Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/CIRRZk1FOp1Wr_cxzZZoaAPLmH4.roa
File: CIRRZk1FOp1Wr_cxzZZoaAPLmH4.roa (raw, json)
Hash identifier: tp0o9rnu/HK2QLVoTvE87CTvqlkFUwNJ1DFe3cN6wtg=
Subject key identifier: 08:84:51:66:4D:45:3A:9D:56:AF:F7:31:CD:96:68:68:03:CB:98:7E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 12C0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CIRRZk1FOp1Wr_cxzZZoaAPLmH4.roa
Signing time: Tue 09 Apr 2024 23:23:05 +0000
ROA not before: Tue 09 Apr 2024 23:23:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4800 (0x12c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 9 23:23:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=088451664D453A9D56AFF731CD96686803CB987E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:6b:92:07:1b:e8:ed:95:2b:e9:9d:e8:8b:
61:d7:64:40:34:e0:e4:60:bf:6e:46:9e:15:7d:be:
01:16:5f:67:cc:83:27:31:9f:4f:67:41:2b:9f:fa:
28:87:ff:c2:b6:11:01:2f:6d:58:7a:0f:1f:9d:70:
97:e1:90:d7:a8:ea:f7:d2:93:b7:fc:40:d5:bd:7b:
7b:74:d7:54:87:8c:f4:61:76:d7:eb:20:5c:91:fe:
8b:fe:d4:71:ca:c5:68:db:65:fe:72:09:5d:f8:7b:
a1:26:d4:75:02:30:f5:d3:50:d0:8d:ab:95:6d:b4:
d7:ab:94:aa:0e:a9:8a:7f:d3:c2:cb:a0:a9:2a:fa:
57:4e:cc:0c:2c:67:01:37:eb:35:96:f2:cd:fa:c1:
35:8a:ae:ef:87:80:10:93:43:1e:0b:5a:cf:59:ca:
99:b9:54:08:66:b2:11:a4:13:97:58:c5:47:de:09:
ac:91:0a:b0:52:c8:54:bd:f1:34:53:17:6d:25:72:
66:82:1a:cd:d5:b3:4b:25:6b:21:fe:46:9c:3a:5f:
67:45:d2:6b:c3:c9:b2:64:44:2a:f9:c5:87:b1:3a:
42:35:7a:f7:1c:0b:c7:64:83:e8:b0:ee:33:6a:95:
4c:1c:1d:ca:27:ae:23:27:2e:bd:7d:d0:49:63:d9:
d5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:84:51:66:4D:45:3A:9D:56:AF:F7:31:CD:96:68:68:03:CB:98:7E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/CIRRZk1FOp1Wr_cxzZZoaAPLmH4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:3e:92:77:6a:f5:c9:a6:90:ee:5c:f9:d8:74:d8:27:68:51:
0d:f8:14:ef:7f:96:d4:b0:98:5e:bf:b5:07:7d:16:cc:e8:d3:
36:23:7a:b3:4d:a5:06:7e:43:b7:e6:d9:69:f8:5c:8c:65:7b:
b1:bd:20:ad:bc:5c:26:f6:9b:f7:01:13:9e:81:d2:2f:5d:b0:
8b:3b:8f:1e:61:7d:f9:8b:b9:f9:e0:f6:5c:9d:ab:66:9c:8b:
82:10:97:29:e1:4a:1b:21:9e:8a:ce:48:95:a3:98:2f:bb:52:
8e:0f:39:26:bb:8e:4a:5f:67:4c:03:64:7f:92:de:0f:a0:ad:
a3:31:d6:20:6e:c7:72:af:ab:a5:aa:28:a9:00:4b:c7:4e:86:
5c:5f:b9:51:98:86:1b:f3:b8:99:de:57:6b:06:61:37:91:30:
33:8d:da:58:0e:f5:5b:76:9b:d2:74:c3:1f:0b:cb:ed:c5:4d:
00:a4:4f:08:69:74:20:3b:c1:49:99:66:89:6b:d2:04:72:75:
6e:5f:1b:b8:fb:37:1f:b3:99:d4:17:2a:38:9e:60:98:12:26:
9e:7c:28:1c:de:fd:52:5f:f5:ba:8e:c3:da:87:53:ec:ba:32:
5b:36:a4:4a:1e:3d:3d:11:e6:a4:5d:15:64:66:47:ad:35:8c:
d3:76:16:a0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEsAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDky
MzIzMDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDA4ODQ1MTY2NEQ0NTNB
OUQ1NkFGRjczMUNEOTY2ODY4MDNDQjk4N0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkuGuSBxvo7ZUr6Z3oi2HXZEA04ORgv25GnhV9vgEWX2fMgycx
n09nQSuf+iiH/8K2EQEvbVh6Dx+dcJfhkNeo6vfSk7f8QNW9e3t011SHjPRhdtfr
IFyR/ov+1HHKxWjbZf5yCV34e6Em1HUCMPXTUNCNq5VttNerlKoOqYp/08LLoKkq
+ldOzAwsZwE36zWW8s36wTWKru+HgBCTQx4LWs9Zypm5VAhmshGkE5dYxUfeCayR
CrBSyFS98TRTF20lcmaCGs3Vs0slayH+Rpw6X2dF0mvDybJkRCr5xYexOkI1evcc
C8dkg+iw7jNqlUwcHconriMnLr190Elj2dX7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUCIRRZk1FOp1Wr/cxzZZoaAPLmH4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0NJUlJaazFGT3AxV3Jf
Y3h6WlpvYUFQTG1INC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAxD6Sd2r1yaaQ7lz52HTYJ2hRDfgU73+W
1LCYXr+1B30WzOjTNiN6s02lBn5Dt+bZafhcjGV7sb0grbxcJvab9wETnoHSL12w
izuPHmF9+Yu5+eD2XJ2rZpyLghCXKeFKGyGeis5IlaOYL7tSjg85JruOSl9nTANk
f5LeD6CtozHWIG7Hcq+rpaooqQBLx06GXF+5UZiGG/O4md5XawZhN5EwM43aWA71
W3ab0nTDHwvL7cVNAKRPCGl0IDvBSZlmiWvSBHJ1bl8buPs3H7OZ1BcqOJ5gmBIm
nnwoHN79Ul/1uo7D2odT7LoyWzakSh49PRHmpF0VZGZHrTWM03YWoA==
-----END CERTIFICATE-----
Generated at Sun May 18 04:52:07 2025 by rpki-client