Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/rkwvpa-LBUSis-ODvEvocYOedFs.roa
File: rkwvpa-LBUSis-ODvEvocYOedFs.roa (raw, json)
Hash identifier: TA9TRZFcCECDDMTzDwej1gsbIqcghU847uWZm1AGArg=
Subject key identifier: AE:4C:2F:A5:AF:8B:05:44:A2:B3:E3:83:BC:4B:E8:71:83:9E:74:5B
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 079A
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/rkwvpa-LBUSis-ODvEvocYOedFs.roa
Signing time: Thu 23 Jan 2025 19:55:03 +0000
ROA not before: Thu 23 Jan 2025 19:55:03 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1946 (0x79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 19:55:03 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=AE4C2FA5AF8B0544A2B3E383BC4BE871839E745B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:a3:42:fc:d3:50:a1:ad:be:56:80:1b:cf:
63:2b:c5:c9:cd:f8:c5:ce:64:87:a6:3d:02:fe:80:
2b:7b:c0:f4:44:bb:0c:2f:a6:51:40:e0:9c:f3:30:
e3:40:c6:db:b5:d4:79:09:ad:a8:8d:08:75:1f:cf:
4d:9b:af:13:93:35:04:fc:6e:78:67:4b:0d:c8:bd:
fd:4e:c5:71:db:cc:44:55:d7:93:67:fd:88:68:63:
09:44:ca:a2:83:aa:0a:47:1a:9b:18:5c:9d:86:27:
b3:b6:7a:73:20:ce:ce:12:8d:21:4f:45:6f:9a:2a:
78:bf:25:75:72:e2:13:08:50:b6:63:82:20:69:6e:
58:8d:86:43:2d:17:7a:32:d2:b5:cb:ac:b9:4e:8a:
f8:99:ce:b6:ff:b8:a7:1d:35:69:f6:77:d1:79:b7:
dd:c4:35:e7:f7:67:c6:5f:58:82:81:54:d2:18:a6:
c1:be:5e:26:90:f2:d0:80:a5:0e:75:76:3b:df:01:
b8:1f:41:4d:03:f3:4e:ea:e7:66:88:7a:53:d5:37:
db:0a:66:e8:cd:04:45:47:33:9d:34:7d:36:dc:0d:
43:48:30:3a:90:d2:54:ad:54:bd:3a:74:2d:3c:ee:
c3:8b:73:51:f3:25:b0:00:4d:96:63:5d:81:b2:b0:
94:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4C:2F:A5:AF:8B:05:44:A2:B3:E3:83:BC:4B:E8:71:83:9E:74:5B
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/rkwvpa-LBUSis-ODvEvocYOedFs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
25:ba:36:87:af:b5:81:ab:93:67:9b:9d:26:ca:42:34:74:63:
83:05:ca:7f:45:08:fe:d9:ac:ee:28:54:70:f6:21:5f:34:a2:
df:c2:85:bc:2d:65:06:e4:42:0e:d4:22:26:8e:c6:71:84:56:
23:c1:cc:a1:74:5d:6e:92:de:18:f1:71:8f:37:cd:37:8a:4b:
84:95:b8:21:75:93:9d:e0:59:64:d2:6c:fa:77:e4:32:1f:39:
d2:89:79:0d:17:73:52:64:8b:92:11:2f:f1:ed:20:ed:9c:49:
65:46:81:cc:c1:04:41:52:ca:32:34:09:8c:5d:d8:04:04:85:
89:b3:be:e0:3b:b1:18:47:4d:b9:bc:3c:b7:ed:c8:88:60:74:
74:71:67:74:8a:5e:23:0e:07:0a:7a:0b:fd:24:3e:bf:31:44:
10:8e:03:cf:53:e2:36:04:5e:83:db:df:dc:b6:c7:d5:82:b9:
2a:72:7f:b3:4a:4d:13:fd:64:44:58:ef:44:08:a3:10:2f:ba:
f5:f1:8a:3e:43:bd:86:0a:cd:1b:7c:33:c1:cf:a4:61:fc:33:
06:fd:30:cb:3b:43:22:38:31:62:08:c8:3b:d6:11:13:99:da:
68:ab:a4:65:f9:96:23:9b:2e:ec:25:e6:e1:7a:72:a1:42:70:
3d:59:92:2f
-----BEGIN CERTIFICATE-----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=
Generated at Thu Jan 23 23:38:53 2025 by rpki-client on console.sobornost.net