Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/wUAvl6xVeloMrtU1lpsQ6gPDFi8.roa
File: wUAvl6xVeloMrtU1lpsQ6gPDFi8.roa (raw, json)
Hash identifier: IbcPE99xOW96vhZqhLeeyu3lO8BvaABFiwTgXMAcZ3c=
Subject key identifier: C1:40:2F:97:AC:55:7A:5A:0C:AE:D5:35:96:9B:10:EA:03:C3:16:2F
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 0780
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wUAvl6xVeloMrtU1lpsQ6gPDFi8.roa
Signing time: Thu 23 Jan 2025 13:25:02 +0000
ROA not before: Thu 23 Jan 2025 13:25:02 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1920 (0x780)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 23 13:25:02 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C1402F97AC557A5A0CAED535969B10EA03C3162F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3b:51:e1:8a:28:cf:8e:16:02:91:92:39:c3:
13:62:74:3a:03:b6:63:d4:9a:c2:10:eb:8e:d4:51:
59:7e:5c:c3:b2:78:1a:ec:0d:f5:1f:fc:00:cf:73:
27:0f:b2:03:95:63:5c:09:56:b1:55:33:fc:d3:fd:
03:ef:d8:0e:45:70:4a:03:32:4d:89:c5:d7:67:9c:
00:11:4b:57:a1:a0:6f:fa:c4:dd:03:53:13:0a:27:
21:86:bd:44:60:2c:d6:fd:d2:8a:f9:0b:65:24:0b:
f5:f7:2d:f5:c0:a7:82:9f:c5:24:f6:82:46:14:1c:
8f:a2:1f:ae:ec:80:5b:60:ae:45:ff:2f:f1:2d:4c:
65:6e:b4:43:df:07:a6:a8:8b:d5:3a:55:25:f9:93:
99:d3:4f:b2:99:ea:58:13:13:55:c9:1c:f4:61:54:
73:5b:f3:37:52:ba:54:f7:7b:e8:39:7f:72:6b:97:
61:11:f4:a8:14:59:5b:9e:20:90:7d:d7:cb:9e:c9:
a2:2d:0b:32:1a:91:91:ed:07:51:19:9b:9d:3a:e3:
a4:41:b8:19:64:af:38:c6:b4:a5:54:4a:4c:b1:46:
16:77:8f:74:ce:56:be:15:6d:36:ad:53:9c:61:86:
48:9a:b8:84:76:05:aa:0b:27:00:03:1f:ce:53:32:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:2F:97:AC:55:7A:5A:0C:AE:D5:35:96:9B:10:EA:03:C3:16:2F
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/wUAvl6xVeloMrtU1lpsQ6gPDFi8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:00:9f:7b:f5:e5:e7:af:e1:df:20:9a:f0:f2:55:d2:a7:76:
79:0c:de:4f:55:ae:02:fa:1e:a7:3f:93:df:eb:37:cb:47:78:
f5:eb:b8:c8:3c:01:b1:76:d4:e8:4f:10:e2:64:58:34:2d:f8:
8e:93:d0:69:f3:32:a4:79:86:74:63:bf:e3:ff:65:e3:99:e8:
68:0c:99:95:4d:5b:4d:6d:01:f7:78:f6:8a:1e:7d:41:07:80:
09:73:bf:7a:c8:77:7d:95:3b:3c:c2:d2:1b:b3:38:78:2c:4d:
cf:5d:b1:b9:64:cc:78:01:5f:d6:38:af:91:97:04:70:da:a4:
96:68:21:e1:4d:02:14:f8:f1:d7:6e:63:ab:91:7d:1e:e6:96:
c7:c1:b0:98:10:7b:bf:0a:8c:1d:b3:09:5e:66:ad:80:ee:df:
dc:a0:b7:30:e2:03:00:70:0c:46:5b:5f:4b:ac:dd:c0:99:5d:
23:e6:70:34:bf:68:25:b6:97:4a:ee:d3:3a:b2:d0:53:9d:39:
d5:71:3c:d3:96:54:39:5d:ab:5b:16:5d:35:49:74:6a:90:b5:
b5:f5:da:6b:26:32:39:00:99:50:60:fb:01:85:46:7d:c5:78:
bd:f1:39:85:8a:64:d5:42:e0:c3:ed:7c:b7:e0:f4:53:0d:95:
54:aa:6e:84
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:12:00 2025 by rpki-client on console.sobornost.net