Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/8wRoh6fnw7jrB0H5uz8E96xEZQI.roa
File: 8wRoh6fnw7jrB0H5uz8E96xEZQI.roa (raw, json)
Hash identifier: L944GC+vFYWz/LhvCSllxCHl8gfCB0Rr0g020PwJISU=
Subject key identifier: F3:04:68:87:A7:E7:C3:B8:EB:07:41:F9:BB:3F:04:F7:AC:44:65:02
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AF2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8wRoh6fnw7jrB0H5uz8E96xEZQI.roa
Signing time: Wed 01 May 2024 19:54:04 +0000
ROA not before: Wed 01 May 2024 19:54:04 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6898 (0x1af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 19:54:04 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=F3046887A7E7C3B8EB0741F9BB3F04F7AC446502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:07:88:93:05:5d:0a:f7:63:37:af:eb:95:5e:
54:b5:cc:2e:e3:a7:2f:76:2b:bf:81:71:40:6b:97:
05:7e:f6:59:ad:0a:23:88:86:e9:9c:88:5c:4c:ba:
fb:8d:af:91:6c:6d:37:ea:01:4c:76:19:b2:1d:1a:
4e:33:3e:17:90:2e:0f:87:2c:70:18:1e:9b:36:7d:
31:0f:2a:2e:a3:fe:60:9f:46:ba:98:ef:b5:30:12:
85:3c:d5:86:db:45:05:93:07:89:c9:4a:85:93:15:
4e:cf:b9:bf:80:b8:d6:4d:f3:05:25:a4:4f:63:9c:
4d:4e:75:b0:73:36:7c:ba:59:9f:ec:46:1a:27:e1:
f2:89:fe:1b:3c:17:42:b7:3a:b8:df:7e:e0:eb:75:
f1:b5:30:de:92:e5:5a:60:c6:0d:33:18:70:c9:7c:
6b:36:88:d7:fb:9a:36:ef:33:14:38:ad:c1:31:fd:
f1:1d:e3:ec:90:5f:53:3f:74:22:f8:d8:70:a6:12:
c8:de:73:52:65:02:73:db:8b:89:d0:26:63:0e:a8:
88:55:3b:5c:dc:14:9c:da:2b:59:e7:c9:f2:02:0f:
20:5b:96:26:6b:78:e4:89:90:4b:cc:ba:e4:3a:2d:
33:12:40:f6:4f:97:6c:9b:58:c3:f2:11:12:92:14:
36:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:04:68:87:A7:E7:C3:B8:EB:07:41:F9:BB:3F:04:F7:AC:44:65:02
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/8wRoh6fnw7jrB0H5uz8E96xEZQI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:de:46:17:d6:c0:3b:00:18:d5:f0:5f:9e:b5:75:15:0a:74:
8f:00:f1:96:02:4d:2f:a0:e8:d5:8d:35:e0:00:89:79:db:ed:
02:5a:d7:77:5a:13:91:f4:27:19:79:be:4a:6b:04:87:bb:ad:
ca:f1:a7:1c:f4:00:ff:93:6c:e0:17:42:4c:4f:bd:d2:79:2d:
53:26:15:77:6d:a7:c5:8e:ac:c0:d7:68:aa:e4:9f:ea:16:10:
8e:4b:33:00:ab:68:88:0f:7c:22:4c:6d:3d:e9:96:82:4a:d1:
5b:14:1d:75:b4:b9:8c:ca:a3:67:7a:89:1b:28:73:5f:67:9f:
91:8c:be:16:36:b0:eb:a0:6b:1a:0a:f4:02:7c:cb:13:a4:22:
5a:4c:e4:41:9e:e2:b6:64:45:b0:09:86:da:99:e3:b9:dd:28:
0d:72:08:87:18:69:94:5a:24:b0:13:d7:c7:68:d3:4f:50:b4:
fd:7c:b5:41:19:6e:66:af:35:ba:a0:13:fd:a4:35:75:40:8f:
91:dd:43:cb:59:f0:ca:53:aa:2e:7b:8b:70:5a:d1:06:72:00:
9a:3f:31:c0:e9:04:77:97:1f:e3:fb:f4:1a:e2:0d:f1:90:02:
53:8d:c0:6b:c6:05:29:ab:92:76:8f:b3:a2:e0:0e:1c:85:8b:
d4:aa:7f:64
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGvIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDEx
OTU0MDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEYzMDQ2ODg3QTdFN0Mz
QjhFQjA3NDFGOUJCM0YwNEY3QUM0NDY1MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMB4iTBV0K92M3r+uVXlS1zC7jpy92K7+BcUBrlwV+9lmtCiOI
humciFxMuvuNr5FsbTfqAUx2GbIdGk4zPheQLg+HLHAYHps2fTEPKi6j/mCfRrqY
77UwEoU81YbbRQWTB4nJSoWTFU7Pub+AuNZN8wUlpE9jnE1OdbBzNny6WZ/sRhon
4fKJ/hs8F0K3OrjffuDrdfG1MN6S5Vpgxg0zGHDJfGs2iNf7mjbvMxQ4rcEx/fEd
4+yQX1M/dCL42HCmEsjec1JlAnPbi4nQJmMOqIhVO1zcFJzaK1nnyfICDyBbliZr
eOSJkEvMuuQ6LTMSQPZPl2ybWMPyERKSFDYVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU8wRoh6fnw7jrB0H5uz8E96xEZQIwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzh3Um9oNmZudzdqckIw
SDV1ejhFOTZ4RVpRSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAUd5GF9bAOwAY1fBfnrV1FQp0jwDxlgJN
L6Do1Y014ACJedvtAlrXd1oTkfQnGXm+SmsEh7utyvGnHPQA/5Ns4BdCTE+90nkt
UyYVd22nxY6swNdoquSf6hYQjkszAKtoiA98IkxtPemWgkrRWxQddbS5jMqjZ3qJ
GyhzX2efkYy+Fjaw66BrGgr0AnzLE6QiWkzkQZ7itmRFsAmG2pnjud0oDXIIhxhp
lFoksBPXx2jTT1C0/Xy1QRluZq81uqAT/aQ1dUCPkd1Dy1nwylOqLnuLcFrRBnIA
mj8xwOkEd5cf4/v0GuIN8ZACU43Aa8YFKauSdo+zouAOHIWL1Kp/ZA==
-----END CERTIFICATE-----
Generated at Sun May 18 19:24:30 2025 by rpki-client