Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/QB1QQixBELWamSRpBhZs2BQxwfQ.roa
File: QB1QQixBELWamSRpBhZs2BQxwfQ.roa (raw, json)
Hash identifier: XQ40veSp4QIAcLAuA5cExJRqdMHhRIzMPg9jDdKIw28=
Subject key identifier: 40:1D:50:42:2C:41:10:B5:9A:99:24:69:06:16:6C:D8:14:31:C1:F4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18D0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QB1QQixBELWamSRpBhZs2BQxwfQ.roa
Signing time: Fri 26 Apr 2024 03:23:46 +0000
ROA not before: Fri 26 Apr 2024 03:23:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6352 (0x18d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 26 03:23:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=401D50422C4110B59A99246906166CD81431C1F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:f1:64:e0:a9:30:2a:6b:6a:2a:99:e2:b0:
23:59:33:a7:d4:9c:27:1a:d7:88:be:39:03:6b:43:
c7:58:f1:86:5d:00:62:d3:57:eb:6e:a9:07:f1:55:
a0:fa:37:a8:f1:cf:58:75:12:f8:a1:3d:79:db:eb:
a7:74:e2:35:91:89:f9:00:9f:0c:b9:45:55:86:a7:
d7:c6:61:30:d5:6d:fb:7c:fa:d6:08:a7:aa:f2:bf:
2d:69:47:01:bc:a7:d2:8b:62:9d:fc:0a:f5:a7:e4:
43:13:fa:35:f9:50:d8:62:cb:fd:b2:d3:4d:8f:46:
58:cb:b3:fe:fe:41:29:48:b0:b2:0e:1c:41:ff:a5:
e0:f2:fb:dc:a6:0a:e9:27:5b:28:ca:a6:14:00:e2:
00:9b:0c:eb:b7:1a:f9:5e:f4:50:81:c5:98:b9:df:
38:38:d5:2f:ec:50:6a:bf:07:cf:ba:09:7f:b9:5d:
aa:5c:ec:96:cf:be:d8:00:d6:cd:ab:6b:9d:1a:86:
f1:ac:e9:e6:53:90:9a:86:4d:d5:98:c4:56:37:ba:
4c:1b:01:44:7f:da:10:ad:d9:67:b4:90:07:20:75:
e3:25:50:ff:5f:0e:33:48:7e:0b:3d:dd:02:b9:57:
86:6b:d7:79:f5:d0:af:e1:a1:c7:f3:da:53:6f:72:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1D:50:42:2C:41:10:B5:9A:99:24:69:06:16:6C:D8:14:31:C1:F4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/QB1QQixBELWamSRpBhZs2BQxwfQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:c8:a7:76:ea:b5:59:00:74:68:9e:70:a6:36:9a:27:9d:af:
20:d8:4a:b3:4c:9e:97:0c:07:39:6e:80:6f:4a:5a:94:93:ad:
fb:55:ca:98:dc:2c:20:48:d2:d1:c6:51:b2:09:4f:2e:c4:d3:
82:5a:d1:54:72:cf:ed:b8:93:4b:6a:ca:3d:e5:f2:d4:0a:7d:
15:c6:db:69:3b:3f:ac:41:69:be:3f:88:36:25:12:11:48:8a:
b2:b7:38:43:a9:94:19:c2:dd:79:82:f5:26:bb:2f:b7:91:9a:
05:f6:31:d5:bd:31:0b:40:5d:83:e8:6b:45:cd:84:31:74:29:
74:9e:43:f8:80:eb:9e:be:58:3d:4f:de:3c:04:20:a8:4e:33:
09:f1:01:63:f5:fe:e7:0b:c9:b1:7a:75:33:2c:cf:03:2f:55:
d7:c3:2a:16:aa:3c:6a:a8:6e:fd:3a:24:1e:08:e9:b9:25:61:
e5:85:e3:b4:11:0a:79:05:f2:80:24:36:79:f4:dc:de:36:65:
ec:d5:a5:44:1a:70:fe:af:35:b1:33:9c:83:1f:df:15:09:32:
0c:ae:a8:b5:82:2e:4b:62:f4:76:5b:3d:6b:f0:22:50:e1:d0:
1b:5c:d2:3f:9d:c5:dc:66:53:45:a9:78:7a:ba:8c:01:ac:fc:
5c:d1:4e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:54:08 2025 by rpki-client