Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/pPbkhd-hUbxo6xUMGcOC07HwpUY.roa
File: pPbkhd-hUbxo6xUMGcOC07HwpUY.roa (raw, json)
Hash identifier: b8a6ZiJ4Ikauenh5GLgbkme2+YGErJdFMon5EDt/aK0=
Subject key identifier: A4:F6:E4:85:DF:A1:51:BC:68:EB:15:0C:19:C3:82:D3:B1:F0:A5:46
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0CCE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/pPbkhd-hUbxo6xUMGcOC07HwpUY.roa
Signing time: Thu 06 Feb 2025 16:55:45 +0000
ROA not before: Thu 06 Feb 2025 16:55:45 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3278 (0xcce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 6 16:55:45 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=A4F6E485DFA151BC68EB150C19C382D3B1F0A546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:63:1a:a6:82:ac:a4:0d:6f:d0:c9:c2:5f:
62:cd:4b:b2:16:03:67:b7:dd:c5:01:75:ff:20:bc:
08:17:93:49:4b:2b:86:b1:83:6b:58:78:09:cd:fa:
2f:ba:1b:b0:42:22:28:17:e5:bc:53:1e:bb:1f:8e:
0f:80:ad:a1:80:2e:72:7a:86:14:fa:30:b4:41:a3:
46:d9:68:87:ed:9a:83:52:dd:17:1c:3d:e9:88:ef:
64:06:21:92:3b:89:0a:f9:90:02:bb:57:b4:5a:59:
00:c8:d5:62:78:f9:7e:dc:00:46:de:82:8a:29:c0:
3d:0a:33:16:f2:b8:81:e8:a7:f4:6a:29:71:88:7f:
2c:8e:28:73:3e:df:0b:45:96:c7:18:bf:99:19:50:
1c:41:a8:89:8a:62:94:ad:a5:34:00:18:d0:0f:c1:
25:94:6a:ad:10:9a:85:6c:aa:c3:fb:45:93:33:4a:
e8:1e:e7:b3:01:72:ac:a7:4a:31:5b:b4:b6:78:09:
fc:81:d4:4b:5e:bc:89:95:d8:f2:4a:1c:38:f0:8b:
d7:4e:4a:c4:1d:b0:85:c4:a3:4d:a4:3f:ba:1f:d1:
0d:03:01:0f:1f:3f:18:65:b5:44:aa:1f:78:b0:2d:
01:25:eb:58:be:2e:3c:f9:62:36:c3:7b:23:43:c1:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F6:E4:85:DF:A1:51:BC:68:EB:15:0C:19:C3:82:D3:B1:F0:A5:46
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/pPbkhd-hUbxo6xUMGcOC07HwpUY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1b:3a:e5:36:a2:14:61:6f:99:6a:92:e7:58:1d:7d:ef:6f:b4:
37:20:34:02:1f:bb:4a:e8:0f:1e:56:6c:e7:35:0b:dc:13:05:
61:1a:0a:55:52:70:75:72:e8:04:68:c2:35:1b:1b:aa:6e:23:
dd:5a:86:0e:52:2f:8a:a9:e3:3f:90:8a:bf:ac:35:38:6e:ff:
16:94:29:0c:fd:8d:09:b6:00:f5:c9:7b:c3:d0:cf:ec:20:c9:
c4:42:66:b0:20:21:81:bd:35:9e:70:db:f5:21:12:68:d7:cb:
b4:d3:a2:c2:8b:ae:cc:f0:22:bb:7b:8b:74:b3:d4:48:37:ca:
f5:be:32:11:58:4d:89:90:a0:80:e0:8d:ca:15:49:cc:9b:f2:
0f:41:13:34:bb:f1:ee:d4:bf:20:72:72:a4:bb:b6:28:a3:a6:
5e:e7:66:9c:ad:31:07:3b:60:b9:a7:69:0b:41:0a:24:a4:37:
39:fa:4c:54:a2:58:5b:eb:6e:1c:f2:bd:07:99:49:19:48:ff:
e9:8b:6b:5a:d0:86:ff:62:a8:76:0c:f9:7c:15:d1:65:e8:bf:
bd:75:0f:f9:7b:3d:d2:7d:7d:88:6d:87:4b:af:20:48:85:1d:
a0:fc:b8:3f:60:2d:c6:5e:a7:74:70:f6:43:f5:98:be:67:47:
68:1c:a3:3b
-----BEGIN CERTIFICATE-----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=
Generated at Thu Feb 6 20:34:42 2025 by rpki-client on console.sobornost.net