Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/SVhhQqLVf4P4Z0gvgT2AwvtavLc.roa
File: SVhhQqLVf4P4Z0gvgT2AwvtavLc.roa (raw, json)
Hash identifier: 9N+3Uun0aJKxkYuZQARjB9swBBO0tQ7mrLebd543nSE=
Subject key identifier: 49:58:61:42:A2:D5:7F:83:F8:67:48:2F:81:3D:80:C2:FB:5A:BC:B7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B94
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SVhhQqLVf4P4Z0gvgT2AwvtavLc.roa
Signing time: Fri 03 May 2024 12:24:09 +0000
ROA not before: Fri 03 May 2024 12:24:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7060 (0x1b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 12:24:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=49586142A2D57F83F867482F813D80C2FB5ABCB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:89:00:cc:51:4b:44:ee:b7:1d:29:9b:c4:ed:
dd:8f:0c:9a:7d:7c:68:1e:d1:71:60:12:a5:95:54:
b5:08:a0:60:91:96:a9:7f:66:85:89:4c:11:d4:de:
4b:6f:28:c6:7d:12:21:2c:8b:01:27:e5:83:df:32:
c3:92:27:e7:2b:5f:57:66:87:99:67:db:52:e7:eb:
7e:54:c2:e5:ad:d7:d4:3d:0a:51:fa:d2:cc:97:9d:
64:4f:95:13:97:6b:85:e3:3c:91:c6:5c:9b:00:21:
e3:4a:e9:35:4e:4c:26:b0:ee:e6:8c:80:47:d4:cd:
98:2f:65:fb:20:c1:73:58:34:b0:e9:1e:f7:d3:5c:
b3:06:32:76:14:47:e1:21:36:ce:b5:b4:95:1f:49:
96:b1:e9:41:b1:1e:e9:f2:8c:cd:8a:5d:73:af:6b:
9a:ae:d8:e6:b1:0c:16:a6:28:c3:ab:65:2c:42:0a:
84:20:f9:51:7d:ec:59:50:37:e6:0b:32:8a:24:f8:
a6:4c:f6:8c:ac:2b:0f:13:37:74:c0:ca:ab:4b:eb:
c1:03:3a:59:fd:6b:24:7a:7e:7e:d2:2a:ae:03:84:
61:30:c8:27:74:e2:11:c0:8c:d5:0f:35:54:40:cd:
af:16:e0:bb:3a:5b:e5:f8:69:5c:6e:79:c6:33:71:
a0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:58:61:42:A2:D5:7F:83:F8:67:48:2F:81:3D:80:C2:FB:5A:BC:B7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/SVhhQqLVf4P4Z0gvgT2AwvtavLc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4a:2d:b0:08:f3:31:e3:66:c8:0a:8e:28:1b:7b:c3:a6:fd:d5:
28:9d:4b:f2:8d:a8:6c:53:c5:32:f9:ab:b4:5b:5e:62:b2:00:
c4:37:fa:3f:3a:c2:24:48:94:87:21:80:5c:87:0a:7f:84:c1:
36:6a:b8:91:51:98:8c:57:13:1d:6b:1c:ed:01:96:54:3b:2f:
ae:f2:7d:38:f6:bc:c4:3c:25:45:57:d9:30:81:77:e3:fb:0c:
b2:13:05:f6:82:b2:12:af:67:02:73:e7:4b:f9:4e:ee:fb:6d:
c8:97:16:5e:40:c5:c7:9d:82:42:58:6c:c0:f2:a3:dc:a5:5e:
16:f1:05:fb:ff:62:72:72:bc:4c:fe:05:0e:8e:6c:fe:10:82:
46:15:ad:d1:45:69:b9:59:e0:ab:f7:8f:5b:5b:d2:8f:44:56:
24:fb:63:67:ab:04:10:40:f1:3c:31:09:1e:b7:98:ba:b8:db:
6b:13:d9:50:dc:69:35:05:62:4e:2b:f4:75:11:8b:19:cd:5f:
21:ab:ab:ab:90:93:46:cb:43:21:48:14:1a:1b:0b:f8:50:3b:
ef:7b:4c:e2:e6:df:71:8f:be:7f:48:68:3d:01:e7:a8:5d:7d:
35:58:69:f6:66:3f:ef:7c:77:4e:03:7e:c9:32:d9:98:cb:9d:
1c:08:18:d1
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG5QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMx
MjI0MDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQ5NTg2MTQyQTJENTdG
ODNGODY3NDgyRjgxM0Q4MEMyRkI1QUJDQjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtiQDMUUtE7rcdKZvE7d2PDJp9fGge0XFgEqWVVLUIoGCRlql/
ZoWJTBHU3ktvKMZ9EiEsiwEn5YPfMsOSJ+crX1dmh5ln21Ln635UwuWt19Q9ClH6
0syXnWRPlROXa4XjPJHGXJsAIeNK6TVOTCaw7uaMgEfUzZgvZfsgwXNYNLDpHvfT
XLMGMnYUR+EhNs61tJUfSZax6UGxHunyjM2KXXOva5qu2OaxDBamKMOrZSxCCoQg
+VF97FlQN+YLMook+KZM9oysKw8TN3TAyqtL68EDOln9ayR6fn7SKq4DhGEwyCd0
4hHAjNUPNVRAza8W4Ls6W+X4aVxuecYzcaD3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUSVhhQqLVf4P4Z0gvgT2AwvtavLcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1NWaGhRcUxWZjRQNFow
Z3ZnVDJBd3Z0YXZMYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEASi2wCPMx42bICo4oG3vDpv3VKJ1L8o2o
bFPFMvmrtFteYrIAxDf6PzrCJEiUhyGAXIcKf4TBNmq4kVGYjFcTHWsc7QGWVDsv
rvJ9OPa8xDwlRVfZMIF34/sMshMF9oKyEq9nAnPnS/lO7vttyJcWXkDFx52CQlhs
wPKj3KVeFvEF+/9icnK8TP4FDo5s/hCCRhWt0UVpuVngq/ePW1vSj0RWJPtjZ6sE
EEDxPDEJHreYurjbaxPZUNxpNQViTiv0dRGLGc1fIaurq5CTRstDIUgUGhsL+FA7
73tM4ubfcY++f0hoPQHnqF19NVhp9mY/73x3TgN+yTLZmMudHAgY0Q==
-----END CERTIFICATE-----
Generated at Sun May 18 11:00:49 2025 by rpki-client