Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6Pn9VdGRCR0di2bzJaKyYX4yPfc.roa
File: 6Pn9VdGRCR0di2bzJaKyYX4yPfc.roa (raw, json)
Hash identifier: lZaF1E3xSTN7AeYfkxx8DhNjPhEkcOJUZa1rRb4BA2c=
Subject key identifier: E8:F9:FD:55:D1:91:09:1D:1D:8B:66:F3:25:A2:B2:61:7E:32:3D:F7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 148C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Pn9VdGRCR0di2bzJaKyYX4yPfc.roa
Signing time: Sun 14 Apr 2024 18:23:19 +0000
ROA not before: Sun 14 Apr 2024 18:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5260 (0x148c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 18:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E8F9FD55D191091D1D8B66F325A2B2617E323DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1e:0a:50:76:e9:ad:ed:1f:6c:78:5f:bc:f1:
6b:d5:c9:be:51:bd:e2:6b:aa:db:43:c6:ff:9e:79:
6d:99:f6:47:90:2c:13:57:85:30:60:82:4f:0b:53:
1d:59:44:e3:0b:e0:fe:1c:22:67:71:74:ae:a0:95:
c5:99:d9:f4:f5:bf:c4:b8:09:6a:fa:19:2e:2a:7e:
52:db:d8:05:2b:93:b2:89:e5:55:79:6e:6e:a2:a8:
aa:28:fd:3f:58:8d:61:c6:a2:69:c4:12:13:19:cf:
5e:ca:0f:3a:25:ec:56:19:7b:72:31:40:70:38:66:
5f:2b:b3:0e:e8:c1:6b:4d:6e:a1:08:5e:20:82:88:
b0:e6:54:88:ca:90:4c:d1:3e:ca:85:d6:7e:1b:df:
2c:b0:50:d6:34:59:bc:8e:e5:92:05:ec:e8:39:12:
c4:7f:f5:7e:d3:d4:c6:83:b4:a8:50:ae:ab:70:a7:
ad:cc:d1:45:d3:8c:80:9a:76:64:7d:1e:1b:a0:4e:
70:d9:c0:c1:05:44:51:39:1b:0d:e1:26:0a:b6:d0:
92:ac:6f:cc:6f:9f:05:8b:d2:11:22:05:8e:3d:2f:
bc:94:db:6b:91:93:1e:9b:d0:13:6f:b7:66:93:5b:
93:91:60:1f:30:f6:3d:9c:67:fe:5e:16:2d:17:1d:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:FD:55:D1:91:09:1D:1D:8B:66:F3:25:A2:B2:61:7E:32:3D:F7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Pn9VdGRCR0di2bzJaKyYX4yPfc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
19:04:17:fe:d6:c7:84:5b:55:41:c3:9e:f2:45:1e:5c:36:6d:
b1:93:67:25:08:c8:d1:03:47:ff:86:e0:42:3c:bc:c5:8a:56:
6a:b8:82:56:d0:13:20:31:30:c3:65:27:92:90:68:79:87:9b:
65:7b:f7:ec:0c:9b:3b:7c:f0:a6:8c:69:4d:bb:d3:9c:7b:94:
c4:1c:5f:dd:42:d6:3d:9c:6b:6c:ac:b7:de:17:ee:93:cb:12:
22:f7:c5:d5:3a:ac:62:1c:57:09:62:1b:05:73:7f:d3:54:d4:
44:6f:71:66:3c:0d:26:b2:cb:93:d7:b3:49:a7:1e:07:3e:01:
0c:88:85:45:b7:7a:d2:63:cb:fd:ff:29:76:72:30:0a:50:d8:
e8:aa:69:f5:86:3e:e5:aa:3a:ec:16:3c:01:a8:68:dd:a7:72:
65:13:ef:31:68:98:42:f3:ef:c1:bd:e6:90:53:b8:ee:37:ef:
af:bb:ba:fc:db:f9:48:39:00:86:68:0a:3f:5a:23:7e:65:36:
52:5b:e8:61:db:56:51:c0:5a:13:30:44:8c:52:48:f5:8b:bd:
f0:e6:d5:f4:44:8f:de:5f:bc:62:06:0c:7f:6d:b7:73:a9:3f:
b4:5c:8e:cb:09:97:c1:51:19:20:43:69:74:4a:b4:5e:d9:36:
91:2f:d6:9e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFIwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTQx
ODIzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU4RjlGRDU1RDE5MTA5
MUQxRDhCNjZGMzI1QTJCMjYxN0UzMjNERjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXHgpQdumt7R9seF+88WvVyb5RveJrqttDxv+eeW2Z9keQLBNX
hTBggk8LUx1ZROML4P4cImdxdK6glcWZ2fT1v8S4CWr6GS4qflLb2AUrk7KJ5VV5
bm6iqKoo/T9YjWHGomnEEhMZz17KDzol7FYZe3IxQHA4Zl8rsw7owWtNbqEIXiCC
iLDmVIjKkEzRPsqF1n4b3yywUNY0WbyO5ZIF7Og5EsR/9X7T1MaDtKhQrqtwp63M
0UXTjICadmR9HhugTnDZwMEFRFE5Gw3hJgq20JKsb8xvnwWL0hEiBY49L7yU22uR
kx6b0BNvt2aTW5ORYB8w9j2cZ/5eFi0XHcTlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6Pn9VdGRCR0di2bzJaKyYX4yPfcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzZQbjlWZEdSQ1IwZGky
YnpKYUt5WVg0eVBmYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAGQQX/tbHhFtVQcOe8kUeXDZtsZNnJQjI
0QNH/4bgQjy8xYpWariCVtATIDEww2UnkpBoeYebZXv37AybO3zwpoxpTbvTnHuU
xBxf3ULWPZxrbKy33hfuk8sSIvfF1TqsYhxXCWIbBXN/01TURG9xZjwNJrLLk9ez
SaceBz4BDIiFRbd60mPL/f8pdnIwClDY6Kpp9YY+5ao67BY8Aaho3adyZRPvMWiY
QvPvwb3mkFO47jfvr7u6/Nv5SDkAhmgKP1ojfmU2UlvoYdtWUcBaEzBEjFJI9Yu9
8ObV9ESP3l+8YgYMf223c6k/tFyOywmXwVEZIENpdEq0Xtk2kS/Wng==
-----END CERTIFICATE-----
Generated at Sun May 18 04:46:29 2025 by rpki-client