRjQ2MUUyODBGMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2SxrP189VghsNaSqZaDPhWRXbuqiFrtNDkTsg5ikOWVUmHLZu
HqZXoBm4aN7gJ+UIo87bAOpLmTVRBU1KDifv2RIpRj70tzujqKP8aiL+IVEfY9Wb
sCJda8FsmsU8MKjL5OglJAwGZ/RkGTjEqn+LdJ66XgMeBnLS2AdCJxJ9glCxpfy3
qHuVQFM2Ap+0UqrvtHmF8f5wWkp9318jzGaVUqWHmC24eh5R2oJ/WmAJZueVc2nm
t2QjiHntcDWCosaCSnHiOyu7crEqawmpoYBpLpPrfP3+Cmb31a+HVkCnWolLEWVf
4v+hRSpUaVbHHY1nTfI74pZuY3uAE94uw+pTAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUUKFDVn67FwY66Tsu8WT/Rh4oDwUwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL1VLRkRWbjY3RndZNjZU
c3U4V1RfUmg0b0R3VS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEe+VPg/nRAw4U1ZtokBiJVl
VCA5LldA/ykExE3U31uzrFll0ZIfeDaohBtmFCg1iIXz73Cw3zm495R0b+A7qklx
2hf8UPh6EdN+0QSbM+cngGgeGOs7bLT1ZQg5MlVyM4bdjAGMKDy6saKAKyrYQCMq
UCRsfS3F4MSHOA+10DiGZojeDC5A0KI3EjojCo4+g/wuqlfMhNY8/DCVvKdxA8Mm
Y/p7PRxof2JZqIrT8cRiiBuTgwCBsZLOX2wMSQsymd+ABniXnupPoFfaTKHnlGaH
eT44uuYEnRZveiuvJwBI8XWHpc49M0Qon9FdiF2qZaudA0v+BkxO94FmQ12/D1w=
Generated at Fri Jan 31 13:32:43 2025 by rpki-client on console.sobornost.net