Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/HOoSqDRCNP7R8WMwqw20FxoA6R4.roa
File: HOoSqDRCNP7R8WMwqw20FxoA6R4.roa (raw, json)
Hash identifier: 1QIM1cSXTuDx9rQHEsaCltsU6e98TDOgO46SEhyTdCU=
Subject key identifier: 1C:EA:12:A8:34:42:34:FE:D1:F1:63:30:AB:0D:B4:17:1A:00:E9:1E
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19A8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HOoSqDRCNP7R8WMwqw20FxoA6R4.roa
Signing time: Sun 28 Apr 2024 09:24:07 +0000
ROA not before: Sun 28 Apr 2024 09:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6568 (0x19a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 09:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1CEA12A8344234FED1F16330AB0DB4171A00E91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:df:4a:f3:e5:25:f5:42:24:53:52:0b:6d:be:
31:7d:9e:a5:f2:1b:62:e6:de:2e:ca:72:5b:24:cc:
8a:b9:02:11:16:5c:64:a3:b8:c0:88:84:5f:0a:2f:
ab:a9:ee:29:f8:46:50:a9:49:42:a9:1c:ae:80:b5:
83:b1:55:60:d6:32:30:7f:f7:39:0e:a9:f3:c4:ea:
9c:b5:34:4c:af:6c:20:10:e8:1b:8a:06:49:54:5c:
02:fa:bd:d3:e3:79:57:a5:37:c5:69:65:44:08:4c:
a3:2b:67:da:60:0b:77:5a:14:00:1b:c4:f3:9b:8e:
16:95:aa:e7:b3:64:3d:d2:ef:27:cc:2d:5e:dc:8e:
98:10:0e:84:de:16:c9:f2:5f:92:47:7d:60:d4:e8:
00:54:2c:04:73:13:02:4c:17:74:dd:ce:0d:fc:d3:
83:a3:d0:56:76:1d:f4:26:30:ef:67:8b:cf:a8:f2:
1a:13:b7:4e:d7:61:2a:41:76:b3:07:73:08:84:0e:
46:a2:ef:34:11:45:0b:8d:a5:6d:08:c9:78:96:1d:
9b:d3:6f:9d:6e:54:d9:67:f7:08:01:5a:38:ef:ca:
ba:e8:13:95:23:fd:ae:ab:dc:62:88:52:f2:9d:85:
54:dd:26:c3:4f:5a:3f:b2:5f:97:d2:49:00:bf:57:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EA:12:A8:34:42:34:FE:D1:F1:63:30:AB:0D:B4:17:1A:00:E9:1E
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/HOoSqDRCNP7R8WMwqw20FxoA6R4.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1f:86:25:24:4a:92:1f:be:d2:09:77:33:82:55:b7:5c:32:1d:
48:d5:c8:fa:84:be:8b:3c:78:7c:08:e6:20:ee:f9:4b:0b:4f:
ac:c5:b9:59:cf:f6:46:b5:de:6f:e1:68:9f:b1:0a:20:66:d7:
74:34:c8:cd:0a:3c:94:16:8e:db:45:52:6a:af:3c:d5:3d:11:
4b:03:51:df:1a:98:66:1e:24:46:d8:fc:48:ec:e5:d5:38:d3:
a6:3e:71:9f:d1:53:d2:59:15:c5:f4:fa:fc:5e:dc:1f:7e:86:
be:9d:ed:17:db:d7:b8:00:00:3a:7f:41:fd:d7:95:4c:26:7e:
20:30:62:fe:65:f4:4b:c1:06:09:7e:0a:3d:87:4e:2e:d0:05:
ba:b1:43:d6:57:dc:e9:27:51:1f:44:4c:89:a0:9c:69:b8:29:
06:ae:d4:94:d9:fc:13:f4:e7:09:32:42:74:4b:c5:6d:6b:9e:
c8:31:f4:49:b3:64:8b:e7:75:9c:36:e9:18:a9:62:82:21:c8:
30:2d:72:bc:d9:f3:3c:77:7b:fc:8a:46:08:aa:e6:63:8d:0f:
b0:c9:56:d5:06:18:e6:5b:56:fe:4c:62:66:50:48:19:9b:e7:
1a:0f:3c:43:73:82:09:f1:c5:a5:47:40:91:55:9b:73:70:b4:
08:18:5f:30
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGagwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjgw
OTI0MDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDFDRUExMkE4MzQ0MjM0
RkVEMUYxNjMzMEFCMERCNDE3MUEwMEU5MUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH30rz5SX1QiRTUgttvjF9nqXyG2Lm3i7KclskzIq5AhEWXGSj
uMCIhF8KL6up7in4RlCpSUKpHK6AtYOxVWDWMjB/9zkOqfPE6py1NEyvbCAQ6BuK
BklUXAL6vdPjeVelN8VpZUQITKMrZ9pgC3daFAAbxPObjhaVquezZD3S7yfMLV7c
jpgQDoTeFsnyX5JHfWDU6ABULARzEwJMF3Tdzg3804Oj0FZ2HfQmMO9ni8+o8hoT
t07XYSpBdrMHcwiEDkai7zQRRQuNpW0IyXiWHZvTb51uVNln9wgBWjjvyrroE5Uj
/a6r3GKIUvKdhVTdJsNPWj+yX5fSSQC/V8lRAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUHOoSqDRCNP7R8WMwqw20FxoA6R4wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0hPb1NxRFJDTlA3UjhX
TXdxdzIwRnhvQTZSNC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAH4YlJEqSH77SCXczglW3XDIdSNXI+oS+
izx4fAjmIO75SwtPrMW5Wc/2RrXeb+Fon7EKIGbXdDTIzQo8lBaO20VSaq881T0R
SwNR3xqYZh4kRtj8SOzl1TjTpj5xn9FT0lkVxfT6/F7cH36Gvp3tF9vXuAAAOn9B
/deVTCZ+IDBi/mX0S8EGCX4KPYdOLtAFurFD1lfc6SdRH0RMiaCcabgpBq7UlNn8
E/TnCTJCdEvFbWueyDH0SbNki+d1nDbpGKligiHIMC1yvNnzPHd7/IpGCKrmY40P
sMlW1QYY5ltW/kxiZlBIGZvnGg88Q3OCCfHFpUdAkVWbc3C0CBhfMA==
-----END CERTIFICATE-----
Generated at Sun May 18 04:44:27 2025 by rpki-client