Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/MXt01Stznga4lYBCaVtcIcuiTGk.roa
File: MXt01Stznga4lYBCaVtcIcuiTGk.roa (raw, json)
Hash identifier: Zb2HXuOxRFBo8k6a45IZZK6OdirZfZLPGq0RHv+g82M=
Subject key identifier: 31:7B:74:D5:2B:73:9E:06:B8:95:80:42:69:5B:5C:21:CB:A2:4C:69
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1576
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MXt01Stznga4lYBCaVtcIcuiTGk.roa
Signing time: Wed 17 Apr 2024 04:53:23 +0000
ROA not before: Wed 17 Apr 2024 04:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5494 (0x1576)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 04:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=317B74D52B739E06B8958042695B5C21CBA24C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:6b:f9:35:0b:d7:13:75:8c:40:0d:20:bb:
00:db:76:20:0d:a1:4f:d4:7c:0e:07:fb:af:8c:29:
59:77:3d:f4:ce:cf:b3:09:7c:75:9d:8b:6c:f8:33:
e5:2e:8d:68:5d:fb:74:e5:47:9e:21:d3:c6:15:4e:
41:bf:03:f0:ed:6f:9b:9c:bd:48:08:2c:e7:d9:7e:
84:c8:15:6e:0b:52:f4:db:57:9d:80:2e:57:03:49:
ae:42:03:6b:ee:6d:2e:38:ca:84:06:27:05:3e:fd:
1d:c7:fc:a8:af:3c:0c:6f:d5:28:f3:1d:eb:72:a0:
fd:06:cc:6b:62:7d:cb:e5:31:0a:10:a5:c5:b5:32:
74:aa:38:21:fb:a8:0f:68:c5:55:90:ca:a0:be:30:
db:2d:04:c0:30:54:2e:48:1d:98:da:f4:4a:56:39:
43:9a:fb:22:f2:33:81:98:b2:49:83:a2:a4:cf:c3:
ed:b3:d2:10:05:45:a1:e8:83:ff:de:ba:74:b8:56:
60:86:6b:eb:28:77:96:f7:5a:95:b2:c6:50:a3:86:
dd:dc:44:62:db:15:01:e6:58:48:fa:ab:b4:11:02:
56:bb:00:61:ed:71:ae:c0:b3:90:e2:f0:07:7f:e6:
5c:d0:fd:cb:21:da:01:c6:d7:eb:c1:5e:88:e9:9e:
17:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7B:74:D5:2B:73:9E:06:B8:95:80:42:69:5B:5C:21:CB:A2:4C:69
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/MXt01Stznga4lYBCaVtcIcuiTGk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
85:44:3d:77:4a:78:32:0b:0c:67:33:14:6c:4c:ee:f4:44:2c:
50:a6:93:85:9f:d3:3f:48:85:c1:97:72:27:d5:39:75:29:f6:
8d:e3:95:ef:c0:90:1a:78:8b:67:61:9b:33:28:50:8e:b0:ae:
84:d6:8c:19:08:09:5b:ad:74:8a:26:66:da:d2:d8:43:0f:fd:
c8:6c:4f:22:f8:c7:50:bd:99:4b:0a:58:27:22:d0:38:f1:2e:
bb:21:b4:8d:2a:4c:6d:37:0c:12:25:73:d4:e8:43:fd:9c:e7:
46:db:96:af:87:dc:3c:aa:3e:6f:11:8f:92:ae:89:33:37:c5:
87:1c:16:38:09:db:2c:e2:80:d5:82:f6:c1:af:d9:3e:65:93:
cb:5e:a0:de:df:00:18:96:6e:65:06:ba:10:32:da:68:ba:8a:
f6:4f:b8:3e:bb:06:a1:74:18:a2:7e:c3:f1:51:8f:b3:b1:da:
02:8b:52:09:c2:1f:b0:71:5a:64:94:5f:8e:86:a6:3f:c2:57:
7c:30:de:32:41:ad:22:27:df:c6:f3:21:df:ac:10:69:54:67:
18:98:51:26:d0:31:c3:7f:a3:4e:d3:07:9d:9b:d4:59:62:0c:
ad:58:91:76:94:e5:ae:4a:00:1d:b6:d3:73:e4:fe:1b:10:41:
5d:3a:02:2c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFXYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcw
NDUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDMxN0I3NEQ1MkI3MzlF
MDZCODk1ODA0MjY5NUI1QzIxQ0JBMjRDNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKwGv5NQvXE3WMQA0guwDbdiANoU/UfA4H+6+MKVl3PfTOz7MJ
fHWdi2z4M+UujWhd+3TlR54h08YVTkG/A/Dtb5ucvUgILOfZfoTIFW4LUvTbV52A
LlcDSa5CA2vubS44yoQGJwU+/R3H/KivPAxv1SjzHetyoP0GzGtifcvlMQoQpcW1
MnSqOCH7qA9oxVWQyqC+MNstBMAwVC5IHZja9EpWOUOa+yLyM4GYskmDoqTPw+2z
0hAFRaHog//eunS4VmCGa+sod5b3WpWyxlCjht3cRGLbFQHmWEj6q7QRAla7AGHt
ca7As5Di8Ad/5lzQ/csh2gHG1+vBXojpnhfhAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUMXt01Stznga4lYBCaVtcIcuiTGkwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL01YdDAxU3R6bmdhNGxZ
QkNhVnRjSWN1aVRHay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAhUQ9d0p4MgsMZzMUbEzu9EQsUKaThZ/T
P0iFwZdyJ9U5dSn2jeOV78CQGniLZ2GbMyhQjrCuhNaMGQgJW610iiZm2tLYQw/9
yGxPIvjHUL2ZSwpYJyLQOPEuuyG0jSpMbTcMEiVz1OhD/ZznRtuWr4fcPKo+bxGP
kq6JMzfFhxwWOAnbLOKA1YL2wa/ZPmWTy16g3t8AGJZuZQa6EDLaaLqK9k+4PrsG
oXQYon7D8VGPs7HaAotSCcIfsHFaZJRfjoamP8JXfDDeMkGtIiffxvMh36wQaVRn
GJhRJtAxw3+jTtMHnZvUWWIMrViRdpTlrkoAHbbTc+T+GxBBXToCLA==
-----END CERTIFICATE-----
Generated at Sun May 18 10:57:09 2025 by rpki-client