Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-3kKpK8Cq0cyqoYVDaYLnWHsA-8.roa
File: -3kKpK8Cq0cyqoYVDaYLnWHsA-8.roa (raw, json)
Hash identifier: 5gmsnalZUHM2WuVS0aMKvMa8YyXQP2ooUa2kX/jLA7A=
Subject key identifier: FB:79:0A:A4:AF:02:AB:47:32:AA:86:15:0D:A6:0B:9D:61:EC:03:EF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1CA0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-3kKpK8Cq0cyqoYVDaYLnWHsA-8.roa
Signing time: Mon 06 May 2024 07:24:55 +0000
ROA not before: Mon 06 May 2024 07:24:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7328 (0x1ca0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 6 07:24:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB790AA4AF02AB4732AA86150DA60B9D61EC03EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:df:c6:80:2e:e7:bd:e5:4e:6d:7c:4d:6d:6c:
89:f1:30:62:7d:e6:0f:9c:e5:88:68:1b:7f:09:bf:
35:c7:82:22:72:18:5f:02:b8:d4:b2:fa:84:44:b6:
c0:5e:80:2b:9c:74:94:84:06:e6:48:e4:e1:e4:96:
f5:23:52:9a:7c:0a:99:22:14:42:72:dd:56:9f:01:
8a:aa:a6:92:54:f2:24:7f:fb:8c:87:26:e8:fc:16:
39:95:9b:f8:a2:ad:72:b2:93:de:c7:b1:f5:51:86:
69:1a:39:48:d4:34:66:95:33:1b:b9:36:8d:49:ad:
ce:70:f0:2f:71:ce:1b:50:f2:dc:68:f3:67:b0:3a:
5b:01:36:47:13:b2:f8:7f:44:94:d2:2e:69:da:ea:
3a:c9:14:6e:3e:ce:aa:7a:24:16:b5:2d:eb:01:12:
51:0f:38:49:93:40:10:15:5c:81:11:08:c3:bb:30:
96:9a:20:f2:0d:4a:9e:7a:ff:0b:45:cb:2e:dc:6f:
0e:0d:14:85:72:6b:43:54:57:c9:44:1d:7d:9b:62:
59:8c:72:84:86:f0:1a:6d:43:2d:71:1b:c8:a2:e4:
6a:4c:75:24:3d:fe:00:c3:79:2b:75:d5:0e:29:18:
0a:a8:16:28:73:f9:74:84:69:41:fa:41:0c:20:f6:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:79:0A:A4:AF:02:AB:47:32:AA:86:15:0D:A6:0B:9D:61:EC:03:EF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-3kKpK8Cq0cyqoYVDaYLnWHsA-8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:11:54:90:b8:c2:7e:e9:44:7f:d4:05:ec:b0:b8:46:23:50:
d8:a1:40:2c:7d:08:57:f5:5b:9f:dc:2b:11:98:0a:b0:93:72:
20:86:e3:10:f1:1c:34:f2:8b:94:1d:b9:93:d1:14:21:38:10:
63:64:1f:35:31:ed:9f:cb:77:cf:79:ca:ba:cb:b5:31:14:d1:
6c:90:21:d4:2c:2d:8f:46:a7:29:73:50:a7:4c:53:85:97:2a:
fb:fd:20:3f:68:5f:e4:de:4d:cb:7e:68:25:d0:d3:47:8a:96:
2f:be:4e:05:a9:e6:ca:51:29:87:99:8f:dd:a5:b2:22:7e:fb:
7b:6f:f7:14:b8:a5:dd:e8:aa:23:50:83:18:a3:fc:45:9a:0f:
ca:0e:61:fb:9b:99:04:5d:65:e2:59:8e:59:62:c6:32:38:24:
52:e5:26:54:91:4d:2f:41:83:ba:0c:18:a3:56:f7:96:ca:50:
63:e7:7a:64:5b:4f:ca:6b:f5:62:ca:4a:bc:49:99:88:e2:0c:
24:3c:40:ec:71:a3:41:ac:88:b1:cb:06:59:03:78:2f:91:47:
11:23:90:60:2d:26:69:ed:10:8d:df:f5:16:6c:60:54:ac:a2:
93:53:69:59:d2:51:98:e4:ce:c8:39:ce:db:79:ef:20:72:67:
60:73:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:59:32 2025 by rpki-client