Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/T0TobVdCqIHu-km3pHN30GcO2UY.roa
File: T0TobVdCqIHu-km3pHN30GcO2UY.roa (raw, json)
Hash identifier: Pu2mFLhtnSdcfzivHpPfJXZXulF4XC9VuA7wrwNaF5Y=
Subject key identifier: 4F:44:E8:6D:57:42:A8:81:EE:FA:49:B7:A4:73:77:D0:67:0E:D9:46
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E9A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/T0TobVdCqIHu-km3pHN30GcO2UY.roa
Signing time: Fri 29 Mar 2024 21:52:29 +0000
ROA not before: Fri 29 Mar 2024 21:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3738 (0xe9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 21:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=4F44E86D5742A881EEFA49B7A47377D0670ED946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7e:83:36:15:cd:8c:48:28:9e:e9:d5:3e:a8:
41:5b:22:50:80:49:82:3e:d3:85:84:86:a9:9c:59:
34:00:db:4b:e6:c1:9b:fa:30:67:c5:13:4a:70:42:
5e:16:d1:1e:02:ad:00:74:86:12:95:dd:3f:5f:94:
7a:86:b0:c5:cd:1b:24:b6:b4:af:3e:e6:a6:9e:47:
92:87:c2:2e:3b:97:95:ad:f7:58:2a:60:5e:c1:9c:
25:d8:18:11:7e:85:80:30:96:10:f8:e0:35:29:85:
58:0a:41:86:25:f2:50:36:3a:3a:3b:61:ff:37:e9:
d4:e2:b1:9d:e9:60:41:2e:c2:e9:c5:70:46:3f:78:
c4:cc:e5:e5:53:10:75:c2:00:bd:6c:9a:f7:5b:c0:
b0:ff:9b:9c:33:1a:eb:7f:24:89:2e:7d:cf:bc:44:
60:14:3f:6b:d9:ed:d1:15:2a:27:d0:65:bd:3d:c0:
02:93:7c:93:55:23:64:47:0f:a4:4b:3b:f4:df:85:
65:7b:62:16:3e:57:e0:e4:26:f4:fb:7e:7c:77:47:
f3:3c:2d:e2:fc:55:db:54:cf:3f:c6:d8:91:fc:30:
75:29:aa:8f:8c:e1:57:c1:c4:f6:50:ba:ed:8b:b7:
f5:28:48:1d:82:2a:c1:c2:78:6d:05:4e:3c:cf:b6:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:44:E8:6D:57:42:A8:81:EE:FA:49:B7:A4:73:77:D0:67:0E:D9:46
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/T0TobVdCqIHu-km3pHN30GcO2UY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:6b:44:e9:8e:e3:3d:52:2e:bb:50:a1:b7:c5:af:43:32:b6:
b1:71:14:83:54:cb:f3:ba:92:fe:3a:ad:19:0a:e9:ae:a9:a3:
0b:5f:30:bf:38:b3:7a:25:bb:39:a5:90:e5:81:18:44:f6:51:
ae:75:73:8f:8b:bc:48:fb:ce:a1:b7:81:2a:bc:31:8e:b4:d6:
46:82:c3:cb:a5:c9:b0:79:d7:40:eb:8f:b2:b7:76:68:87:95:
a2:7a:ce:34:90:6a:07:1d:60:1a:e6:22:d3:66:62:a3:9a:29:
06:0a:c9:b6:d1:23:90:c8:38:7b:28:e9:31:04:54:5f:33:96:
c3:70:fb:6e:ed:ad:9e:2f:12:d5:a1:28:b4:17:1d:5e:f0:97:
58:9d:04:2a:06:d0:50:3a:8d:68:12:88:02:f3:9b:b2:6a:63:
bf:ca:72:29:59:48:f9:a1:d5:e1:ec:31:74:4c:cb:74:c3:7c:
fb:c9:a6:f0:c0:88:4d:f7:e7:c7:77:69:85:bf:64:37:d3:1f:
1a:8d:1f:5b:f1:ae:da:8a:d7:ae:0b:e6:12:1f:e7:22:db:cc:
63:8b:24:b5:ca:ce:ed:16:78:5e:e8:11:ea:58:5e:45:30:65:
e5:0c:71:22:56:8b:49:4d:4b:03:8f:dd:ce:9b:5e:d7:dd:47:
5f:d4:d6:a5
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDpowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjky
MTUyMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDRGNDRFODZENTc0MkE4
ODFFRUZBNDlCN0E0NzM3N0QwNjcwRUQ5NDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUfoM2Fc2MSCie6dU+qEFbIlCASYI+04WEhqmcWTQA20vmwZv6
MGfFE0pwQl4W0R4CrQB0hhKV3T9flHqGsMXNGyS2tK8+5qaeR5KHwi47l5Wt91gq
YF7BnCXYGBF+hYAwlhD44DUphVgKQYYl8lA2Ojo7Yf836dTisZ3pYEEuwunFcEY/
eMTM5eVTEHXCAL1smvdbwLD/m5wzGut/JIkufc+8RGAUP2vZ7dEVKifQZb09wAKT
fJNVI2RHD6RLO/TfhWV7YhY+V+DkJvT7fnx3R/M8LeL8VdtUzz/G2JH8MHUpqo+M
4VfBxPZQuu2Lt/UoSB2CKsHCeG0FTjzPtlEnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUT0TobVdCqIHu+km3pHN30GcO2UYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1QwVG9iVmRDcUlIdS1r
bTNwSE4zMEdjTzJVWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA02tE6Y7jPVIuu1Cht8WvQzK2sXEUg1TL
87qS/jqtGQrprqmjC18wvzizeiW7OaWQ5YEYRPZRrnVzj4u8SPvOobeBKrwxjrTW
RoLDy6XJsHnXQOuPsrd2aIeVonrONJBqBx1gGuYi02Zio5opBgrJttEjkMg4eyjp
MQRUXzOWw3D7bu2tni8S1aEotBcdXvCXWJ0EKgbQUDqNaBKIAvObsmpjv8pyKVlI
+aHV4ewxdEzLdMN8+8mm8MCITffnx3dphb9kN9MfGo0fW/Gu2orXrgvmEh/nItvM
Y4sktcrO7RZ4XugR6lheRTBl5QxxIlaLSU1LA4/dzpte191HX9TWpQ==
-----END CERTIFICATE-----
Generated at Sun May 18 05:59:01 2025 by rpki-client