Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/6Wfi-zmwd1Hh-4iRSK0TkipA07E.roa
File: 6Wfi-zmwd1Hh-4iRSK0TkipA07E.roa (raw, json)
Hash identifier: bJQz8+j/cu50rxMtpoXInRtcBJyxdl1J3p0x0OYGXHQ=
Subject key identifier: E9:67:E2:FB:39:B0:77:51:E1:FB:88:91:48:AD:13:92:2A:40:D3:B1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14F4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Wfi-zmwd1Hh-4iRSK0TkipA07E.roa
Signing time: Mon 15 Apr 2024 20:23:27 +0000
ROA not before: Mon 15 Apr 2024 20:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5364 (0x14f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 20:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E967E2FB39B07751E1FB889148AD13922A40D3B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:52:cd:68:a7:e1:1d:3a:83:c9:79:96:fd:de:
d7:c0:c9:4b:bf:71:f7:0c:c4:7b:dd:e6:1e:f2:47:
08:57:09:ec:4e:70:73:48:12:d2:79:b6:f2:eb:98:
98:c7:ef:f2:a7:4b:41:23:9f:68:03:91:79:99:96:
d6:ac:51:c6:e1:52:09:1c:f5:6a:b8:de:43:f0:73:
15:09:15:e6:a7:ce:71:0a:dd:a8:2a:88:e8:27:c3:
cd:33:9d:25:04:bb:2c:a7:ed:08:fa:79:74:7a:1e:
7b:24:3e:d4:47:3f:3b:fa:23:e2:2f:17:7d:db:5e:
a7:fa:a9:bf:ce:e8:c6:87:85:9e:28:0b:97:83:f3:
40:f3:a9:56:d2:6e:1a:a5:3b:8a:ab:da:90:c8:43:
ec:1f:a1:75:79:ef:66:ab:ae:c0:b1:8a:da:f9:3c:
91:e1:66:41:3a:69:22:a7:2a:a0:85:7f:f5:31:6b:
7a:5c:96:c7:83:79:dd:a3:0f:b9:29:c8:e7:e0:e4:
3d:fe:18:ac:ba:c3:29:23:8b:34:48:70:d2:e7:4b:
73:f6:bb:50:e2:fa:37:28:e6:7b:c8:b0:89:33:2d:
ca:0e:26:c5:fc:f3:c2:54:ba:6b:3b:b6:1d:85:f5:
80:00:46:a8:52:a7:44:08:83:42:ac:68:f5:f9:60:
f5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:67:E2:FB:39:B0:77:51:E1:FB:88:91:48:AD:13:92:2A:40:D3:B1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/6Wfi-zmwd1Hh-4iRSK0TkipA07E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:61:43:a7:2b:6f:1f:c8:c9:d0:15:98:7f:cc:2c:e2:fd:3b:
2c:5d:16:3e:dd:78:88:ac:d6:8a:80:3a:a7:f0:c7:71:17:a2:
5a:7f:dc:a8:c7:49:f0:95:7f:cd:d4:9b:97:fc:3f:af:2a:1e:
f5:cc:9e:a7:ed:33:3c:00:72:1c:b3:71:a5:46:16:59:34:86:
7a:74:a6:51:7e:87:ef:53:da:89:54:6d:8c:9a:dd:17:cf:1f:
e4:4b:7c:5d:45:fa:03:e6:16:31:af:ae:6e:e4:5e:dd:48:86:
9b:90:2e:0b:5e:d8:4d:1c:f3:c4:c5:33:cd:35:aa:79:ca:28:
29:c3:ab:1b:d6:42:2a:eb:33:2a:ab:9a:4c:c8:32:6d:1f:cc:
ba:19:e1:f4:8c:eb:c6:64:78:c6:a8:88:09:e8:c5:cf:2d:b1:
6f:21:73:a3:f8:3f:62:23:8b:92:5f:3a:44:e6:2d:a9:b1:0b:
7e:72:89:86:80:3a:8d:43:82:38:9b:06:e4:da:53:8f:a5:d7:
08:b6:a7:a6:20:a1:96:62:2c:d0:2d:9e:0f:2a:52:6e:6e:c4:
b8:fc:02:a3:0d:03:bd:e4:0e:b6:58:62:cc:9e:c0:15:aa:e4:
70:21:75:bf:cd:36:a3:4b:23:26:cf:a9:f8:77:e9:c9:da:73:
1d:fa:11:0e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFPQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTUy
MDIzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEU5NjdFMkZCMzlCMDc3
NTFFMUZCODg5MTQ4QUQxMzkyMkE0MEQzQjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhUs1op+EdOoPJeZb93tfAyUu/cfcMxHvd5h7yRwhXCexOcHNI
EtJ5tvLrmJjH7/KnS0Ejn2gDkXmZltasUcbhUgkc9Wq43kPwcxUJFeanznEK3agq
iOgnw80znSUEuyyn7Qj6eXR6HnskPtRHPzv6I+IvF33bXqf6qb/O6MaHhZ4oC5eD
80DzqVbSbhqlO4qr2pDIQ+wfoXV572arrsCxitr5PJHhZkE6aSKnKqCFf/Uxa3pc
lseDed2jD7kpyOfg5D3+GKy6wykjizRIcNLnS3P2u1Di+jco5nvIsIkzLcoOJsX8
88JUums7th2F9YAARqhSp0QIg0KsaPX5YPWBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU6Wfi+zmwd1Hh+4iRSK0TkipA07EwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzZXZmktem13ZDFIaC00
aVJTSzBUa2lwQTA3RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAI2FDpytvH8jJ0BWYf8ws4v07LF0WPt14
iKzWioA6p/DHcReiWn/cqMdJ8JV/zdSbl/w/ryoe9cyep+0zPAByHLNxpUYWWTSG
enSmUX6H71PaiVRtjJrdF88f5Et8XUX6A+YWMa+ubuRe3UiGm5AuC17YTRzzxMUz
zTWqecooKcOrG9ZCKuszKquaTMgybR/Muhnh9IzrxmR4xqiICejFzy2xbyFzo/g/
YiOLkl86ROYtqbELfnKJhoA6jUOCOJsG5NpTj6XXCLanpiChlmIs0C2eDypSbm7E
uPwCow0DveQOtlhizJ7AFarkcCF1v802o0sjJs+p+HfpydpzHfoRDg==
-----END CERTIFICATE-----
Generated at Sun May 18 10:57:10 2025 by rpki-client