Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/455tLoznGBCp00HTsXyqmjSlE5w.roa
File: 455tLoznGBCp00HTsXyqmjSlE5w.roa (raw, json)
Hash identifier: mmxtswPNs46XoXPKX5U1n7rBC2CGR6i1GSKQApzYAgA=
Subject key identifier: E3:9E:6D:2E:8C:E7:18:10:A9:D3:41:D3:B1:7C:AA:9A:34:A5:13:9C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 168A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/455tLoznGBCp00HTsXyqmjSlE5w.roa
Signing time: Sat 20 Apr 2024 01:53:35 +0000
ROA not before: Sat 20 Apr 2024 01:53:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5770 (0x168a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 01:53:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E39E6D2E8CE71810A9D341D3B17CAA9A34A5139C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:2c:4c:f3:d4:1e:8e:f6:9e:22:3b:11:26:
4b:a9:3f:8b:17:78:32:9f:7b:b6:b6:08:9b:77:c7:
a3:9a:ee:1c:4f:a9:19:a6:46:e1:91:4a:31:74:1e:
b8:31:97:a9:86:e0:ee:a7:96:98:c0:15:39:8b:da:
6a:68:05:01:0b:3c:33:d3:ed:df:96:88:9d:4c:04:
f1:56:71:ae:91:e2:2e:61:df:9f:0d:d5:29:db:52:
3f:6b:5e:b5:17:b6:41:eb:55:d3:00:cb:b0:97:b3:
c6:90:8a:74:a3:7d:9e:0f:0f:52:68:a0:8d:b2:6f:
ac:c7:bc:f1:df:6c:f5:61:67:71:eb:62:a6:7f:04:
42:25:e6:3d:7c:3c:26:50:f1:9d:af:ad:d4:a8:49:
50:16:5c:cc:be:33:61:cc:f6:8c:be:41:57:15:d7:
60:d4:93:f3:5b:a2:ff:24:a6:1c:86:5f:f4:0c:f1:
42:d7:af:d9:6b:67:f1:8f:d5:b0:1e:21:f4:79:9a:
61:69:33:ac:34:4c:f7:0b:65:7e:5b:62:90:b4:c8:
25:01:24:c6:f2:19:d7:ff:38:6e:2a:bf:31:8b:0e:
77:d1:7a:ae:c9:62:ed:8e:6a:a2:a2:68:57:43:34:
c4:3b:a9:d3:90:74:8b:df:92:e1:aa:fa:fc:51:7f:
97:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:9E:6D:2E:8C:E7:18:10:A9:D3:41:D3:B1:7C:AA:9A:34:A5:13:9C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/455tLoznGBCp00HTsXyqmjSlE5w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0d:f3:29:8e:c2:dc:35:d5:0a:31:50:9c:d7:d7:12:d4:6b:c1:
8f:ad:9c:d8:98:f6:40:8f:25:2d:c2:66:6e:78:b6:1a:08:df:
46:4b:56:62:0d:c0:47:10:f1:4b:74:04:c1:25:e9:cb:a1:21:
e0:53:e4:aa:27:31:72:52:b1:66:e0:08:a2:f8:8e:50:05:60:
a1:b5:1f:1a:17:d3:14:0b:c6:5f:f7:41:72:72:d3:e2:2f:a2:
71:51:8c:59:f5:b9:73:32:46:25:3e:9f:9f:92:48:46:94:6e:
78:52:e1:eb:80:8e:5d:30:3c:c7:1f:5b:8b:d0:81:e5:d8:e7:
a5:4f:02:09:d5:9c:e2:5b:b2:dd:e5:49:6d:23:87:71:15:46:
f8:42:7c:6d:11:9d:95:72:ba:c1:f0:12:81:0d:06:60:1b:76:
24:38:68:dc:a0:99:5b:b9:c4:a8:5b:d2:78:8a:89:e2:0c:22:
23:f0:1d:85:55:34:7b:0e:31:92:57:13:24:09:56:22:21:d4:
f5:ad:7d:27:da:8d:21:cc:66:aa:5a:7f:27:84:78:c1:0e:19:
2f:9b:43:77:b6:58:2f:dd:0b:1c:f9:73:c5:20:f0:60:26:8d:
8c:cf:1b:a0:0f:16:56:30:e6:08:f6:5f:af:10:ec:26:f5:36:
08:1c:8f:0a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFoowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAw
MTUzMzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUzOUU2RDJFOENFNzE4
MTBBOUQzNDFEM0IxN0NBQTlBMzRBNTEzOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZPSxM89QejvaeIjsRJkupP4sXeDKfe7a2CJt3x6Oa7hxPqRmm
RuGRSjF0Hrgxl6mG4O6nlpjAFTmL2mpoBQELPDPT7d+WiJ1MBPFWca6R4i5h358N
1SnbUj9rXrUXtkHrVdMAy7CXs8aQinSjfZ4PD1JooI2yb6zHvPHfbPVhZ3HrYqZ/
BEIl5j18PCZQ8Z2vrdSoSVAWXMy+M2HM9oy+QVcV12DUk/Nbov8kphyGX/QM8ULX
r9lrZ/GP1bAeIfR5mmFpM6w0TPcLZX5bYpC0yCUBJMbyGdf/OG4qvzGLDnfReq7J
Yu2OaqKiaFdDNMQ7qdOQdIvfkuGq+vxRf5dbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU455tLoznGBCp00HTsXyqmjSlE5wwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzQ1NXRMb3puR0JDcDAw
SFRzWHlxbWpTbEU1dy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEADfMpjsLcNdUKMVCc19cS1GvBj62c2Jj2
QI8lLcJmbni2GgjfRktWYg3ARxDxS3QEwSXpy6Eh4FPkqicxclKxZuAIoviOUAVg
obUfGhfTFAvGX/dBcnLT4i+icVGMWfW5czJGJT6fn5JIRpRueFLh64COXTA8xx9b
i9CB5djnpU8CCdWc4luy3eVJbSOHcRVG+EJ8bRGdlXK6wfASgQ0GYBt2JDho3KCZ
W7nEqFvSeIqJ4gwiI/AdhVU0ew4xklcTJAlWIiHU9a19J9qNIcxmqlp/J4R4wQ4Z
L5tDd7ZYL90LHPlzxSDwYCaNjM8boA8WVjDmCPZfrxDsJvU2CByPCg==
-----END CERTIFICATE-----
Generated at Sun May 18 06:20:54 2025 by rpki-client