Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7E83FO57niwue2P4Aa6q1sKacTs.roa
File: 7E83FO57niwue2P4Aa6q1sKacTs.roa (raw, json)
Hash identifier: risgXZKCHTJ8WPrXeMV3TkB7eHNRvM7mwGFVn3C4Nck=
Subject key identifier: EC:4F:37:14:EE:7B:9E:2C:2E:7B:63:F8:01:AE:AA:D6:C2:9A:71:3B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C24
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7E83FO57niwue2P4Aa6q1sKacTs.roa
Signing time: Sun 05 May 2024 00:24:17 +0000
ROA not before: Sun 05 May 2024 00:24:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7204 (0x1c24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 00:24:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC4F3714EE7B9E2C2E7B63F801AEAAD6C29A713B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:db:43:90:b4:1c:b2:24:e2:a3:c0:2f:36:
c8:e0:ec:f2:93:db:45:20:40:fd:96:eb:49:45:63:
08:0c:30:af:b3:f5:df:d8:44:bf:a0:c2:b3:87:c0:
cb:ad:fd:b8:4d:b3:72:70:72:b1:8e:a3:15:4a:90:
86:93:62:30:43:78:8e:be:fc:4c:f0:f7:0d:a0:ff:
b2:c9:f4:e9:01:a4:aa:3b:1c:b0:15:7b:c1:cc:c7:
14:80:9c:c0:bd:8a:6c:d7:13:92:6e:28:c6:78:0e:
8c:9d:80:a3:90:07:53:7b:14:81:23:61:1f:8c:44:
6c:de:87:eb:80:5b:4f:6d:c1:00:15:98:20:76:d9:
c6:45:14:2c:0e:8b:a6:8d:b9:b4:3f:e0:6c:19:71:
34:08:93:13:db:ef:b0:3f:e6:1b:de:1c:df:e6:63:
50:db:9f:89:94:40:ae:c3:46:07:18:88:a9:7c:ba:
db:10:a4:d6:41:90:d7:b7:c1:c4:90:d3:28:89:67:
ed:5f:47:27:c3:5f:ff:3b:90:b3:2d:b2:ec:11:cf:
e1:c4:9c:27:3e:ec:d7:05:e9:ed:e0:51:18:13:0c:
69:20:5a:47:4f:25:4d:cd:02:6e:47:0f:26:b2:20:
a5:32:27:29:d4:df:79:a8:0b:cc:01:5a:e8:a3:e8:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:37:14:EE:7B:9E:2C:2E:7B:63:F8:01:AE:AA:D6:C2:9A:71:3B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7E83FO57niwue2P4Aa6q1sKacTs.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a0:89:77:d4:ed:1f:24:c6:63:37:04:70:50:14:4a:1f:76:7c:
85:2c:b2:49:32:55:3e:f5:c4:03:64:26:61:91:d2:16:fb:ce:
97:3e:ad:ba:78:ef:11:ca:7c:7f:fa:8d:bd:66:72:bd:aa:96:
bb:3e:e7:2b:9c:f7:bc:f1:83:88:23:21:e3:29:36:6d:82:f4:
6f:2f:d9:32:04:50:4f:40:5b:6a:6c:93:a8:e8:a1:1b:aa:2d:
6e:bf:fd:ef:61:c8:74:66:e4:25:54:dc:18:74:91:c6:f7:0e:
e9:aa:a7:14:18:ca:fb:cd:a8:15:b5:53:6b:16:08:90:4d:0f:
67:09:6e:03:a0:6b:f1:a9:ba:19:d8:c8:86:a3:aa:73:5c:9e:
1f:48:1c:a0:71:80:ee:ef:a4:ca:f4:c4:b5:4b:44:48:51:80:
96:d6:13:5b:5d:36:7d:1a:d7:e1:1d:f5:7e:c8:50:a3:e1:bf:
72:42:d7:ab:e9:5e:1a:d7:f0:1f:86:0a:82:aa:31:7f:47:c0:
d8:2f:dc:5d:9b:11:2d:6d:e1:14:cf:e4:f8:5f:39:56:70:3f:
33:25:49:4b:c4:52:6c:d2:ab:54:a9:d7:67:e7:9a:19:e8:0a:
b9:ab:80:44:43:59:16:ce:65:d1:e6:1d:f5:76:ec:25:2d:40:
ba:03:01:88
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHCQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUw
MDI0MTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVDNEYzNzE0RUU3QjlF
MkMyRTdCNjNGODAxQUVBQUQ2QzI5QTcxM0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0AttDkLQcsiTio8AvNsjg7PKT20UgQP2W60lFYwgMMK+z9d/Y
RL+gwrOHwMut/bhNs3JwcrGOoxVKkIaTYjBDeI6+/Ezw9w2g/7LJ9OkBpKo7HLAV
e8HMxxSAnMC9imzXE5JuKMZ4DoydgKOQB1N7FIEjYR+MRGzeh+uAW09twQAVmCB2
2cZFFCwOi6aNubQ/4GwZcTQIkxPb77A/5hveHN/mY1Dbn4mUQK7DRgcYiKl8utsQ
pNZBkNe3wcSQ0yiJZ+1fRyfDX/87kLMtsuwRz+HEnCc+7NcF6e3gURgTDGkgWkdP
JU3NAm5HDyayIKUyJynU33moC8wBWuij6HADAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU7E83FO57niwue2P4Aa6q1sKacTswHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzdFODNGTzU3bml3dWUy
UDRBYTZxMXNLYWNUcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAoIl31O0fJMZjNwRwUBRKH3Z8hSyySTJV
PvXEA2QmYZHSFvvOlz6tunjvEcp8f/qNvWZyvaqWuz7nK5z3vPGDiCMh4yk2bYL0
by/ZMgRQT0BbamyTqOihG6otbr/972HIdGbkJVTcGHSRxvcO6aqnFBjK+82oFbVT
axYIkE0PZwluA6Br8am6GdjIhqOqc1yeH0gcoHGA7u+kyvTEtUtESFGAltYTW102
fRrX4R31fshQo+G/ckLXq+leGtfwH4YKgqoxf0fA2C/cXZsRLW3hFM/k+F85VnA/
MyVJS8RSbNKrVKnXZ+eaGegKuauARENZFs5l0eYd9XbsJS1AugMBiA==
-----END CERTIFICATE-----
Generated at Sun May 18 10:50:43 2025 by rpki-client