Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/sT_JWVoGeQ00Ow2TinTbJl0TNLM.roa
File: sT_JWVoGeQ00Ow2TinTbJl0TNLM.roa (raw, json)
Hash identifier: OrbUGDOvvcLg0ZemxottEO71gq1JM3HChALznT+rkrs=
Subject key identifier: B1:3F:C9:59:5A:06:79:0D:34:3B:0D:93:8A:74:DB:26:5D:13:34:B3
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 06CA
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sT_JWVoGeQ00Ow2TinTbJl0TNLM.roa
Signing time: Tue 21 Jan 2025 15:54:56 +0000
ROA not before: Tue 21 Jan 2025 15:54:56 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1738 (0x6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 15:54:56 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B13FC9595A06790D343B0D938A74DB265D1334B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:ac:0c:1b:d2:44:04:06:0e:d7:7c:cd:de:
6f:2e:62:81:d4:6e:47:a0:47:9f:47:e1:73:ef:ac:
2c:91:85:5d:57:15:9a:95:96:f6:7a:c7:09:5b:bc:
68:94:3e:34:24:93:39:ee:0e:79:ac:41:e6:40:d0:
09:5c:9a:5a:81:ba:5e:16:c3:70:a8:6c:a8:6d:06:
ff:66:fe:c7:a1:0e:c4:fb:09:8a:a3:0a:6a:9e:28:
c7:9e:9c:93:e2:57:93:45:5b:c5:af:d1:db:20:18:
86:3e:04:2c:ed:28:3e:91:d9:28:84:e5:97:36:32:
f5:2e:6c:a4:f9:fd:6d:54:17:37:6d:2b:c4:23:6d:
43:ea:9c:35:45:0e:62:0a:c7:62:d8:61:e6:9e:b2:
63:3b:4d:7e:2f:c6:15:7e:c3:94:d7:a4:3c:d0:bc:
a9:19:c6:f1:5f:4e:cc:2c:6a:8c:e9:a6:3d:ae:e5:
ae:23:14:a8:62:e8:79:43:47:e4:85:ab:1d:17:c3:
ea:90:69:85:5e:32:da:04:ce:9e:3f:87:cc:71:7c:
47:9c:01:b3:77:80:06:93:c5:df:17:34:b3:c0:f2:
19:bf:a3:51:d9:61:13:74:64:56:c9:4b:33:bc:3f:
58:ec:73:50:c2:f6:19:85:45:95:22:32:5a:c6:5d:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:3F:C9:59:5A:06:79:0D:34:3B:0D:93:8A:74:DB:26:5D:13:34:B3
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/sT_JWVoGeQ00Ow2TinTbJl0TNLM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:36:96:38:4f:e0:8f:48:04:a9:43:0a:9a:55:3b:7e:8f:17:
e9:5e:18:39:e5:27:26:cf:09:99:e0:d9:bd:84:87:0a:0f:08:
27:01:0e:3b:de:0d:b4:73:87:c1:6a:cc:3c:ce:77:5d:71:70:
81:1d:20:2a:a3:98:db:ed:32:cc:98:e9:bd:c2:bc:82:2d:c3:
d1:61:57:1f:37:47:3b:16:93:2d:9b:75:18:7a:e5:01:a6:8b:
18:47:51:cd:9a:7b:94:7b:1e:39:7d:07:fc:68:cd:7b:cc:ee:
b9:ee:f2:f3:9f:66:3c:12:c3:37:09:e6:41:4c:21:44:a5:13:
65:56:67:41:8d:b7:9e:47:e3:bf:12:b3:48:70:52:24:50:bb:
5e:ef:c6:1e:75:8f:b9:12:fc:2b:84:9a:7b:14:0f:63:a6:73:
d2:d8:20:c0:55:e9:56:22:b5:ca:2c:13:2b:e7:0b:be:0f:83:
92:f5:4b:b7:e2:ea:2e:0f:69:e7:6b:8f:99:83:10:6c:f8:21:
93:f1:25:d0:6b:86:49:fb:0e:d9:c3:1b:0b:0c:c0:d9:2b:21:
55:03:a0:01:02:fc:35:cc:1a:df:b6:eb:2d:c9:23:31:9d:bb:
bf:85:14:47:21:1c:bb:fa:d7:c0:85:f7:ca:09:13:26:03:11:
29:7d:c3:9c
-----BEGIN CERTIFICATE-----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=
Generated at Tue Jan 21 19:45:05 2025 by rpki-client on console.sobornost.net