Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/fesBIFZOXnPjvbJ4BAV5GhLdVsw.roa
File: fesBIFZOXnPjvbJ4BAV5GhLdVsw.roa (raw, json)
Hash identifier: ccrcNvlRWSvqdAc9OQ1LU4HvJ2vc/iM33wRpMwT22aU=
Subject key identifier: 7D:EB:01:20:56:4E:5E:73:E3:BD:B2:78:04:05:79:1A:12:DD:56:CC
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 05C4
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fesBIFZOXnPjvbJ4BAV5GhLdVsw.roa
Signing time: Sat 18 Jan 2025 22:26:19 +0000
ROA not before: Sat 18 Jan 2025 22:26:19 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1476 (0x5c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 18 22:26:19 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7DEB0120564E5E73E3BDB2780405791A12DD56CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1b:de:44:7f:f2:17:1e:a0:17:cd:56:42:0b:
d8:34:cb:eb:fc:b0:6e:e8:fe:48:6d:b2:0b:84:57:
4a:cd:1f:e2:c2:25:66:f9:67:be:5b:72:bc:f9:a3:
d6:1d:d7:89:48:b9:cc:e2:0c:45:8e:d7:f3:7c:01:
6b:e6:e9:92:c0:18:54:11:17:19:8e:44:66:6c:3d:
6e:19:94:1f:90:de:50:b1:28:4e:ef:e4:80:e5:d2:
d1:7f:2a:66:4c:f5:2a:53:e0:fa:fe:9a:fc:16:02:
96:1b:1b:69:3e:07:cb:84:b1:c0:5d:55:a6:b9:6d:
2d:21:95:03:cc:5c:b7:b1:4d:79:58:58:00:c0:a4:
f8:be:e5:22:30:68:3b:9e:41:87:7f:cb:d6:2f:13:
18:00:3c:68:20:c5:b7:27:83:9d:4b:60:d1:72:66:
11:40:e5:00:14:c6:e4:90:34:f9:b1:6b:94:4a:13:
24:1b:59:7c:7d:51:fc:93:d3:3e:32:60:1a:0d:66:
c5:23:2c:a1:68:87:54:7b:21:4a:ec:61:b9:7e:02:
15:de:1e:11:f4:3d:6d:dc:03:02:f9:4d:56:d2:e4:
d4:32:15:df:4d:bb:e5:c9:5a:9a:58:33:79:eb:dd:
8b:b6:44:42:a4:b1:ec:08:44:d1:51:77:56:22:e5:
34:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EB:01:20:56:4E:5E:73:E3:BD:B2:78:04:05:79:1A:12:DD:56:CC
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fesBIFZOXnPjvbJ4BAV5GhLdVsw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:52:ca:af:6c:5a:c8:d0:ba:19:b6:28:e5:15:be:cc:28:d6:
10:15:2b:bd:23:ef:15:bd:fc:33:34:58:67:78:ff:fa:0e:54:
ba:29:00:8d:0d:16:ef:d9:0f:71:ab:b9:89:92:d8:05:71:45:
ab:5f:71:e8:b2:38:d2:e4:d2:2e:05:d4:b7:b2:f0:70:bf:62:
87:0d:58:a6:a2:e7:2c:9a:1f:6b:69:37:89:37:ee:7a:35:d0:
c5:60:83:64:01:d9:14:84:37:4c:7b:a6:78:09:42:00:9c:af:
2d:25:58:97:1f:82:59:e4:18:0c:23:6f:1d:25:9d:e9:ce:89:
b6:47:ec:5d:22:c5:59:29:f8:af:72:34:95:b2:f6:f3:b6:d0:
bc:2a:0a:01:7c:a2:f1:68:c1:8a:07:fb:2d:a0:06:ee:79:dc:
01:35:42:1c:86:26:73:e3:bc:ab:d6:f7:d2:c5:a8:7c:00:17:
01:aa:7d:00:3b:01:42:64:fc:6a:21:30:1a:32:a7:7e:d4:7b:
a2:4f:14:9a:2a:ec:79:ba:36:52:ef:ae:35:e5:87:c1:31:ce:
6c:62:0d:2b:39:79:ee:3f:1c:ec:30:f6:b1:dd:f1:49:0e:9d:
8d:53:5e:6c:5c:6a:4b:ac:11:f1:62:86:f0:fc:09:04:be:bb:
06:d1:24:ce
-----BEGIN CERTIFICATE-----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=
Generated at Sun Jan 19 02:18:19 2025 by rpki-client on console.sobornost.net