Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/410/ws-u8D6BFjgexNEFpKZf2rz7ac4.roa
File: ws-u8D6BFjgexNEFpKZf2rz7ac4.roa (raw, json)
Hash identifier: cQYWjsro89kr4XWtIpnzS1z+aDm85ryZvy0Pshv+oto=
Subject key identifier: C2:CF:AE:F0:3E:81:16:38:1E:C4:D1:05:A4:A6:5F:DA:BC:FB:69:CE
Certificate issuer: /CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Certificate serial: 068E
Authority key identifier: 77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ws-u8D6BFjgexNEFpKZf2rz7ac4.roa
Signing time: Tue 21 Jan 2025 00:54:55 +0000
ROA not before: Tue 21 Jan 2025 00:54:55 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 139076
IP address blocks: 113.31.64.0/21 maxlen: 24
113.31.72.0/21 maxlen: 24
113.31.128.0/21 maxlen: 24
113.31.136.0/21 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1678 (0x68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7770B739B9EFCEB8BC1FDA0560E4785561F2BCBF
Validity
Not Before: Jan 21 00:54:55 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=C2CFAEF03E8116381EC4D105A4A65FDABCFB69CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:8c:5c:56:82:83:24:16:fc:e6:d5:78:0f:
b4:fa:78:25:0f:9d:fd:7d:87:86:44:19:11:b3:e4:
c5:4c:0b:4c:a9:4d:60:2a:3d:f2:c9:d7:a4:45:72:
cc:2d:b3:c8:c8:3f:52:58:cb:88:34:23:6f:e6:a3:
0c:1f:3e:73:d6:7e:63:21:7e:14:aa:37:42:7b:f2:
5b:09:1f:d0:33:3b:a6:bd:73:a9:eb:c1:69:65:94:
76:b6:e2:f4:30:82:53:e0:78:42:8b:d8:ed:ca:4c:
7d:4e:da:30:ce:43:b2:ed:bb:1b:96:dc:dc:4c:d9:
22:63:c7:35:57:bd:92:8d:12:30:b2:61:26:c5:11:
05:18:1c:23:01:b7:fc:74:b0:40:52:e3:7a:26:dc:
88:06:9a:db:66:5c:e0:1f:27:c1:c8:6f:ab:9b:cc:
01:c6:cb:ec:c5:24:08:75:5c:b3:66:3c:f9:1d:b5:
bd:73:92:f3:55:8c:50:b7:67:7c:6c:df:57:e8:f1:
43:ed:ac:ba:b8:a6:6b:1c:26:0d:95:de:0b:d5:08:
6d:8d:f7:f0:4a:9f:7c:4a:f7:f7:59:32:07:4f:34:
8b:ac:fc:e6:40:0a:1a:3f:92:53:28:a4:86:65:47:
e1:a2:04:60:24:c8:0f:c6:df:bf:9d:26:83:ca:08:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CF:AE:F0:3E:81:16:38:1E:C4:D1:05:A4:A6:5F:DA:BC:FB:69:CE
X509v3 Authority Key Identifier:
keyid:77:70:B7:39:B9:EF:CE:B8:BC:1F:DA:05:60:E4:78:55:61:F2:BC:BF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/d3C3Obnvzri8H9oFYOR4VWHyvL8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/d3C3Obnvzri8H9oFYOR4VWHyvL8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/410/ws-u8D6BFjgexNEFpKZf2rz7ac4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
113.31.64.0/20
113.31.128.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:c6:55:4b:06:33:a8:bb:28:10:cd:19:d0:6d:3f:de:14:fc:
58:d7:96:b0:eb:d9:f6:92:53:69:2e:e7:60:77:8b:05:10:0d:
38:92:1c:3c:24:4c:f7:ef:cd:73:3b:d9:00:f4:c3:43:80:b8:
7d:d0:36:d9:5a:42:8a:41:30:19:ab:ec:9c:9c:cd:e1:f6:7f:
14:6c:f3:5e:84:19:0b:92:4e:c4:98:c8:3c:96:5c:06:66:4b:
21:86:b1:38:ff:08:af:ce:88:9f:75:12:97:9a:97:02:a4:63:
35:9b:f9:4a:c2:29:97:09:85:44:51:0a:77:ab:28:18:02:c3:
93:1b:17:4a:5d:cd:de:c5:5b:25:1a:0a:8a:52:5f:ae:98:b8:
36:66:2c:9f:89:d9:33:4c:c2:97:05:29:c9:1d:9e:73:26:5a:
f1:49:df:b8:ae:ad:ef:6f:66:1c:95:65:ac:db:75:b5:ca:ec:
4d:75:bc:13:bc:09:12:4b:28:fe:c7:72:9a:1f:6d:9f:70:c0:
14:c3:99:8d:57:08:d4:8c:bc:18:f6:b4:29:5b:54:f5:24:7e:
93:6a:7f:af:37:c9:36:86:2f:20:33:49:da:05:b0:2f:52:5d:
de:cd:8c:df:88:73:e0:e0:66:5d:0e:a8:2b:7c:a3:19:64:59:
5c:50:df:ad
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzc3
MEI3MzlCOUVGQ0VCOEJDMUZEQTA1NjBFNDc4NTU2MUYyQkNCRjAeFw0yNTAxMjEw
MDU0NTVaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEMyQ0ZBRUYwM0U4MTE2
MzgxRUM0RDEwNUE0QTY1RkRBQkNGQjY5Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkeIxcVoKDJBb85tV4D7T6eCUPnf19h4ZEGRGz5MVMC0ypTWAq
PfLJ16RFcswts8jIP1JYy4g0I2/mowwfPnPWfmMhfhSqN0J78lsJH9AzO6a9c6nr
wWlllHa24vQwglPgeEKL2O3KTH1O2jDOQ7LtuxuW3NxM2SJjxzVXvZKNEjCyYSbF
EQUYHCMBt/x0sEBS43om3IgGmttmXOAfJ8HIb6ubzAHGy+zFJAh1XLNmPPkdtb1z
kvNVjFC3Z3xs31fo8UPtrLq4pmscJg2V3gvVCG2N9/BKn3xK9/dZMgdPNIus/OZA
Cho/klMopIZlR+GiBGAkyA/G37+dJoPKCNrzAgMBAAGjggH3MIIB8zAdBgNVHQ4E
FgQUws+u8D6BFjgexNEFpKZf2rz7ac4wHwYDVR0jBBgwFoAUd3C3Obnvzri8H9oF
YOR4VWHyvL8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEw
L2QzQzNPYm52enJpOEg5b0ZZT1I0VldIeXZMOC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvZDNDM09ibnZ6cmk4SDlvRllPUjRWV0h5dkw4LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNDEwL3dzLXU4RDZCRmpnZXhO
RUZwS1pmMnJ6N2FjNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwD
BARxH0ADBARxH4AwDQYJKoZIhvcNAQELBQADggEBAFvGVUsGM6i7KBDNGdBtP94U
/FjXlrDr2faSU2ku52B3iwUQDTiSHDwkTPfvzXM72QD0w0OAuH3QNtlaQopBMBmr
7JyczeH2fxRs816EGQuSTsSYyDyWXAZmSyGGsTj/CK/OiJ91EpealwKkYzWb+UrC
KZcJhURRCnerKBgCw5MbF0pdzd7FWyUaCopSX66YuDZmLJ+J2TNMwpcFKckdnnMm
WvFJ37iure9vZhyVZazbdbXK7E11vBO8CRJLKP7HcpofbZ9wwBTDmY1XCNSMvBj2
tClbVPUkfpNqf683yTaGLyAzSdoFsC9SXd7NjN+Ic+DgZl0OqCt8oxlkWVxQ360=
Generated at Tue Jan 21 05:35:24 2025 by rpki-client on console.sobornost.net