Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FTHTopvO6WQEc0RzwPghy07mPJM.roa
File: FTHTopvO6WQEc0RzwPghy07mPJM.roa (raw, json)
Hash identifier: fS+abHXCr1tCWO+uFjmHZC9EHc/OhiWEicfbv826SSI=
Subject key identifier: 15:31:D3:A2:9B:CE:E9:64:04:73:44:73:C0:F8:21:CB:4E:E6:3C:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EB2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FTHTopvO6WQEc0RzwPghy07mPJM.roa
Signing time: Sat 30 Mar 2024 03:52:30 +0000
ROA not before: Sat 30 Mar 2024 03:52:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3762 (0xeb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 03:52:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1531D3A29BCEE96404734473C0F821CB4EE63C93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5f:6a:9e:d3:ce:03:dd:68:6c:ca:02:c2:fc:
c0:fb:a3:2b:62:71:d9:89:54:4c:1e:b4:ea:ac:44:
57:20:c5:6a:ae:b3:3a:5f:7a:da:86:41:f3:e5:3f:
de:93:07:90:8d:d3:d2:da:cf:53:ac:a3:93:a4:1c:
45:e8:ff:b7:69:99:0a:a1:9d:9b:6f:67:02:63:7a:
83:34:28:d9:e0:00:09:95:d1:ec:3f:70:c0:c7:e4:
92:e8:4c:cf:23:c4:6c:ce:52:f5:e5:a6:0f:de:45:
35:da:4b:4f:8c:55:62:53:8a:ff:de:60:5e:48:f7:
90:57:1b:0a:1c:61:75:98:fc:34:b7:82:e2:36:44:
c9:80:20:83:ee:99:8f:57:f9:a1:1e:a7:9e:39:0b:
4a:bc:72:55:81:d7:69:d9:4f:1f:9f:6c:9e:59:d6:
eb:39:68:6c:0e:d4:11:04:8a:f9:93:05:58:9c:05:
f0:44:cd:98:97:3a:66:e5:82:60:c7:9e:5e:87:79:
60:61:42:bc:69:71:05:c5:ac:e9:7b:57:97:43:e7:
3b:51:d2:c7:68:3b:46:4b:e4:5b:85:0e:91:b1:85:
0f:15:b1:43:32:1d:22:40:c4:9a:b7:41:4c:21:be:
20:81:3d:70:eb:58:49:cb:a7:4d:5e:fa:95:2a:ba:
34:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:31:D3:A2:9B:CE:E9:64:04:73:44:73:C0:F8:21:CB:4E:E6:3C:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FTHTopvO6WQEc0RzwPghy07mPJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:ce:06:9f:48:de:50:f7:1f:8c:b3:5e:06:6e:b1:18:1d:c2:
a0:84:76:fb:66:fd:86:55:9d:cf:e7:7d:15:7c:ea:d6:fc:ec:
a9:e2:bd:bc:b8:16:b6:b8:38:da:52:f8:ef:4a:e0:20:43:7e:
a6:de:9b:f0:a4:d0:5c:26:9b:69:aa:1b:14:07:df:c6:68:57:
51:a5:bf:01:57:50:e6:b9:bc:83:69:27:c8:3f:89:c9:4e:e8:
86:b2:23:b1:af:69:c5:8b:29:b2:25:03:9e:24:94:35:c0:36:
ac:eb:d8:7f:50:3c:6d:66:f1:13:46:ef:bf:9c:87:8e:50:aa:
65:fd:c7:77:04:2e:67:e7:d6:5d:77:95:55:80:72:b6:61:11:
08:9e:af:b1:37:88:04:29:e0:e1:a5:ce:97:ac:7a:f7:8c:fe:
1b:f6:73:80:92:ee:31:86:82:3c:22:50:07:2e:ef:2d:b1:9e:
c0:75:bf:63:a5:f0:de:7a:f4:b1:3b:73:da:25:5f:12:d2:3d:
e4:bf:99:fa:ec:d3:20:2b:7d:ae:d9:5e:3b:be:10:a9:b6:0e:
e5:e5:7d:a8:11:f4:ab:24:f4:ad:bb:d3:d0:c0:75:ef:1d:0f:
be:99:c6:55:4e:dc:6e:83:b9:d8:a1:ca:81:f4:c2:bb:00:62:
b3:8d:4a:a1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDrIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzAw
MzUyMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE1MzFEM0EyOUJDRUU5
NjQwNDczNDQ3M0MwRjgyMUNCNEVFNjNDOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkX2qe084D3WhsygLC/MD7oyticdmJVEwetOqsRFcgxWquszpf
etqGQfPlP96TB5CN09Laz1Oso5OkHEXo/7dpmQqhnZtvZwJjeoM0KNngAAmV0ew/
cMDH5JLoTM8jxGzOUvXlpg/eRTXaS0+MVWJTiv/eYF5I95BXGwocYXWY/DS3guI2
RMmAIIPumY9X+aEep545C0q8clWB12nZTx+fbJ5Z1us5aGwO1BEEivmTBVicBfBE
zZiXOmblgmDHnl6HeWBhQrxpcQXFrOl7V5dD5ztR0sdoO0ZL5FuFDpGxhQ8VsUMy
HSJAxJq3QUwhviCBPXDrWEnLp01e+pUqujQBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFTHTopvO6WQEc0RzwPghy07mPJMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0ZUSFRvcHZPNldRRWMw
Unp3UGdoeTA3bVBKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAIc4Gn0jeUPcfjLNeBm6xGB3CoIR2+2b9
hlWdz+d9FXzq1vzsqeK9vLgWtrg42lL470rgIEN+pt6b8KTQXCabaaobFAffxmhX
UaW/AVdQ5rm8g2knyD+JyU7ohrIjsa9pxYspsiUDniSUNcA2rOvYf1A8bWbxE0bv
v5yHjlCqZf3HdwQuZ+fWXXeVVYBytmERCJ6vsTeIBCng4aXOl6x694z+G/ZzgJLu
MYaCPCJQBy7vLbGewHW/Y6Xw3nr0sTtz2iVfEtI95L+Z+uzTICt9rtleO74QqbYO
5eV9qBH0qyT0rbvT0MB17x0PvpnGVU7cboO52KHKgfTCuwBis41KoQ==
-----END CERTIFICATE-----
Generated at Sun May 18 04:54:02 2025 by rpki-client