Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/P2aw6AGuwdbceuH9k5mMkHuoQ58.roa
File: P2aw6AGuwdbceuH9k5mMkHuoQ58.roa (raw, json)
Hash identifier: D7xEsk+JV1AGNKLA0azfCwITuvfb+/cr77zvG3LAJu0=
Subject key identifier: 3F:66:B0:E8:01:AE:C1:D6:DC:7A:E1:FD:93:99:8C:90:7B:A8:43:9F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BCE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/P2aw6AGuwdbceuH9k5mMkHuoQ58.roa
Signing time: Sat 04 May 2024 02:54:11 +0000
ROA not before: Sat 04 May 2024 02:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7118 (0x1bce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 02:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3F66B0E801AEC1D6DC7AE1FD93998C907BA8439F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:00:02:ce:d6:92:08:a3:fe:6f:0a:e4:3f:80:
11:5f:f4:44:99:2a:d4:37:ea:f6:60:8a:5e:1d:d2:
4a:fd:78:a3:1c:4f:de:69:4b:5f:86:80:71:37:a7:
f5:b5:af:43:89:13:3c:01:5b:83:c0:5d:ea:eb:c8:
d8:26:0e:f3:47:9f:33:aa:79:72:1c:a6:42:6d:2f:
1f:dd:ac:f3:b6:68:cd:bf:02:a4:f5:f6:4c:32:f5:
b5:53:7b:bb:ec:92:fc:f2:a0:06:d9:6a:ae:2c:1f:
f6:ff:4a:d3:cd:5a:10:d4:af:65:a8:a7:6a:1c:12:
fa:43:30:9a:53:93:a5:d5:61:be:13:92:1d:7d:cd:
c7:ae:7c:92:11:44:f7:e2:0a:a9:ec:c9:f0:5b:dd:
00:d0:2b:5a:1f:46:74:16:ef:03:f8:38:c2:eb:1a:
2a:4b:47:88:ad:78:b3:98:88:0a:29:66:a4:9d:97:
2c:fe:03:1c:23:d0:93:75:6b:1f:08:8e:6e:d2:fe:
b0:4d:ef:d6:95:5a:80:3d:4c:cf:72:1d:16:a5:01:
aa:83:8b:e6:04:d8:5e:8e:e2:17:68:ef:7a:00:95:
7e:2b:9e:0e:78:fe:62:40:91:5c:c7:fe:2b:4e:a1:
c9:ed:3f:e9:fd:2e:ae:ee:2c:95:a2:41:18:f1:4b:
75:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:66:B0:E8:01:AE:C1:D6:DC:7A:E1:FD:93:99:8C:90:7B:A8:43:9F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/P2aw6AGuwdbceuH9k5mMkHuoQ58.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:f2:6f:6d:18:89:c7:c9:2b:ef:a5:c8:64:c6:ab:cd:24:e0:
6a:78:66:fb:e2:36:c3:71:ef:1e:a7:1d:93:9d:2e:db:ac:9e:
72:f7:1b:60:30:58:b6:8b:e7:d6:06:9f:d3:38:84:28:e5:a5:
ad:7a:e0:b9:34:93:08:e5:bb:71:9d:1e:b4:d2:e4:8e:97:a3:
8c:d8:f1:93:23:0d:ee:77:bd:5d:1b:fd:a0:da:e3:a9:38:c1:
da:2b:5c:6c:25:3f:0d:09:83:3b:c4:3d:84:cc:ec:11:85:0a:
bd:79:e9:58:1d:c8:8c:ea:85:81:8d:33:1e:2c:1e:ce:72:1d:
e5:34:78:f8:a3:81:9f:bc:bb:32:63:96:5a:85:31:53:46:ac:
ce:0e:16:77:0d:37:2b:2b:23:08:87:31:b4:e8:12:05:e2:5f:
d4:53:11:93:f2:68:13:0a:59:18:82:1f:66:f2:db:34:3f:d1:
7e:b0:d2:bc:5b:16:40:83:f9:89:bd:ea:be:6b:27:69:15:3d:
2a:85:50:4d:17:79:0d:23:92:c9:37:ec:44:31:bd:e1:ce:27:
cb:82:e0:56:65:d2:32:1f:c1:58:6d:d4:4d:cc:2c:ad:01:21:
ce:e8:78:28:18:5b:66:92:b3:7f:83:1c:45:f8:8f:ba:61:9a:
67:82:4e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:58:15 2025 by rpki-client