Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2pKYIzJXbJym6oDF97SBxKFubyg.roa
File: 2pKYIzJXbJym6oDF97SBxKFubyg.roa (raw, json)
Hash identifier: 0Ryf3cked1f+wh7nA42hhtVRQXskM6aQ7PCeG6Lcoao=
Subject key identifier: DA:92:98:23:32:57:6C:9C:A6:EA:80:C5:F7:B4:81:C4:A1:6E:6F:28
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C58
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2pKYIzJXbJym6oDF97SBxKFubyg.roa
Signing time: Sun 05 May 2024 13:24:26 +0000
ROA not before: Sun 05 May 2024 13:24:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7256 (0x1c58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 13:24:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DA92982332576C9CA6EA80C5F7B481C4A16E6F28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:cc:dc:b3:c8:a6:25:b4:57:8f:5d:12:2d:
eb:c4:ff:e7:a8:1e:8c:1c:99:eb:39:db:a9:b2:60:
f1:c7:de:4e:3e:1d:3d:0f:5f:74:84:f8:a1:a9:17:
ab:58:4f:c5:b7:6f:b2:de:53:7c:03:0a:fc:fe:7a:
4c:57:b7:61:e9:8d:b7:df:89:fe:6c:b0:40:af:37:
63:dd:a6:1a:53:e3:5b:59:6b:64:65:52:18:ad:d6:
b3:17:99:13:d2:e8:9b:ed:fd:66:81:a3:ed:c9:bb:
e4:82:ec:df:21:1b:4e:e5:88:4b:0f:e4:a9:e0:5f:
3a:a2:7e:e3:43:47:f5:59:3c:27:4d:85:4d:39:8f:
f9:8e:0c:fe:61:6e:6d:d0:1b:4d:fc:bc:b5:24:75:
7f:f0:cd:10:41:ad:6c:71:87:6d:ed:45:84:d4:11:
21:0f:88:4d:91:93:56:ed:64:a4:f5:b9:73:ea:98:
f3:8a:9d:53:3e:3c:90:b3:c3:99:56:da:d4:bd:f7:
99:08:b8:4c:da:ab:8e:47:99:ef:be:9d:8d:e7:15:
c9:57:c7:29:b4:ef:22:b4:2d:5b:fd:01:40:fc:4c:
22:ef:57:96:9a:75:3d:87:6e:25:cd:14:be:60:8f:
a4:5f:4f:1c:6e:d5:60:6f:5e:f4:60:c8:ed:7e:f7:
b1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:98:23:32:57:6C:9C:A6:EA:80:C5:F7:B4:81:C4:A1:6E:6F:28
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2pKYIzJXbJym6oDF97SBxKFubyg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cb:4f:a7:0c:a5:6c:42:3b:ba:ce:fa:83:29:d8:fc:65:3f:ec:
af:b6:ec:cb:1d:37:31:9d:c7:ae:92:e6:6b:ac:b2:f9:f2:1f:
85:af:34:89:9d:b8:0a:e0:8e:af:d4:d3:55:97:f2:ee:28:6b:
48:d0:6a:41:ab:43:c5:0a:6a:3d:92:e9:ef:f1:f8:30:4f:61:
44:20:f3:53:5f:e6:77:d8:0c:07:f5:b0:c9:fb:dd:c2:66:a0:
35:73:d7:0c:06:1b:8b:e1:eb:7c:09:db:0d:a8:2d:a7:59:cd:
c3:55:96:09:bc:5a:ce:b5:dd:64:74:09:38:11:26:15:7b:d4:
b8:47:74:7c:f3:15:27:de:f2:a2:cc:3e:0d:c8:66:8a:59:37:
6c:a8:db:83:ef:f1:5a:2b:ba:9b:4a:34:4e:5f:e2:f6:8c:7c:
2c:15:2e:76:a1:5d:fe:08:23:fa:e9:c2:1c:f0:58:9d:bd:12:
ef:84:aa:84:d0:cf:aa:c4:5e:e4:c5:d8:75:de:97:08:7a:14:
93:4d:63:3b:c6:78:e8:e8:e0:90:bd:1c:96:62:e3:3b:69:57:
05:ea:fa:ca:19:4d:1f:f6:17:29:a0:f5:0a:26:cc:8d:89:7d:
24:75:a4:b5:b2:b1:9d:02:e1:bb:4f:09:7b:72:e1:df:fc:af:
fe:d7:1b:e0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHFgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUx
MzI0MjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERBOTI5ODIzMzI1NzZD
OUNBNkVBODBDNUY3QjQ4MUM0QTE2RTZGMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVD8zcs8imJbRXj10SLevE/+eoHowcmes526myYPHH3k4+HT0P
X3SE+KGpF6tYT8W3b7LeU3wDCvz+ekxXt2Hpjbffif5ssECvN2PdphpT41tZa2Rl
Uhit1rMXmRPS6Jvt/WaBo+3Ju+SC7N8hG07liEsP5KngXzqifuNDR/VZPCdNhU05
j/mODP5hbm3QG038vLUkdX/wzRBBrWxxh23tRYTUESEPiE2Rk1btZKT1uXPqmPOK
nVM+PJCzw5lW2tS995kIuEzaq45Hme++nY3nFclXxym07yK0LVv9AUD8TCLvV5aa
dT2HbiXNFL5gj6RfTxxu1WBvXvRgyO1+97GJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2pKYIzJXbJym6oDF97SBxKFubygwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzJwS1lJekpYYkp5bTZv
REY5N1NCeEtGdWJ5Zy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAy0+nDKVsQju6zvqDKdj8ZT/sr7bsyx03
MZ3HrpLma6yy+fIfha80iZ24CuCOr9TTVZfy7ihrSNBqQatDxQpqPZLp7/H4ME9h
RCDzU1/md9gMB/WwyfvdwmagNXPXDAYbi+HrfAnbDagtp1nNw1WWCbxazrXdZHQJ
OBEmFXvUuEd0fPMVJ97yosw+Dchmilk3bKjbg+/xWiu6m0o0Tl/i9ox8LBUudqFd
/ggj+unCHPBYnb0S74SqhNDPqsRe5MXYdd6XCHoUk01jO8Z46OjgkL0clmLjO2lX
Ber6yhlNH/YXKaD1CibMjYl9JHWktbKxnQLhu08Je3Lh3/yv/tcb4A==
-----END CERTIFICATE-----
Generated at Sun May 18 10:51:47 2025 by rpki-client