Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/tVwm2Jn4fGk8N6eoulYbGzaZKYA.roa
File: tVwm2Jn4fGk8N6eoulYbGzaZKYA.roa (raw, json)
Hash identifier: AbxGifs2SQyAy75y5r1192Qv5zuyidoQ1gFb+wzU9AQ=
Subject key identifier: B5:5C:26:D8:99:F8:7C:69:3C:37:A7:A8:BA:56:1B:1B:36:99:29:80
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0AAE
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/tVwm2Jn4fGk8N6eoulYbGzaZKYA.roa
Signing time: Sat 01 Feb 2025 00:55:33 +0000
ROA not before: Sat 01 Feb 2025 00:55:33 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2734 (0xaae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Feb 1 00:55:33 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=B55C26D899F87C693C37A7A8BA561B1B36992980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:07:44:bf:db:db:5f:e8:49:f5:3e:c8:61:23:
e2:ae:53:3a:1f:88:b2:b1:02:0c:0a:ee:95:21:cf:
af:9f:7f:02:d3:c3:71:29:d2:0d:28:4c:b6:08:1b:
6a:66:60:1f:ad:e1:1e:5f:37:1c:1e:99:df:dc:26:
ee:d0:d9:54:d4:ac:19:2e:7c:f9:16:7c:41:fe:df:
2c:9c:bb:fb:dc:e5:f8:28:b9:15:dd:0e:6d:33:1b:
ee:e1:e1:fa:c2:1b:e6:34:ab:60:89:b5:28:f0:b7:
44:95:f0:bb:51:b0:b3:45:76:47:5b:86:47:2d:dd:
b8:2a:c0:6f:1d:57:9f:a6:45:03:f3:d5:62:75:dc:
a4:6f:3f:06:07:14:09:3e:91:88:33:e6:01:f5:f7:
fb:17:a7:58:0a:1f:8b:7a:bc:16:a4:8b:26:d6:ff:
9e:c4:1a:8c:56:c0:39:fc:63:b5:28:eb:27:e5:36:
67:a5:c2:8d:d4:1c:67:9d:1a:36:2c:4c:20:fb:32:
da:b2:18:55:7e:08:16:9b:7c:5a:c6:74:f9:23:e3:
07:28:a7:cf:32:9a:b0:40:09:ee:70:45:c0:f9:c3:
f0:15:76:93:7c:ac:89:d9:bb:3a:18:24:30:ae:1e:
d0:3a:62:cb:cb:66:cc:5d:29:d9:24:35:97:5a:4f:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:26:D8:99:F8:7C:69:3C:37:A7:A8:BA:56:1B:1B:36:99:29:80
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/tVwm2Jn4fGk8N6eoulYbGzaZKYA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
4c:37:dd:fb:12:08:fb:97:a2:a1:62:d7:37:fc:39:ec:7e:64:
ab:11:f1:05:7e:9c:b4:c6:cf:8d:dc:88:ec:c0:1c:b5:43:ad:
7f:ef:b5:59:3c:38:a0:af:17:d1:5b:5e:dd:33:5a:f0:2c:97:
29:24:b7:cb:a4:53:eb:69:1a:a1:70:2a:5f:ae:56:47:b6:3f:
e9:73:04:f0:36:bf:44:67:d0:11:eb:41:4a:e8:85:8a:97:88:
b7:1d:eb:04:8e:7e:9e:98:98:66:a5:3b:f2:a8:de:e2:a8:12:
2e:77:0d:31:fd:97:ff:83:ab:da:47:47:5d:0c:fd:d4:66:38:
d4:b2:17:83:ab:0c:48:26:13:f1:18:a6:7d:27:6b:3c:ec:99:
84:7e:08:47:f5:9b:5d:14:11:61:25:f1:cf:6e:db:96:88:68:
f6:b5:fc:ce:0b:d8:d2:93:bf:c4:8b:b8:fa:05:dd:e1:74:80:
d2:de:ac:a0:34:12:fd:b3:5c:70:c1:b6:5b:40:70:87:15:00:
ff:60:eb:6a:02:ca:02:53:ea:ac:9d:6c:6a:53:08:2b:55:15:
36:29:01:7c:d3:70:a6:ff:2a:ff:97:34:8b:7e:61:8a:6d:82:
51:fe:1e:af:4c:98:16:be:3a:e5:00:1c:ed:de:9d:ea:20:c9:
96:e4:4c:dc
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICCq4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAyMDEw
MDU1MzNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEI1NUMyNkQ4OTlGODdD
NjkzQzM3QTdBOEJBNTYxQjFCMzY5OTI5ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1B0S/29tf6En1PshhI+KuUzofiLKxAgwK7pUhz6+ffwLTw3Ep
0g0oTLYIG2pmYB+t4R5fNxwemd/cJu7Q2VTUrBkufPkWfEH+3yycu/vc5fgouRXd
Dm0zG+7h4frCG+Y0q2CJtSjwt0SV8LtRsLNFdkdbhkct3bgqwG8dV5+mRQPz1WJ1
3KRvPwYHFAk+kYgz5gH19/sXp1gKH4t6vBakiybW/57EGoxWwDn8Y7Uo6yflNmel
wo3UHGedGjYsTCD7MtqyGFV+CBabfFrGdPkj4wcop88ymrBACe5wRcD5w/AVdpN8
rInZuzoYJDCuHtA6YsvLZsxdKdkkNZdaT4svAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUtVwm2Jn4fGk8N6eoulYbGzaZKYAwHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3RWd20ySm40ZkdrOE42
ZW91bFliR3phWktZQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAEw33fsSCPuXoqFi1zf8Oex+
ZKsR8QV+nLTGz43ciOzAHLVDrX/vtVk8OKCvF9FbXt0zWvAslykkt8ukU+tpGqFw
Kl+uVke2P+lzBPA2v0Rn0BHrQUrohYqXiLcd6wSOfp6YmGalO/Ko3uKoEi53DTH9
l/+Dq9pHR10M/dRmONSyF4OrDEgmE/EYpn0nazzsmYR+CEf1m10UEWEl8c9u25aI
aPa1/M4L2NKTv8SLuPoF3eF0gNLerKA0Ev2zXHDBtltAcIcVAP9g62oCygJT6qyd
bGpTCCtVFTYpAXzTcKb/Kv+XNIt+YYptglH+Hq9MmBa+OuUAHO3eneogyZbkTNw=
Generated at Sat Feb 1 05:38:08 2025 by rpki-client on console.sobornost.net