Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ODVCH-V57lLJt8oKfuZDu3kD1aM.roa
File:                     ODVCH-V57lLJt8oKfuZDu3kD1aM.roa (raw, json)
Hash identifier:          b0IyEUWZ7iMl5+PMldhOUYaBcbsR/i0AE18h5oOuGxA=
Subject key identifier:   38:35:42:1F:E5:79:EE:52:C9:B7:CA:0A:7E:E6:43:BB:79:03:D5:A3
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       0E3C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ODVCH-V57lLJt8oKfuZDu3kD1aM.roa
Signing time:             Thu 28 Mar 2024 22:22:28 +0000
ROA not before:           Thu 28 Mar 2024 22:22:28 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3644 (0xe3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Mar 28 22:22:28 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=3835421FE579EE52C9B7CA0A7EE643BB7903D5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:03:96:39:2b:2b:75:15:7b:9c:25:49:dc:50:
                    54:de:f5:96:de:2c:c9:88:7d:2e:2b:16:a1:27:6b:
                    b3:40:6c:d4:38:3c:ee:7e:60:fa:bd:cd:8a:2d:e8:
                    a8:6b:3e:97:46:c9:58:94:e6:91:ff:de:77:00:a8:
                    22:16:d4:bf:22:b8:30:f0:83:9b:91:32:58:a5:a5:
                    74:04:99:f3:47:23:30:8a:db:5d:1f:94:9f:8b:a2:
                    64:ee:16:06:ce:95:63:b0:ff:3b:45:8a:15:e5:df:
                    66:ab:39:e5:00:e5:16:c9:83:ac:da:c2:ae:89:71:
                    fe:93:45:76:17:b4:24:06:53:49:32:77:21:a8:35:
                    c0:a8:18:da:ed:a7:ef:48:42:e5:1b:51:53:cb:b7:
                    a3:37:00:9e:1e:7c:a9:89:d6:bf:95:3f:de:2a:98:
                    e7:58:72:0d:6d:67:43:b1:0d:6a:be:70:12:27:cf:
                    10:c3:68:e4:7e:7f:ba:5e:a4:28:98:6f:97:6c:4f:
                    01:3d:fa:16:8c:e7:68:be:7d:d5:f7:71:a4:69:bb:
                    57:e6:c0:a1:98:a1:9e:8d:2b:d3:13:ff:39:eb:31:
                    c6:17:db:9f:84:7b:96:2f:a0:f1:ba:7f:9f:93:5d:
                    ff:d1:e7:19:ef:21:11:b1:26:32:f5:a0:e0:c0:92:
                    8b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:42:1F:E5:79:EE:52:C9:B7:CA:0A:7E:E6:43:BB:79:03:D5:A3
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ODVCH-V57lLJt8oKfuZDu3kD1aM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:a3:49:d8:ad:bb:3b:aa:cb:e6:a0:4b:43:94:fb:5c:52:28:
         28:13:ea:d6:e0:81:1f:7e:f5:4c:86:78:ef:57:82:d8:fb:78:
         f7:3f:95:36:22:88:97:06:b7:88:46:35:f5:56:29:44:15:31:
         4c:ed:a8:13:56:12:dd:05:21:a1:55:1d:13:e1:76:31:54:5e:
         e2:5e:e1:48:04:bb:a0:df:d0:4d:ff:1c:ff:12:e1:93:6c:20:
         a0:a9:96:33:de:2c:6f:ad:ab:4e:9a:71:65:41:24:8f:90:b8:
         a9:06:8d:f2:9c:9b:71:59:31:7d:c1:40:6b:00:f2:74:fc:96:
         1c:d3:36:f0:85:09:e2:da:77:3c:9a:fe:07:51:e8:d5:cb:b8:
         9d:42:65:73:98:2b:dd:8a:3a:37:a9:f7:db:0d:f0:6b:b8:33:
         f2:cf:e0:68:94:33:bd:e6:f1:f8:97:f9:86:48:d3:9b:90:bb:
         40:06:a5:5a:6e:2f:c2:19:b5:6d:3d:bf:bc:f9:17:de:e2:ac:
         b4:f9:6e:1a:c1:11:b9:4c:a7:84:c5:12:fc:5e:54:a9:8f:42:
         c6:85:c9:92:18:e4:ab:a0:31:97:da:c4:64:5d:d5:93:8d:31:
         1a:32:20:57:91:f8:d5:45:a1:7e:5b:ba:67:d3:17:81:d6:02:
         ee:7b:d9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:52:05 2025 by rpki-client