Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/A-QZW6JQsq2iYnlzUetEi3_dAu4.roa
File: A-QZW6JQsq2iYnlzUetEi3_dAu4.roa (raw, json)
Hash identifier: WSg7zlnZC3WFPlL4B3rKZp7RCwaasRJ5SHsldId8olU=
Subject key identifier: 03:E4:19:5B:A2:50:B2:AD:A2:62:79:73:51:EB:44:8B:7F:DD:02:EE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15AA
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A-QZW6JQsq2iYnlzUetEi3_dAu4.roa
Signing time: Wed 17 Apr 2024 17:53:23 +0000
ROA not before: Wed 17 Apr 2024 17:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5546 (0x15aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 17:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=03E4195BA250B2ADA262797351EB448B7FDD02EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:15:de:70:68:3f:b6:3b:a2:72:49:19:44:e1:
5e:c3:af:67:98:8b:b1:76:b3:a9:a1:09:b1:77:c6:
c2:ba:3b:2b:5b:a1:08:75:2f:20:8d:59:0b:93:73:
74:6c:c7:01:0e:ad:71:12:c2:66:c9:3c:58:27:43:
69:db:ff:56:31:d9:92:05:dd:1a:20:2e:95:eb:fc:
ca:ae:0e:e9:45:e8:f1:12:3f:ac:da:31:14:57:95:
aa:ef:52:1b:91:5c:4c:1c:cd:17:b0:5a:00:1d:0e:
17:ac:3b:e5:fb:c7:d9:ed:bc:89:88:79:4e:cf:a5:
ff:9a:c5:49:20:fe:1a:3b:74:c8:af:4a:fa:dc:e1:
f1:da:be:ea:cb:aa:3a:5b:83:88:ac:18:03:7a:27:
35:01:39:30:8e:d0:01:04:86:4d:aa:c0:7d:7f:2e:
55:0d:4c:b0:bc:45:59:86:d5:57:75:34:36:c6:d8:
05:0d:ed:2f:f3:14:e0:20:63:69:df:05:bd:94:68:
f9:56:ce:b3:67:80:72:30:ba:8b:c2:23:38:96:e5:
38:93:02:4e:67:94:99:a3:fd:0b:6b:9e:4f:15:d5:
f6:78:3b:e1:7e:f7:7f:c4:b1:03:89:c8:54:6d:8e:
3c:38:8c:76:a7:7f:45:51:a8:dc:8a:c9:83:a0:bd:
91:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:19:5B:A2:50:B2:AD:A2:62:79:73:51:EB:44:8B:7F:DD:02:EE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/A-QZW6JQsq2iYnlzUetEi3_dAu4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:aa:08:f8:39:09:8b:23:7c:0d:15:2d:4f:65:27:63:3f:43:
40:95:93:41:19:40:2d:94:c1:9e:34:db:a6:1e:e1:ad:a7:f6:
4c:62:f2:3a:5c:fd:50:0f:33:b9:21:10:1b:ee:a5:d5:92:af:
0e:c9:34:1b:36:4c:a7:61:1e:18:bb:96:0f:c6:44:ce:36:f5:
89:61:eb:e7:d0:6d:f0:1b:53:84:7f:e5:b6:79:61:f6:7b:ac:
e2:82:dd:e7:6c:35:83:8a:13:75:28:14:84:b9:1b:bd:a9:8d:
81:d7:f9:c9:fc:9a:c6:7a:82:70:c4:c5:01:c5:42:37:d2:9b:
c3:c1:3d:ac:ee:b8:41:28:4c:18:b1:0e:f5:3e:fc:b1:ab:af:
4e:27:1e:af:b2:de:a9:78:b0:32:9a:e7:3e:3a:a1:8a:89:f4:
69:db:c3:ae:c1:ac:2d:bb:13:26:e1:fc:ff:1d:be:f8:8f:ca:
82:5a:ab:bb:cb:da:3a:1f:c4:8a:f9:ce:38:9e:ba:3f:42:47:
cb:6d:81:86:8b:60:50:a5:78:96:e4:62:95:57:ca:85:e8:9f:
18:d6:57:38:e8:c3:da:14:3b:49:f8:37:35:a3:d3:dc:cc:e8:
f0:9d:c0:e1:91:e6:e4:c8:f0:b7:50:fb:e6:c3:9b:59:59:57:
e3:f4:83:2e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFaowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcx
NzUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAzRTQxOTVCQTI1MEIy
QURBMjYyNzk3MzUxRUI0NDhCN0ZERDAyRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcFd5waD+2O6JySRlE4V7Dr2eYi7F2s6mhCbF3xsK6OytboQh1
LyCNWQuTc3RsxwEOrXESwmbJPFgnQ2nb/1Yx2ZIF3RogLpXr/MquDulF6PESP6za
MRRXlarvUhuRXEwczRewWgAdDhesO+X7x9ntvImIeU7Ppf+axUkg/ho7dMivSvrc
4fHavurLqjpbg4isGAN6JzUBOTCO0AEEhk2qwH1/LlUNTLC8RVmG1Vd1NDbG2AUN
7S/zFOAgY2nfBb2UaPlWzrNngHIwuovCIziW5TiTAk5nlJmj/Qtrnk8V1fZ4O+F+
93/EsQOJyFRtjjw4jHanf0VRqNyKyYOgvZFlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUA+QZW6JQsq2iYnlzUetEi3/dAu4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0EtUVpXNkpRc3EyaVlu
bHpVZXRFaTNfZEF1NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAsaoI+DkJiyN8DRUtT2UnYz9DQJWTQRlA
LZTBnjTbph7hraf2TGLyOlz9UA8zuSEQG+6l1ZKvDsk0GzZMp2EeGLuWD8ZEzjb1
iWHr59Bt8BtThH/ltnlh9nus4oLd52w1g4oTdSgUhLkbvamNgdf5yfyaxnqCcMTF
AcVCN9Kbw8E9rO64QShMGLEO9T78sauvTicer7LeqXiwMprnPjqhion0advDrsGs
LbsTJuH8/x2++I/Kglqru8vaOh/EivnOOJ66P0JHy22BhotgUKV4luRilVfKheif
GNZXOOjD2hQ7Sfg3NaPT3Mzo8J3A4ZHm5Mjwt1D75sObWVlX4/SDLg==
-----END CERTIFICATE-----
Generated at Sun May 18 10:56:05 2025 by rpki-client