Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/kZ1NbixHBoSem0Er6JXYeMvqEgo.roa
File: kZ1NbixHBoSem0Er6JXYeMvqEgo.roa (raw, json)
Hash identifier: c6y2sWHtInVXSKeHBGLmoQw8UHytGfK3YjEHZIu31DE=
Subject key identifier: 91:9D:4D:6E:2C:47:06:84:9E:9B:41:2B:E8:95:D8:78:CB:EA:12:0A
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0806
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kZ1NbixHBoSem0Er6JXYeMvqEgo.roa
Signing time: Fri 24 Jan 2025 22:55:05 +0000
ROA not before: Fri 24 Jan 2025 22:55:05 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2054 (0x806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 24 22:55:05 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=919D4D6E2C4706849E9B412BE895D878CBEA120A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5a:b8:e3:b0:d2:cb:ff:44:40:25:a6:69:5c:
f8:75:b4:ec:c8:83:11:dc:1d:6d:e0:e0:ba:68:cd:
78:0f:69:cb:bf:f9:f8:e3:fd:29:c3:2d:bb:74:38:
de:17:4e:e8:8e:72:22:34:f2:61:45:d5:bf:5e:15:
ea:f6:b8:55:9a:97:8a:67:67:47:1f:ce:37:a9:f0:
a4:50:dc:c5:18:ea:5d:e5:d9:ff:4a:50:5c:a0:4a:
1e:d7:9b:ae:87:cb:23:3e:69:1d:5f:02:86:a6:22:
a6:33:2c:26:d6:9c:f3:36:1d:9a:37:a8:07:e5:46:
08:db:bf:5b:66:85:51:45:74:cc:ad:3a:06:c4:41:
df:20:39:8a:cc:f6:ca:ef:6f:69:25:a4:ff:1a:35:
18:cb:bf:5d:d1:24:02:a2:f4:68:fa:1b:49:32:2f:
f5:64:6f:07:6d:7c:3a:50:8b:a6:90:96:db:a7:cc:
85:c0:43:c9:03:36:ee:78:6f:41:13:6d:d1:ce:fb:
9b:e8:f7:79:af:d9:d0:fc:7b:48:a0:3c:04:23:05:
80:c5:73:c5:be:63:0a:35:5f:ba:45:5d:be:f8:6f:
2b:ff:a8:ed:e1:c6:99:06:81:48:21:81:c7:ba:a8:
ce:1d:f3:e8:f0:48:61:42:08:49:c9:d6:de:ad:9c:
2e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9D:4D:6E:2C:47:06:84:9E:9B:41:2B:E8:95:D8:78:CB:EA:12:0A
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/kZ1NbixHBoSem0Er6JXYeMvqEgo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:4e:d7:66:84:fb:f5:b5:34:f3:e6:6d:c5:90:d3:f2:b8:aa:
b8:2b:f0:05:93:7e:99:f7:a1:2a:07:27:2b:75:31:c9:6e:d8:
53:7b:fb:48:26:97:cf:df:5b:a6:8d:12:76:5f:04:d0:63:e8:
10:7e:fc:91:1b:0f:7a:90:ae:f5:c7:d9:64:21:f4:82:34:e3:
88:97:2c:92:a7:6b:31:77:2f:bb:75:ac:31:28:10:e3:2a:e1:
77:12:06:81:5e:7e:cc:83:a3:59:32:76:2d:3c:3e:5b:fc:f9:
6d:b3:78:78:43:60:5a:19:88:03:d7:0b:f1:9c:8f:2f:25:44:
07:32:9f:40:65:f8:2f:1b:9c:4d:e4:22:87:31:87:4f:5e:b3:
5b:33:ac:4a:ea:fe:a0:44:0c:e8:9a:5b:3d:a1:4c:bd:9c:59:
da:1b:a1:d5:51:93:b2:23:fa:4b:90:df:de:bc:19:9d:a8:2e:
cc:bf:cb:f1:04:93:72:2b:be:eb:8f:19:7c:25:9a:7b:cb:09:
fd:15:18:f9:a4:ca:12:22:45:48:5e:0a:39:5d:86:e3:36:3e:
f5:3d:61:d2:70:58:99:a5:18:68:a0:07:63:b8:bb:0a:6d:e8:
21:39:bf:37:15:6e:f1:d1:7c:ce:8d:8e:de:d5:1c:14:da:0a:
d5:d0:61:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jan 25 13:43:36 2025 by rpki-client on console.sobornost.net