Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/WY1JYEokthiDn0kHIYxaokH8gvM.roa
File: WY1JYEokthiDn0kHIYxaokH8gvM.roa (raw, json)
Hash identifier: OHXU7QxquVGnFlJBoFz1cNObdXcjR0mDmto5fR5/6FY=
Subject key identifier: 59:8D:49:60:4A:24:B6:18:83:9F:49:07:21:8C:5A:A2:41:FC:82:F3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16D8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WY1JYEokthiDn0kHIYxaokH8gvM.roa
Signing time: Sat 20 Apr 2024 21:23:30 +0000
ROA not before: Sat 20 Apr 2024 21:23:30 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5848 (0x16d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 21:23:30 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=598D49604A24B618839F4907218C5AA241FC82F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:30:93:a9:1e:59:4b:88:94:07:7e:10:8f:48:
76:21:75:6c:77:f8:79:47:ee:53:3c:b3:f2:83:a1:
4b:66:68:79:d1:25:f6:5d:60:b7:51:15:7a:7a:5f:
5b:d1:ad:2f:fe:ea:34:24:10:83:0a:fc:aa:37:e7:
fc:17:1a:e9:26:ae:41:bb:f4:6f:df:79:2b:95:a0:
df:91:28:22:41:1c:bf:1f:35:5a:20:a3:f6:88:ef:
29:34:6a:77:27:5f:25:f8:cb:16:fe:5c:c6:99:bb:
78:d9:12:62:ba:0e:54:49:61:77:3a:b5:25:01:2f:
f4:21:87:b7:c3:d6:b4:a6:18:f0:4e:3c:e1:07:2c:
fc:29:0f:97:ac:cb:7d:4b:76:d2:92:d0:35:a5:ed:
05:2e:dd:26:68:a6:63:97:4d:84:86:69:5a:32:37:
5d:12:79:75:dd:68:cd:3f:2e:f2:04:9a:e9:17:73:
23:0e:a6:84:64:6a:5c:b0:f3:3e:9a:ee:d5:7c:02:
93:f8:45:40:a6:c6:b7:72:37:c7:41:3f:6d:31:fd:
52:f5:7f:61:0c:46:df:b3:69:c0:a4:a4:62:70:84:
88:9e:fd:1b:cd:af:4c:06:5a:9b:1c:fe:b3:b6:d2:
d2:83:e0:cb:21:eb:fb:7a:b9:8f:4c:34:6b:82:83:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:8D:49:60:4A:24:B6:18:83:9F:49:07:21:8C:5A:A2:41:FC:82:F3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/WY1JYEokthiDn0kHIYxaokH8gvM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bf:86:3c:ea:5b:38:1e:be:72:ef:88:95:a0:65:b3:0f:4f:a4:
45:ce:9f:d5:17:41:3c:3a:6b:d3:74:22:c1:d9:00:56:ac:e6:
e8:bd:b0:f7:91:1e:ba:11:fe:76:39:c7:7e:f8:c8:62:14:97:
c8:62:f5:8d:6a:9e:f4:2d:14:72:1c:fd:e9:59:17:f9:d0:2a:
f6:57:a5:1d:cd:99:3a:79:6c:d4:fc:39:e0:f6:99:a7:01:31:
26:c0:90:53:13:ae:a8:d8:e2:ab:7b:ff:0d:a7:a3:9d:86:d2:
ef:6b:c3:de:82:10:c9:b5:82:8f:e3:d3:bf:28:89:15:e7:db:
b0:08:ed:82:58:25:69:e0:ba:7c:d5:74:97:9d:d8:4f:5a:26:
58:93:55:bd:b7:92:9b:3c:2a:f3:7f:5b:b2:d7:ee:d7:0d:b0:
91:db:49:6f:ea:2f:1b:0d:b3:0a:0f:a1:e2:e6:e1:7c:35:9a:
02:52:9b:b6:ed:63:54:c5:fb:3f:21:81:99:28:62:2c:7b:cb:
a0:35:52:d3:0f:00:63:ca:8e:43:d4:30:86:65:73:09:f1:af:
8d:16:1d:aa:b6:45:b0:6a:d4:82:47:5a:6c:74:fd:76:cb:ef:
5c:88:30:c6:49:e3:dc:bd:89:44:53:52:13:65:8b:3f:da:82:
73:11:79:57
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAy
MTIzMzBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDU5OEQ0OTYwNEEyNEI2
MTg4MzlGNDkwNzIxOEM1QUEyNDFGQzgyRjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDZMJOpHllLiJQHfhCPSHYhdWx3+HlH7lM8s/KDoUtmaHnRJfZd
YLdRFXp6X1vRrS/+6jQkEIMK/Ko35/wXGukmrkG79G/feSuVoN+RKCJBHL8fNVog
o/aI7yk0ancnXyX4yxb+XMaZu3jZEmK6DlRJYXc6tSUBL/Qhh7fD1rSmGPBOPOEH
LPwpD5esy31LdtKS0DWl7QUu3SZopmOXTYSGaVoyN10SeXXdaM0/LvIEmukXcyMO
poRkalyw8z6a7tV8ApP4RUCmxrdyN8dBP20x/VL1f2EMRt+zacCkpGJwhIie/RvN
r0wGWpsc/rO20tKD4Msh6/t6uY9MNGuCg+E5AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUWY1JYEokthiDn0kHIYxaokH8gvMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1dZMUpZRW9rdGhpRG4w
a0hJWXhhb2tIOGd2TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAv4Y86ls4Hr5y74iVoGWzD0+kRc6f1RdB
PDpr03QiwdkAVqzm6L2w95EeuhH+djnHfvjIYhSXyGL1jWqe9C0Uchz96VkX+dAq
9lelHc2ZOnls1Pw54PaZpwExJsCQUxOuqNjiq3v/DaejnYbS72vD3oIQybWCj+PT
vyiJFefbsAjtglglaeC6fNV0l53YT1omWJNVvbeSmzwq839bstfu1w2wkdtJb+ov
Gw2zCg+h4ubhfDWaAlKbtu1jVMX7PyGBmShiLHvLoDVS0w8AY8qOQ9QwhmVzCfGv
jRYdqrZFsGrUgkdabHT9dsvvXIgwxknj3L2JRFNSE2WLP9qCcxF5Vw==
-----END CERTIFICATE-----
Generated at Sun May 18 05:53:19 2025 by rpki-client