Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/67sEqLa6cP9aRYUFqjTemdRbaTs.roa
File: 67sEqLa6cP9aRYUFqjTemdRbaTs.roa (raw, json)
Hash identifier: Fe1QcEC+RrMaNGdMSlU1AJ835/rMkPHnuBE00p1usRg=
Subject key identifier: EB:BB:04:A8:B6:BA:70:FF:5A:45:85:05:AA:34:DE:99:D4:5B:69:3B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 197E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/67sEqLa6cP9aRYUFqjTemdRbaTs.roa
Signing time: Sat 27 Apr 2024 22:54:28 +0000
ROA not before: Sat 27 Apr 2024 22:54:28 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6526 (0x197e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 22:54:28 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EBBB04A8B6BA70FF5A458505AA34DE99D45B693B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:16:26:e9:67:1e:f3:19:1d:e2:fc:10:18:
14:6a:b9:7a:ca:74:1a:32:6f:4d:43:d8:3b:f4:9a:
76:5f:85:50:40:9a:ea:53:d6:ec:63:f6:e8:9d:75:
b0:1f:bf:23:82:92:16:7b:83:8b:1b:7a:57:ae:23:
62:44:e2:b8:5c:f3:c8:41:34:e4:77:ac:ab:5f:70:
c7:7c:b7:66:9d:9d:da:d6:37:59:de:f8:21:ff:eb:
f6:8a:6b:3b:ed:7a:d4:bc:66:79:4f:8a:a1:ef:da:
95:f1:cf:6e:60:94:2f:2d:11:5e:d2:9f:ef:e3:88:
09:0e:c9:d8:b9:d2:ec:3f:06:d0:7d:18:8c:8a:e4:
52:a9:fc:a6:43:2d:74:b6:09:4f:f1:ad:40:8f:97:
10:36:b2:f1:90:25:a4:de:7b:73:71:67:bd:45:58:
00:6d:36:0b:1d:da:cb:14:cd:34:c1:85:95:62:6c:
fc:68:cb:5d:a1:9d:16:f4:72:71:38:94:8b:26:8a:
20:c7:4c:88:b4:c2:b8:3e:f6:f0:34:ce:91:c5:95:
fa:b9:0b:00:ae:7b:0e:d0:6a:5a:ed:07:1a:cd:40:
92:aa:7d:92:d5:47:e7:5a:30:e3:14:e4:41:da:e6:
00:f3:84:34:0f:79:7d:71:91:c9:48:a4:30:5e:79:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:BB:04:A8:B6:BA:70:FF:5A:45:85:05:AA:34:DE:99:D4:5B:69:3B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/67sEqLa6cP9aRYUFqjTemdRbaTs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8b:01:ab:0c:d6:7c:c0:f9:74:42:b2:f8:2f:28:2e:c2:47:77:
3b:4a:9b:e6:3c:68:0d:d6:b8:37:fb:fd:95:9b:42:61:dc:c2:
db:9e:36:e3:b8:59:86:2b:8c:6c:3e:19:60:e1:cd:a4:cb:d9:
e8:c7:fe:16:c2:1d:d9:7d:7c:34:46:ad:9e:0b:d8:7c:cb:e4:
94:79:2f:67:4a:46:23:04:89:40:dd:fa:8a:07:ba:2d:d5:49:
6c:95:ae:94:53:b3:14:4c:91:0b:a6:cc:fd:b4:49:00:94:0f:
a2:de:1f:13:19:40:61:61:82:ca:09:8e:19:99:df:fc:a2:a9:
e7:31:1b:3a:62:7f:29:bc:d3:7f:6e:b8:cd:f2:f3:c9:14:80:
e2:53:9d:9f:09:c5:08:ee:61:0d:dd:a2:78:87:6d:52:2d:bb:
5e:a2:3a:a7:07:3e:e2:54:2e:f8:2e:9e:a1:bc:47:f6:f0:15:
10:db:5d:f8:f3:b8:b6:1f:87:18:d7:6a:78:25:a0:de:f6:55:
fa:e8:cf:ec:14:f4:3f:d4:44:2e:9a:9a:dc:f5:19:9f:57:dc:
34:49:33:5b:cf:9e:04:86:5c:69:22:4f:8b:53:ba:36:2f:6c:
63:ec:da:dc:9c:52:8c:18:6e:1d:7b:f1:c2:72:39:59:52:09:
41:de:5e:19
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGX4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjcy
MjU0MjhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVCQkIwNEE4QjZCQTcw
RkY1QTQ1ODUwNUFBMzRERTk5RDQ1QjY5M0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfIBYm6Wce8xkd4vwQGBRquXrKdBoyb01D2Dv0mnZfhVBAmupT
1uxj9uiddbAfvyOCkhZ7g4sbeleuI2JE4rhc88hBNOR3rKtfcMd8t2adndrWN1ne
+CH/6/aKazvtetS8ZnlPiqHv2pXxz25glC8tEV7Sn+/jiAkOydi50uw/BtB9GIyK
5FKp/KZDLXS2CU/xrUCPlxA2svGQJaTee3NxZ71FWABtNgsd2ssUzTTBhZVibPxo
y12hnRb0cnE4lIsmiiDHTIi0wrg+9vA0zpHFlfq5CwCuew7QalrtBxrNQJKqfZLV
R+daMOMU5EHa5gDzhDQPeX1xkclIpDBeedknAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU67sEqLa6cP9aRYUFqjTemdRbaTswHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzY3c0VxTGE2Y1A5YVJZ
VUZxalRlbWRSYmFUcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAiwGrDNZ8wPl0QrL4Lyguwkd3O0qb5jxo
Dda4N/v9lZtCYdzC254247hZhiuMbD4ZYOHNpMvZ6Mf+FsId2X18NEatngvYfMvk
lHkvZ0pGIwSJQN36ige6LdVJbJWulFOzFEyRC6bM/bRJAJQPot4fExlAYWGCygmO
GZnf/KKp5zEbOmJ/KbzTf264zfLzyRSA4lOdnwnFCO5hDd2ieIdtUi27XqI6pwc+
4lQu+C6eobxH9vAVENtd+PO4th+HGNdqeCWg3vZV+ujP7BT0P9RELpqa3PUZn1fc
NEkzW8+eBIZcaSJPi1O6Ni9sY+za3JxSjBhuHXvxwnI5WVIJQd5eGQ==
-----END CERTIFICATE-----
Generated at Sun May 18 05:53:31 2025 by rpki-client