Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/PQP9329GbeC2PntsyQ-0ZB4jQRc.roa
File: PQP9329GbeC2PntsyQ-0ZB4jQRc.roa (raw, json)
Hash identifier: tBOlorwqtmY4MbxelwdG1ExtJZ68HIYrnP8/fnpieJE=
Subject key identifier: 3D:03:FD:DF:6F:46:6D:E0:B6:3E:7B:6C:C9:0F:B4:64:1E:23:41:17
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C18
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PQP9329GbeC2PntsyQ-0ZB4jQRc.roa
Signing time: Sat 04 May 2024 21:24:14 +0000
ROA not before: Sat 04 May 2024 21:24:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7192 (0x1c18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 4 21:24:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=3D03FDDF6F466DE0B63E7B6CC90FB4641E234117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4b:28:5c:69:10:eb:e6:10:3b:e5:73:af:7a:
64:bd:6f:b1:37:67:43:46:c8:b5:fa:50:0e:79:1d:
3e:e3:c5:0b:4d:87:c2:78:87:f9:21:b2:f3:04:97:
39:72:e7:1c:c4:1c:d3:b2:de:f2:2a:6f:60:34:35:
42:b0:80:1e:f1:0d:39:56:31:51:bd:ac:24:ef:3c:
59:32:99:0c:ca:d4:17:da:34:9e:02:1b:6b:ed:79:
d8:03:d0:2b:9d:28:bd:77:76:d9:62:1f:26:59:c1:
b4:a0:bc:e4:e5:35:f0:1e:c7:9d:49:7b:59:29:cd:
e5:aa:97:9f:09:cf:da:b3:54:09:da:bc:17:44:b2:
f1:81:7b:90:f1:6c:2d:21:3c:28:29:af:d5:84:6f:
a0:27:08:9b:9e:be:25:4c:7d:6c:91:9c:82:38:ed:
82:6d:81:50:fa:64:ec:8a:c8:62:12:b6:d8:6d:8f:
3a:58:cf:df:ea:ab:0b:43:d3:a0:bf:60:72:3a:03:
67:8e:73:5d:1f:af:95:71:6c:73:60:06:cf:89:a7:
c7:b4:5e:90:b6:3c:07:61:cb:2f:a8:16:be:80:fd:
2b:7c:4c:ca:ae:b9:c5:f6:c1:8a:5c:fd:79:22:1a:
db:b7:0e:dc:14:bf:5c:0c:77:23:d9:de:ee:8d:4a:
6a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:03:FD:DF:6F:46:6D:E0:B6:3E:7B:6C:C9:0F:B4:64:1E:23:41:17
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/PQP9329GbeC2PntsyQ-0ZB4jQRc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:a0:40:85:2b:4c:65:9f:9c:9a:33:5d:21:88:d2:16:b8:6d:
e5:a2:73:2c:8d:b7:a4:b2:dd:c0:63:1d:9f:37:c9:7c:05:a5:
c5:cf:54:83:64:d7:46:a9:1c:b8:fb:02:57:b9:0f:57:30:77:
f6:ef:76:b2:eb:7b:f5:86:86:d4:8f:bc:32:8a:2f:cc:2d:6d:
b4:c8:22:8e:4e:2a:3a:42:64:82:3f:d2:1c:ca:c7:0d:d6:d9:
e1:98:7b:4e:df:fb:4b:3c:63:95:67:85:70:e4:ce:33:71:af:
46:65:49:4a:3d:14:66:05:ef:2d:e4:bb:1b:cb:5f:d0:f1:f7:
29:fd:c7:e4:59:42:d6:c5:93:bf:a3:26:48:49:41:a4:5c:4d:
c7:e1:98:96:28:6a:b1:e2:f7:d0:9b:eb:b2:25:87:26:de:3e:
8d:30:09:71:75:f1:67:98:37:31:51:56:ca:bb:00:11:3d:00:
68:05:26:8b:cf:75:a9:24:87:2f:33:81:cf:23:ff:d1:c3:6f:
98:62:19:8c:fc:5c:2a:2b:f9:30:d2:c8:57:96:04:d6:09:d3:
c3:81:4c:ab:ca:38:28:aa:1e:4d:99:61:93:dc:8a:30:5b:71:
42:e2:9c:97:71:7f:91:d0:31:7a:86:97:81:6f:f5:08:86:e7:
8c:9d:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:42:05 2025 by rpki-client