Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/YKSKwhlA_MLxJtvWpuTijPS61Lo.roa
File: YKSKwhlA_MLxJtvWpuTijPS61Lo.roa (raw, json)
Hash identifier: 28epfHYKEmkFcZ7efOcsOO1DHDT60qL6RPJTGp5RZnA=
Subject key identifier: 60:A4:8A:C2:19:40:FC:C2:F1:26:DB:D6:A6:E4:E2:8C:F4:BA:D4:BA
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0842
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YKSKwhlA_MLxJtvWpuTijPS61Lo.roa
Signing time: Sat 25 Jan 2025 13:55:08 +0000
ROA not before: Sat 25 Jan 2025 13:55:08 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2114 (0x842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 25 13:55:08 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=60A48AC21940FCC2F126DBD6A6E4E28CF4BAD4BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e5:b5:ce:11:7b:1b:9e:78:26:1a:58:14:c0:
b5:58:1e:18:c4:c1:4b:3a:71:2b:51:1a:34:98:20:
52:52:18:58:c1:6a:fa:58:2b:f1:bd:9b:2a:6e:f6:
a6:30:a5:b2:d1:db:e1:d9:ad:c0:6a:4b:78:fd:86:
0d:9c:d8:0e:4e:d4:eb:28:73:32:7a:d8:3c:04:f8:
af:bd:76:9e:80:2f:0f:4f:06:38:54:41:97:a4:c2:
7d:27:69:02:d6:18:04:4e:39:44:f9:77:f8:6d:80:
04:8e:37:4a:46:ac:44:d3:ec:02:05:e8:1c:66:92:
67:9a:fa:e2:af:1a:22:17:47:41:bd:7d:47:1c:10:
e9:3e:7f:82:21:78:c1:7d:1e:2c:ff:a2:ed:68:90:
54:82:7e:ab:57:23:6e:fe:7c:e5:24:b0:dc:05:ad:
29:41:7d:0f:05:4e:13:f3:dc:d1:be:2b:12:85:31:
03:53:48:e8:ec:75:f6:dd:56:62:37:2e:2d:79:12:
13:8c:4a:1c:99:c5:9f:f2:7f:43:34:1f:0e:f5:af:
aa:8b:e4:e5:82:ee:ea:68:50:8c:6e:76:37:d3:6b:
cf:9d:37:7c:95:ba:3c:75:32:49:8d:2c:38:51:66:
fe:43:32:d8:8c:da:db:cf:7a:4b:6f:5f:15:6e:46:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A4:8A:C2:19:40:FC:C2:F1:26:DB:D6:A6:E4:E2:8C:F4:BA:D4:BA
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/YKSKwhlA_MLxJtvWpuTijPS61Lo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
42:a2:7f:f2:7c:b7:50:81:47:5d:70:4c:3d:77:16:27:aa:2a:
e0:16:c1:ca:d0:b6:41:19:df:09:e6:f7:07:bc:15:17:d5:cf:
12:a2:c6:b4:44:fd:83:96:cc:f5:6e:df:e0:32:e3:52:7d:7f:
4e:91:b7:ba:f3:07:05:a0:67:66:ae:1d:50:6b:94:7e:ea:da:
e2:7b:f9:b2:8b:e7:17:4c:f1:ef:b0:0b:25:1e:cd:ac:21:97:
7b:2f:f5:1c:85:58:63:e8:d0:5d:75:40:bc:3c:f7:d8:65:9f:
0e:86:b4:e1:a4:ac:f7:84:26:c9:b4:01:30:f3:b8:a5:0f:4e:
04:32:3e:f8:42:94:b4:ae:09:f5:26:ef:3e:e8:69:2a:f4:a5:
65:28:d7:ce:23:39:66:62:f9:3b:9d:c8:b0:61:58:af:ab:14:
c8:94:16:22:36:0e:4e:a1:88:1d:df:0b:b6:fc:5f:41:12:4f:
a5:6e:1e:59:ae:97:59:b6:d7:7d:23:ee:e5:85:28:9f:57:64:
0d:b8:16:8a:40:07:68:ea:31:cb:49:45:8c:8e:82:1d:1e:3d:
9f:74:16:5f:b7:b3:2b:64:bc:aa:17:92:e7:c1:5e:c5:c3:52:
a4:7f:e2:52:f7:ca:37:70:3b:f9:b1:42:65:1c:90:e7:9f:fe:
11:9e:53:5f
-----BEGIN CERTIFICATE-----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=
Generated at Sat Jan 25 18:13:50 2025 by rpki-client on console.sobornost.net