Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/89HMalp3xuSHgrDgUSSVppxH6bM.roa
File: 89HMalp3xuSHgrDgUSSVppxH6bM.roa (raw, json)
Hash identifier: H/qPBbA0qEhxfULaQOJj4oYS04Au4nLEfzYNr75qWNY=
Subject key identifier: F3:D1:CC:6A:5A:77:C6:E4:87:82:B0:E0:51:24:95:A6:9C:47:E9:B3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18F6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/89HMalp3xuSHgrDgUSSVppxH6bM.roa
Signing time: Fri 26 Apr 2024 12:53:44 +0000
ROA not before: Fri 26 Apr 2024 12:53:44 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6390 (0x18f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 26 12:53:44 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3D1CC6A5A77C6E48782B0E0512495A69C47E9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9b:c1:5d:ca:8e:1c:b5:10:f5:cb:9c:6b:53:
c4:e2:bb:07:83:7a:df:c5:7a:60:d3:71:26:dc:55:
e4:77:f2:52:f2:c9:6d:58:27:27:c9:25:ad:20:12:
01:bc:97:b9:d7:1c:e3:27:fb:8d:9a:df:b5:6c:91:
9e:76:ed:62:fb:2b:a9:17:f6:b7:26:1a:f7:93:41:
fb:5d:e7:92:3f:f9:35:5b:15:a8:4c:02:2e:8f:40:
b8:9b:e2:55:bc:e7:65:8c:f2:c5:19:2b:88:b6:de:
fc:cd:d9:3c:cf:81:25:09:ad:ca:3d:0a:af:21:45:
98:93:e6:0b:a9:e6:02:4e:75:bb:7f:42:e4:c6:9d:
16:4c:03:d1:10:58:74:f6:f8:3e:5a:cb:80:76:93:
48:ca:a5:8c:6c:c0:24:9c:e4:7c:a7:4d:e6:24:a0:
06:49:82:e3:3e:16:d9:b3:72:e6:ec:a2:a7:4e:e9:
50:62:0a:b8:e2:02:c0:d7:f9:b7:51:06:09:5f:b6:
0e:81:2a:e4:17:ea:36:28:c2:60:f7:8a:77:0d:f2:
05:9f:ae:90:d2:e5:89:04:d0:ad:b5:4f:5a:8a:05:
38:69:a6:4d:16:9b:dd:9f:84:03:43:5c:c5:bd:72:
3f:91:39:6c:a7:86:59:f1:f6:12:52:1a:88:f8:d8:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:CC:6A:5A:77:C6:E4:87:82:B0:E0:51:24:95:A6:9C:47:E9:B3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/89HMalp3xuSHgrDgUSSVppxH6bM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:81:fb:8c:c6:2b:6d:9d:4a:f9:d9:cf:bb:3e:b1:05:3f:cd:
89:4b:c5:d9:38:0b:3b:ee:9a:50:06:6f:35:85:fa:0d:19:3b:
ec:6a:09:2b:5d:c7:49:99:4b:92:4e:27:1b:59:eb:95:87:dc:
83:96:80:fb:17:b2:c8:7d:0d:b2:71:0c:de:bf:28:c1:d4:8d:
9f:55:fb:20:2d:b5:91:d8:ea:90:51:ff:18:93:f6:47:16:c7:
51:90:55:79:40:81:5a:44:8d:83:7a:1f:c6:e8:21:21:6a:f0:
0b:34:bb:02:7a:90:37:e1:61:57:e1:98:ba:9d:19:9c:cd:e5:
fe:32:13:75:d4:f0:9e:b3:7b:89:7b:7e:17:12:6a:f0:cb:d4:
0d:5b:e5:91:35:78:55:9a:c8:ae:c5:17:6c:ef:70:30:96:50:
c4:52:15:8f:9b:f7:57:29:a3:0c:99:a9:0b:47:5f:82:81:45:
43:1f:6c:ec:6a:28:27:5f:ea:ce:93:fe:e1:44:e3:9d:bf:a2:
f4:e4:a9:57:cc:d1:fd:dd:7a:2a:ca:ae:5b:9a:0f:e8:12:62:
8a:89:d8:97:78:77:a8:69:38:e8:34:da:19:0b:d9:4f:20:db:
3a:09:4f:94:cb:2e:d1:bc:f3:ea:46:28:bf:2b:48:f5:ef:51:
18:d8:c3:e7
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjYx
MjUzNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYzRDFDQzZBNUE3N0M2
RTQ4NzgyQjBFMDUxMjQ5NUE2OUM0N0U5QjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCom8Fdyo4ctRD1y5xrU8TiuweDet/FemDTcSbcVeR38lLyyW1Y
JyfJJa0gEgG8l7nXHOMn+42a37VskZ527WL7K6kX9rcmGveTQftd55I/+TVbFahM
Ai6PQLib4lW852WM8sUZK4i23vzN2TzPgSUJrco9Cq8hRZiT5gup5gJOdbt/QuTG
nRZMA9EQWHT2+D5ay4B2k0jKpYxswCSc5HynTeYkoAZJguM+FtmzcubsoqdO6VBi
CrjiAsDX+bdRBglftg6BKuQX6jYowmD3incN8gWfrpDS5YkE0K21T1qKBThppk0W
m92fhANDXMW9cj+ROWynhlnx9hJSGoj42E4rAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU89HMalp3xuSHgrDgUSSVppxH6bMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzg5SE1hbHAzeHVTSGdy
RGdVU1NWcHB4SDZiTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAloH7jMYrbZ1K+dnPuz6xBT/NiUvF2TgL
O+6aUAZvNYX6DRk77GoJK13HSZlLkk4nG1nrlYfcg5aA+xeyyH0NsnEM3r8owdSN
n1X7IC21kdjqkFH/GJP2RxbHUZBVeUCBWkSNg3ofxughIWrwCzS7AnqQN+FhV+GY
up0ZnM3l/jITddTwnrN7iXt+FxJq8MvUDVvlkTV4VZrIrsUXbO9wMJZQxFIVj5v3
VymjDJmpC0dfgoFFQx9s7GooJ1/qzpP+4UTjnb+i9OSpV8zR/d16KsquW5oP6BJi
ionYl3h3qGk46DTaGQvZTyDbOglPlMsu0bzz6kYovytI9e9RGNjD5w==
-----END CERTIFICATE-----
Generated at Sun May 18 10:49:33 2025 by rpki-client