Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/WY1LaDPsvQIUG0VvYerbR5PYsWE.roa
File: WY1LaDPsvQIUG0VvYerbR5PYsWE.roa (raw, json)
Hash identifier: aLeEfi7AhkO8ZaM2rWL42/09EoC6gpINEDx/BikxCss=
Subject key identifier: 59:8D:4B:68:33:EC:BD:02:14:1B:45:6F:61:EA:DB:47:93:D8:B1:61
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05CC
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/WY1LaDPsvQIUG0VvYerbR5PYsWE.roa
Signing time: Sun 19 Jan 2025 00:24:48 +0000
ROA not before: Sun 19 Jan 2025 00:24:48 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1484 (0x5cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 19 00:24:48 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=598D4B6833ECBD02141B456F61EADB4793D8B161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:aa:b9:9f:e5:4a:ab:b8:33:3e:63:ea:4d:
4c:ee:74:dc:70:a1:99:01:a3:66:23:7d:36:4c:d9:
68:0b:73:ad:ee:a3:b5:75:cb:d5:c0:bc:a5:96:64:
a7:12:67:92:9d:7a:1c:1b:46:fc:57:65:28:d9:83:
b8:04:0c:54:2e:e2:ca:66:e9:71:a4:bd:9a:94:8b:
77:f2:9e:ba:ba:66:4c:fc:e1:11:0d:8b:37:a2:dd:
06:f9:1b:0d:19:a0:32:9f:67:70:cf:d8:27:1a:97:
a6:1b:10:7e:80:dc:18:a5:e1:0b:b7:2c:dc:fd:b3:
d4:7e:97:45:aa:eb:47:d8:3e:6b:85:0c:f2:e3:2a:
7a:49:70:c4:7d:73:e1:9b:92:61:6d:c3:6e:63:3a:
1a:d4:b8:ed:10:9a:cc:fa:b0:de:67:cc:75:a4:cc:
89:1d:25:87:0e:f5:c2:69:7e:17:ce:0b:bc:47:d1:
33:a5:4a:8f:d8:3e:db:c3:99:99:51:ba:cf:07:40:
b2:a4:14:93:4a:77:b3:66:31:4f:00:45:ab:eb:54:
0c:54:9d:1d:fd:eb:28:99:7e:e8:0f:0c:6c:2c:c9:
2c:b0:83:8c:32:cf:51:e9:ac:88:9e:03:c8:f3:8e:
67:18:0e:44:c5:c5:b8:2a:6b:70:c3:93:85:ee:74:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:4B:68:33:EC:BD:02:14:1B:45:6F:61:EA:DB:47:93:D8:B1:61
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/WY1LaDPsvQIUG0VvYerbR5PYsWE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
49:73:c7:ce:4f:23:89:af:3e:fb:88:85:fd:58:37:2b:c6:b8:
ff:5e:27:20:ca:74:b4:f8:11:16:be:a1:64:47:7a:a6:86:34:
5c:76:d1:b1:77:cb:bc:e3:66:e5:f2:5e:73:59:97:f8:02:51:
99:ed:3e:df:2f:78:5c:6b:19:6e:d1:eb:de:3e:7a:8f:4c:fb:
30:ba:6c:7a:45:59:db:04:e8:9e:80:76:dc:6c:90:c8:b4:b5:
57:d0:78:94:48:59:b1:36:49:90:64:81:a6:b7:e0:f4:8a:04:
d8:73:0e:ff:c9:ce:ea:a9:5b:41:66:47:4d:44:9e:11:ca:bf:
44:0b:49:07:91:47:ca:e3:e2:7c:22:a6:ac:91:d0:b7:0f:f2:
d9:2e:b7:60:c1:24:75:e3:3a:fa:75:46:2a:68:a9:c3:50:73:
30:f5:5f:b9:6f:ab:d1:b4:82:d0:65:2c:53:c5:aa:ea:d3:0d:
f7:71:85:c1:a4:24:5f:99:9d:1f:d4:55:6f:35:b2:96:16:78:
05:f4:88:55:ed:aa:2b:2c:88:64:cb:b0:50:8b:45:08:c2:0a:
a8:a9:a8:6d:df:38:20:45:e7:4a:df:89:bf:e9:8c:16:1d:2d:
8d:e2:8d:fb:51:31:be:cb:6f:ff:df:1d:6b:ce:e3:65:cf:ed:
02:7c:f0:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jan 19 04:29:05 2025 by rpki-client on console.sobornost.net