Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/fi1N4Lf8ryQqBUke8Plq3L-Adzk.roa
File: fi1N4Lf8ryQqBUke8Plq3L-Adzk.roa (raw, json)
Hash identifier: ajfPN3dNYvDpPr1cWyWey74nObYPUFpV4B+UhhgdL/8=
Subject key identifier: 7E:2D:4D:E0:B7:FC:AF:24:2A:05:49:1E:F0:F9:6A:DC:BF:80:77:39
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0B6E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fi1N4Lf8ryQqBUke8Plq3L-Adzk.roa
Signing time: Mon 03 Feb 2025 00:55:37 +0000
ROA not before: Mon 03 Feb 2025 00:55:37 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2926 (0xb6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 3 00:55:37 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=7E2D4DE0B7FCAF242A05491EF0F96ADCBF807739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:60:24:f0:8f:91:3f:90:85:ef:d5:83:ed:95:
42:ee:ec:48:e4:dc:d5:62:d3:41:11:16:be:b6:72:
37:cc:75:8a:7a:4c:c3:3c:04:ac:39:0b:2c:fb:29:
fb:82:e1:1b:7e:ae:1d:f8:18:c6:fa:ae:63:e5:97:
dc:7e:06:e0:bc:1c:7c:5d:05:46:cf:ed:c6:51:52:
f5:07:5e:e9:7d:79:96:50:c5:f4:55:20:43:ff:e8:
f9:a9:f8:19:4f:7d:0c:91:8d:84:cd:4d:fb:dd:e3:
cd:8c:eb:15:76:b4:65:00:23:b8:8b:8a:b7:9b:0a:
82:5a:35:4f:10:74:34:c0:2b:25:11:c6:22:12:51:
b7:3c:94:15:ea:6b:03:59:f7:ec:55:a8:ba:d6:36:
d1:9e:43:6c:14:51:f5:db:fb:70:61:c9:fc:d1:df:
29:85:24:69:b7:a5:53:a8:82:8a:0a:fe:a1:4f:90:
f4:72:1e:54:a9:29:c9:02:3a:c9:6c:11:28:62:5b:
20:57:e0:d7:14:23:6e:8e:7d:6c:79:71:bd:1c:2a:
7f:95:66:82:30:41:b3:db:52:1c:bb:dc:4f:f4:f8:
5e:0f:5e:3a:67:cc:1f:63:ca:3d:7c:d2:12:66:c8:
95:7f:85:b8:e5:87:38:38:f7:22:a3:b1:f6:80:8c:
ab:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:2D:4D:E0:B7:FC:AF:24:2A:05:49:1E:F0:F9:6A:DC:BF:80:77:39
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/fi1N4Lf8ryQqBUke8Plq3L-Adzk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
34:d8:a1:3a:73:79:b9:19:da:06:f9:b8:b1:df:6f:42:14:b6:
ce:23:5c:3b:91:18:1e:23:7d:f6:b9:57:39:7b:c6:fc:e7:0c:
57:a7:3a:57:8d:7a:aa:85:72:01:c8:67:68:6f:77:e9:fd:cf:
14:6d:73:5a:c8:a6:de:5b:78:7a:85:45:fa:a3:5a:cc:61:91:
f0:c7:88:e5:ec:84:62:a2:a1:69:80:91:92:25:d3:3d:0b:de:
fd:a8:f7:09:46:ac:05:8d:68:6e:10:f1:19:02:ff:41:42:33:
0e:34:22:03:d4:f4:e8:57:ce:74:bf:3a:14:6f:3a:c1:54:c6:
0e:2d:63:91:89:d0:b8:5b:7e:56:58:bc:20:a8:21:61:e3:1d:
2a:9c:ad:0d:6d:d8:aa:cf:cc:44:c0:ca:75:b1:c2:a0:5e:17:
5d:81:7e:e7:4e:2c:70:9c:ad:fc:41:b4:ff:16:93:ee:ea:52:
9f:ce:da:a5:99:8c:70:97:ff:b7:79:d8:df:3c:9a:3c:1f:dd:
17:7f:14:f8:dd:23:d4:ac:03:03:ac:1e:fd:05:60:82:72:08:
13:25:d2:a7:4c:d8:86:16:43:0a:60:8d:10:5a:a2:c3:f4:e1:
37:74:57:6e:25:df:ba:59:97:00:6e:ec:c5:8e:e1:ad:d2:94:
0e:13:a5:09
-----BEGIN CERTIFICATE-----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=
Generated at Mon Feb 3 08:27:12 2025 by rpki-client on console.sobornost.net