Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/2u0OPRF0RYNA5Cx6jnE-lldaorA.roa
File: 2u0OPRF0RYNA5Cx6jnE-lldaorA.roa (raw, json)
Hash identifier: aTLQhZ3zFOGL87nrswM0LmFRpm/oObamBbnMGzZ+uCw=
Subject key identifier: DA:ED:0E:3D:11:74:45:83:40:E4:2C:7A:8E:71:3E:96:57:5A:A2:B0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BB6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2u0OPRF0RYNA5Cx6jnE-lldaorA.roa
Signing time: Fri 03 May 2024 20:54:11 +0000
ROA not before: Fri 03 May 2024 20:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7094 (0x1bb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 20:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DAED0E3D1174458340E42C7A8E713E96575AA2B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:d7:d6:16:3d:b1:3a:b7:ce:1d:79:4d:ae:
1f:4d:16:ac:91:1b:f3:f6:af:d6:5f:91:cc:91:49:
53:f4:3d:90:41:72:1f:a3:7c:c4:0a:42:9e:ce:36:
14:38:fa:01:dd:12:bd:db:6c:88:df:12:0c:e9:1d:
07:2b:40:39:cc:7b:34:fd:90:21:46:54:0e:66:d6:
ed:a5:6c:5e:15:62:72:be:70:83:9b:25:00:69:70:
6b:a1:8a:48:cf:d6:47:2b:11:e5:b4:8b:d6:2d:68:
82:1f:ec:43:b0:6b:37:a6:47:29:63:42:cb:e5:86:
0b:1b:4e:2c:54:da:66:da:90:1c:4f:1c:cc:f3:b4:
72:7f:71:c6:b9:dc:e7:e2:0e:92:6c:7a:ba:ab:9b:
53:93:06:54:40:98:70:97:76:e6:47:e4:b2:9b:8e:
4f:05:68:63:fe:f4:df:86:e9:96:a2:5d:de:b7:44:
19:65:c2:a8:b4:0f:94:a3:80:76:7a:88:c5:ba:2b:
ef:0e:c5:0c:c3:2a:9f:f5:2b:b7:79:df:92:6f:52:
51:ee:90:1b:d2:8d:bf:f7:18:40:ed:e2:13:b7:ec:
30:95:8c:3c:73:d6:0f:e5:11:c0:02:bf:f2:45:d8:
54:5b:fb:b8:e8:7a:ca:d1:32:11:23:43:ee:f8:71:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:0E:3D:11:74:45:83:40:E4:2C:7A:8E:71:3E:96:57:5A:A2:B0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/2u0OPRF0RYNA5Cx6jnE-lldaorA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:50:07:e9:8a:5e:fe:14:f4:2e:91:df:d8:2d:6e:aa:e6:56:
ce:70:75:ce:fb:f2:88:5c:49:ae:16:9e:92:99:32:b7:f0:f4:
33:c2:1b:68:d2:0b:4e:ae:79:8b:06:7f:39:e4:18:33:95:9f:
38:78:7f:a5:f3:ea:65:cf:ff:33:96:ee:a4:2a:74:fd:28:62:
36:53:fe:7e:0a:ce:d8:0d:97:ab:33:d5:4c:45:f0:b7:8d:e8:
a5:d2:e5:99:c1:5d:b9:e8:32:33:40:4e:14:06:c3:f9:58:d8:
2a:cf:e8:8e:d0:c8:be:3a:5a:1a:8a:64:43:98:5e:fd:dd:85:
09:99:77:3e:86:3a:07:e7:7f:2d:19:61:aa:98:d6:8d:67:68:
a2:e1:17:90:2c:e1:73:ce:66:f1:50:e5:79:fb:ea:26:20:ff:
97:bd:49:64:2c:00:7f:67:bd:b3:84:57:14:97:d9:3f:9a:b9:
04:12:b5:8d:04:a7:8a:ea:d5:53:5c:bf:e1:19:2f:cb:63:fa:
6d:64:17:29:11:46:d9:4f:30:c1:51:7d:a8:2c:7e:7b:44:e1:
da:de:53:7c:9d:fb:84:55:9e:dd:ca:b8:dd:94:af:20:a5:7d:
00:95:6f:07:08:75:89:78:83:0f:23:1b:05:b0:62:2a:76:02:
ea:b6:f4:28
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG7YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMy
MDU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKERBRUQwRTNEMTE3NDQ1
ODM0MEU0MkM3QThFNzEzRTk2NTc1QUEyQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsz9fWFj2xOrfOHXlNrh9NFqyRG/P2r9ZfkcyRSVP0PZBBch+j
fMQKQp7ONhQ4+gHdEr3bbIjfEgzpHQcrQDnMezT9kCFGVA5m1u2lbF4VYnK+cIOb
JQBpcGuhikjP1kcrEeW0i9YtaIIf7EOwazemRyljQsvlhgsbTixU2mbakBxPHMzz
tHJ/cca53OfiDpJserqrm1OTBlRAmHCXduZH5LKbjk8FaGP+9N+G6ZaiXd63RBll
wqi0D5SjgHZ6iMW6K+8OxQzDKp/1K7d535JvUlHukBvSjb/3GEDt4hO37DCVjDxz
1g/lEcACv/JF2FRb+7joesrRMhEjQ+74cd/FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU2u0OPRF0RYNA5Cx6jnE+lldaorAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzJ1ME9QUkYwUllOQTVD
eDZqbkUtbGxkYW9yQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAd1AH6Ype/hT0LpHf2C1uquZWznB1zvvy
iFxJrhaekpkyt/D0M8IbaNILTq55iwZ/OeQYM5WfOHh/pfPqZc//M5bupCp0/Shi
NlP+fgrO2A2XqzPVTEXwt43opdLlmcFduegyM0BOFAbD+VjYKs/ojtDIvjpaGopk
Q5he/d2FCZl3PoY6B+d/LRlhqpjWjWdoouEXkCzhc85m8VDlefvqJiD/l71JZCwA
f2e9s4RXFJfZP5q5BBK1jQSniurVU1y/4Rkvy2P6bWQXKRFG2U8wwVF9qCx+e0Th
2t5TfJ37hFWe3cq43ZSvIKV9AJVvBwh1iXiDDyMbBbBiKnYC6rb0KA==
-----END CERTIFICATE-----
Generated at Sun May 18 15:57:50 2025 by rpki-client