Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/0nCrHw3yjIOa8r7z2IT2GNDNLiI.roa
File: 0nCrHw3yjIOa8r7z2IT2GNDNLiI.roa (raw, json)
Hash identifier: MDhOIXfOIz4EIPpLGF9occTTDhALUBId2FGkAKEheWU=
Subject key identifier: D2:70:AB:1F:0D:F2:8C:83:9A:F2:BE:F3:D8:84:F6:18:D0:CD:2E:22
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1250
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0nCrHw3yjIOa8r7z2IT2GNDNLiI.roa
Signing time: Mon 08 Apr 2024 19:23:00 +0000
ROA not before: Mon 08 Apr 2024 19:23:00 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4688 (0x1250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 19:23:00 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D270AB1F0DF28C839AF2BEF3D884F618D0CD2E22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a9:23:f6:21:90:27:f7:c1:65:97:12:7b:4a:
9b:f7:02:1c:ba:b5:1d:5c:b5:2a:3f:fa:82:40:64:
fa:41:56:d6:5c:fd:a5:f3:0f:5f:44:3a:64:ca:69:
13:00:ef:d7:07:a2:ea:57:3a:a6:e1:0e:f8:9f:26:
2b:f9:9e:61:1c:1e:bb:6e:b9:35:ed:cb:00:fa:9a:
6a:18:a6:dc:f8:d6:2d:5c:47:cc:82:9f:e6:b3:a1:
50:29:a7:31:e9:c8:3c:2e:95:5e:44:39:4e:66:0f:
18:14:bb:bc:75:a5:2f:87:3d:e3:22:0d:4e:33:4d:
ea:25:a0:ab:22:fc:6e:19:2c:1f:67:a5:cc:e5:2b:
94:c9:2c:df:31:55:88:fd:83:a9:78:57:27:0d:dc:
6b:8c:28:40:fb:5b:81:f3:39:f3:f7:a9:90:5f:f6:
af:ca:f4:24:75:1c:a0:13:7a:5a:89:be:5e:84:5a:
1f:3b:a1:2f:f6:93:29:5d:f7:52:60:04:79:6f:87:
97:19:e8:db:2d:57:a9:8e:2b:3b:60:02:de:da:e8:
43:aa:9e:04:19:d3:85:a3:ed:cf:a8:a2:0a:a9:6b:
2e:2d:c9:69:e5:90:c5:89:8c:d6:6c:9a:8e:e1:47:
b5:e5:a7:29:38:ac:2d:6b:f6:a9:7b:ba:02:2a:4a:
83:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:70:AB:1F:0D:F2:8C:83:9A:F2:BE:F3:D8:84:F6:18:D0:CD:2E:22
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0nCrHw3yjIOa8r7z2IT2GNDNLiI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:e0:cd:26:8d:68:fc:6b:7b:0b:37:4a:6e:6b:3a:22:07:63:
fe:57:ac:7d:52:60:cf:30:a6:e3:92:b5:76:f4:fd:01:50:e6:
cc:15:d7:c8:dd:23:f5:d7:f3:3b:5f:be:d1:f9:ab:36:9e:01:
b7:c8:51:d9:2c:3b:35:37:31:59:c6:c5:b9:cb:6d:38:6d:a7:
ad:1d:d1:55:c3:26:f1:c3:00:43:ac:27:7b:09:c2:c2:cb:1e:
c2:ce:51:ba:61:92:47:a1:0e:8e:ea:04:ae:7e:0b:3f:9b:55:
45:69:ab:00:84:70:02:b7:91:a0:53:ef:90:80:cd:c9:b7:c6:
a4:2b:92:86:42:1c:74:7d:8b:fc:11:09:d9:be:f1:5f:34:e8:
19:25:f6:a5:90:9d:3b:95:c6:12:7b:d3:bb:17:ae:5a:50:b8:
2f:22:f1:c1:ce:d5:a0:e1:f5:7e:ce:1a:09:fb:1a:16:c7:12:
54:c7:c3:f1:66:46:7e:37:d7:a8:2b:cb:5f:d2:44:02:c0:dc:
27:bf:be:63:8e:8c:a2:f1:91:de:d9:02:79:4b:99:c7:7a:37:
19:62:cf:2b:13:74:0a:66:54:ad:f2:f5:1d:58:7d:19:46:43:
14:63:f0:51:e8:a9:28:40:32:8f:71:7a:88:34:22:cb:c6:17:
66:50:99:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:41:05 2025 by rpki-client