Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/3D2Ptk2GInz6AaRCe56q88vrKDI.roa
File: 3D2Ptk2GInz6AaRCe56q88vrKDI.roa (raw, json)
Hash identifier: K9M2bGzkMd7iu0Mx+cpBYK8xLi4TqZge3kzmt36496k=
Subject key identifier: DC:3D:8F:B6:4D:86:22:7C:FA:01:A4:42:7B:9E:AA:F3:CB:EB:28:32
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 13FC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3D2Ptk2GInz6AaRCe56q88vrKDI.roa
Signing time: Sat 13 Apr 2024 06:23:14 +0000
ROA not before: Sat 13 Apr 2024 06:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5116 (0x13fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 06:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=DC3D8FB64D86227CFA01A4427B9EAAF3CBEB2832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6d:58:a2:f0:5a:af:db:b4:6b:13:1b:79:8d:
c1:ca:05:a3:ff:2f:43:ee:34:7b:aa:0c:dc:a8:63:
a5:c3:40:32:c3:97:ef:5c:eb:0d:8b:f3:2b:c2:de:
4b:80:4a:57:c7:51:cd:43:1e:86:3f:19:e0:6f:12:
2a:1c:ac:9d:a3:46:98:61:6c:12:2e:41:33:b3:bb:
47:fd:1e:a1:69:52:ad:03:69:69:db:8e:a6:7a:b9:
95:b3:17:7c:7b:1d:3d:e7:00:76:ac:f8:21:a7:81:
07:10:3a:98:d8:44:13:92:23:18:ed:32:d8:17:e7:
c7:a1:52:6d:2e:35:49:bd:02:bd:e4:ef:ad:95:bf:
a9:0d:88:59:3a:81:92:4e:c8:be:7e:83:a8:cf:d6:
3d:20:c9:c9:97:ae:f0:e9:10:fc:b1:77:8e:c0:ab:
5b:57:54:35:e7:48:94:1c:c1:a0:66:29:7a:f6:28:
ae:7f:b0:f5:91:45:58:36:72:20:72:7c:45:41:49:
9c:88:47:7e:58:9d:e7:e7:19:a5:23:96:9e:0a:54:
a0:18:76:d4:ec:10:aa:1e:a2:b1:48:16:ee:85:66:
f7:8c:fa:cf:29:b0:22:a3:6b:8c:28:ae:04:c2:ae:
f8:8c:1b:e5:90:3b:e5:0c:dd:f5:92:fe:74:51:d0:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3D:8F:B6:4D:86:22:7C:FA:01:A4:42:7B:9E:AA:F3:CB:EB:28:32
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/3D2Ptk2GInz6AaRCe56q88vrKDI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:f7:85:4f:c5:bb:ae:7b:57:aa:70:8b:df:ea:14:9c:69:7a:
40:0f:03:09:52:01:05:3b:b1:e1:4a:9c:6d:1a:b8:06:4f:96:
4a:1a:f7:56:7c:33:05:99:dc:70:6e:14:32:ec:f7:f7:99:a6:
fb:e9:9c:17:a7:c0:fb:57:f4:de:3d:db:9f:a5:29:78:e5:99:
f2:1a:13:b6:83:48:38:15:cb:2a:bb:f1:ca:8b:25:c3:a5:a9:
91:dd:bc:2a:c7:74:82:26:7e:47:b7:f0:0d:67:0b:96:e1:56:
23:3f:ed:78:8e:a6:e3:45:ac:2c:f2:72:b0:98:fc:d6:93:26:
2d:9b:c4:d8:49:0b:56:8c:a8:c8:a7:ce:75:00:8b:65:e5:c0:
db:2e:20:bf:0d:48:16:46:4b:b3:f8:f5:28:9a:0c:75:ee:21:
d8:d3:3f:81:72:c3:f1:6c:fd:3e:f0:66:28:59:cd:94:84:18:
13:38:7c:7d:df:65:7a:00:fb:ba:ef:4a:7a:b2:fd:d3:f9:71:
d4:58:79:57:06:0d:cf:e9:c7:78:c1:49:1e:09:93:55:1e:06:
c3:cf:2f:6f:b0:1f:5c:68:f1:75:c5:d7:17:a6:4e:e9:ce:d4:
c7:bf:1e:55:d6:35:d1:25:48:0d:1a:3e:6d:66:63:19:6c:01:
fd:69:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:44:33 2025 by rpki-client