Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Mu_2f0tyxxbWiRUh2aDCt0g2kWI.roa
File: Mu_2f0tyxxbWiRUh2aDCt0g2kWI.roa (raw, json)
Hash identifier: YcgvJIoX75RWToiQssZTUczSJkZCN5YNxPPYnO7f7HE=
Subject key identifier: 32:EF:F6:7F:4B:72:C7:16:D6:89:15:21:D9:A0:C2:B7:48:36:91:62
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F46
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mu_2f0tyxxbWiRUh2aDCt0g2kWI.roa
Signing time: Sun 31 Mar 2024 16:53:23 +0000
ROA not before: Sun 31 Mar 2024 16:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3910 (0xf46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 16:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=32EFF67F4B72C716D6891521D9A0C2B748369162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:78:83:3a:d1:12:26:b5:05:6d:e7:45:b3:
28:7e:fe:f8:14:22:d0:f9:4b:15:7f:fb:8a:40:8a:
99:86:b4:a0:0e:57:7a:7e:6f:3f:25:2a:45:18:23:
c8:2e:bb:87:3d:15:03:32:f2:71:ae:3e:ac:d3:db:
74:19:d6:e4:99:25:db:28:58:bb:fe:1b:6a:f4:c6:
b7:c3:98:71:78:b4:70:bf:dd:84:01:cb:3d:01:ca:
8b:da:8f:33:c8:83:74:30:8f:3f:f9:c9:39:db:87:
a6:1c:a7:a9:a4:47:fe:e3:9f:21:a9:ed:96:26:f3:
6b:5e:99:ef:db:98:98:96:24:4b:8a:dd:c5:84:e0:
7d:8c:d1:74:bb:1b:d8:69:45:81:c0:e8:53:9f:6c:
da:82:d0:98:2a:be:3e:bf:92:79:f1:33:62:d1:57:
7d:18:5d:bc:20:ac:2e:f5:68:6f:4d:fd:d4:e0:1c:
a6:49:f7:88:55:50:24:35:56:ab:ac:49:80:59:a8:
d4:d0:18:cb:9d:70:60:74:fe:16:a9:bb:72:a7:d9:
79:42:16:56:c4:26:c3:6d:0b:33:75:df:35:ee:22:
50:38:77:7f:8e:2b:33:38:58:50:45:5d:e2:09:93:
79:45:b1:cd:b7:0a:35:bd:ff:69:ef:8f:86:1d:4e:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EF:F6:7F:4B:72:C7:16:D6:89:15:21:D9:A0:C2:B7:48:36:91:62
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Mu_2f0tyxxbWiRUh2aDCt0g2kWI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:11:64:b9:33:7b:c8:91:8d:4d:aa:ff:1a:70:21:62:59:94:
88:8d:3a:19:88:24:8e:5a:06:02:9b:e8:e4:a8:c6:8a:63:e2:
1c:53:71:af:7a:2e:ae:16:ee:33:eb:6e:3a:ba:58:45:54:89:
e0:91:45:70:b3:1e:09:85:29:1f:0f:87:42:58:db:cf:38:9c:
51:8e:21:fc:ae:bd:8d:99:ab:1e:4c:ec:cc:c9:e6:58:02:d2:
42:6c:72:70:c9:67:55:5f:ba:c5:c7:82:a8:dd:27:25:76:c7:
62:4c:18:5f:2b:0c:43:b1:48:33:26:31:ba:8f:c9:a5:0d:b1:
d9:7b:71:b6:91:79:7a:92:97:7e:37:66:e8:da:01:81:4e:ee:
fa:35:e9:d2:d9:48:be:b3:cb:1f:36:65:c5:09:2e:b2:58:2c:
31:18:50:a4:10:00:35:1a:1b:d9:5a:e1:fb:87:ec:87:e8:e7:
cd:e3:97:c0:59:04:10:76:ef:6e:df:ed:ad:e3:8f:88:ef:b7:
c6:50:9b:d8:d4:af:81:6c:f7:39:67:e0:eb:18:89:97:02:f4:
cb:ba:12:4d:b9:25:47:c3:b4:97:06:b4:13:15:1a:66:f0:db:
3a:11:82:b8:79:a9:db:ae:f5:60:a2:01:5a:bf:c7:8c:cf:f1:
27:fc:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:43:33 2025 by rpki-client