Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/9wyIP3sc770p6VHvmi-XvJ0DkYc.roa
File: 9wyIP3sc770p6VHvmi-XvJ0DkYc.roa (raw, json)
Hash identifier: K0+/plCwsGgXjYo8thVAUMYURv8IJPj46y/rXeMlHOE=
Subject key identifier: F7:0C:88:3F:7B:1C:EF:BD:29:E9:51:EF:9A:2F:97:BC:9D:03:91:87
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 06B1
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9wyIP3sc770p6VHvmi-XvJ0DkYc.roa
Signing time: Sun 23 Apr 2023 03:45:34 +0000
ROA not before: Sun 23 Apr 2023 03:45:34 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 18811
IP address blocks: 112.75.104.0/22 maxlen: 24
112.75.108.0/22 maxlen: 24
112.75.112.0/22 maxlen: 24
112.75.116.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1713 (0x6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 23 03:45:34 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=F70C883F7B1CEFBD29E951EF9A2F97BC9D039187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9e:90:6d:c4:71:0f:22:54:ba:a2:d2:05:24:
33:99:fe:42:ff:bf:b1:a7:1d:41:d4:3d:67:f9:e9:
f5:48:31:ce:c9:d3:b4:26:82:42:94:06:eb:57:75:
3a:4d:7c:d3:29:14:fd:f3:3e:30:9c:0f:c2:d9:41:
cb:26:5a:48:8c:01:ac:d0:ac:99:71:53:60:ee:39:
a9:9b:f4:bd:b2:47:3e:eb:97:b2:49:de:c7:04:e7:
73:b4:7e:82:0b:c0:5e:8f:ba:f7:77:69:17:f9:34:
8d:1b:c8:4c:2e:da:96:ce:93:13:ae:45:4b:c5:ba:
d9:b5:f4:fc:59:86:b7:0e:ea:6c:78:07:a1:b0:55:
d2:73:e9:fc:c3:29:e1:81:4f:82:a5:ba:77:61:24:
57:79:d5:7d:fa:ba:01:33:04:fb:df:78:a8:ea:46:
9a:d7:e5:82:c1:28:45:1e:ec:11:c1:a6:51:59:37:
88:d5:14:c5:0f:ac:cf:e9:26:e5:d2:f3:da:b7:93:
82:2a:bd:e6:55:91:53:33:eb:f6:22:43:22:d0:ff:
fc:08:fc:dd:bd:05:e9:16:c2:0a:d4:ff:4f:f5:27:
76:c4:c3:e2:bf:5b:a0:be:4c:18:4f:fc:e1:77:0c:
f1:ea:ba:c5:1f:03:cb:4a:25:52:04:30:b7:74:1c:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:88:3F:7B:1C:EF:BD:29:E9:51:EF:9A:2F:97:BC:9D:03:91:87
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/9wyIP3sc770p6VHvmi-XvJ0DkYc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.104.0-112.75.127.255
Signature Algorithm: sha256WithRSAEncryption
81:a1:7f:09:18:9d:db:b9:56:5e:b7:93:be:0a:f0:fe:ec:0b:
5e:e5:cd:cf:59:21:a6:5b:ff:ff:50:3d:3b:42:0f:ff:80:7e:
e4:85:ac:28:47:d6:c6:a5:92:b2:a2:0f:c7:c8:35:30:8d:1e:
df:9c:73:9e:16:de:12:81:08:31:c3:f7:32:e6:e9:58:85:57:
7b:cd:b5:a9:81:e2:82:41:39:09:f6:19:c2:59:c0:15:f0:26:
f0:d1:65:6f:ab:a1:ef:44:c0:94:16:54:08:d8:fb:92:dd:e5:
2f:af:8c:22:9f:82:44:c8:f8:53:c2:42:a0:93:8a:2c:5a:cd:
9b:37:af:5c:93:e9:e4:8b:98:85:77:b1:90:39:a6:30:31:df:
fb:54:5d:98:91:26:92:36:c6:f8:54:76:2f:98:0b:8c:40:0a:
fd:76:45:a9:10:1e:fc:c9:e4:b4:6c:f4:99:d2:d7:34:c4:d5:
07:b2:de:48:db:bc:e2:b5:a4:f1:56:b2:0b:6b:0b:42:59:de:
ac:92:a9:07:81:f1:dd:19:3d:11:d0:b9:2e:43:ad:56:4b:37:
01:a6:c7:7e:9a:37:52:0d:8e:bc:e3:a1:63:98:11:f7:b2:9e:
69:62:7a:bd:85:ba:39:2b:0f:f6:be:a3:12:e1:dd:21:bb:46:
66:3a:6c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:55:41 2025 by rpki-client