Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/XQurlEva_0-yyFdCdFkvNX-CZhM.roa
File: XQurlEva_0-yyFdCdFkvNX-CZhM.roa (raw, json)
Hash identifier: hxuzG5Kh5EVjSGDtWgiWjSR74lXtCo+H0/KU4pCnvLw=
Subject key identifier: 5D:0B:AB:94:4B:DA:FF:4F:B2:C8:57:42:74:59:2F:35:7F:82:66:13
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 16C6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/XQurlEva_0-yyFdCdFkvNX-CZhM.roa
Signing time: Sat 20 Apr 2024 16:53:38 +0000
ROA not before: Sat 20 Apr 2024 16:53:38 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5830 (0x16c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 20 16:53:38 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=5D0BAB944BDAFF4FB2C8574274592F357F826613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:f1:be:47:ee:b5:a8:d5:62:63:5a:a0:b0:
ef:0f:02:ae:cd:67:5e:6f:15:0b:d1:dc:fa:dc:b0:
93:33:6e:c2:e3:22:cb:b1:9b:04:8c:c0:d2:57:09:
09:82:9b:d5:a0:de:e2:e0:5e:56:1a:c1:60:c2:46:
b9:6a:fe:12:89:1b:9c:f2:2a:91:a0:8a:41:9e:f3:
0b:2a:da:af:8f:86:dd:92:2a:9f:4c:46:81:31:0a:
ae:10:fa:99:6c:de:6e:ba:e8:58:f6:c1:f0:57:5e:
b6:bb:70:c1:c3:7b:0b:f0:58:a0:e9:3f:95:f8:84:
75:ce:92:32:1e:6f:16:0e:b4:27:ee:9d:45:31:b5:
19:3a:15:6f:04:b0:51:19:71:af:34:e4:c6:b6:95:
f8:4e:27:86:8e:69:a3:68:84:11:8d:77:fd:18:27:
f5:45:b6:b9:b7:81:3d:db:55:c2:28:92:28:c5:77:
b4:84:45:f4:f8:88:ba:1e:5b:70:ae:c4:07:1b:96:
55:46:48:ee:2c:84:7e:3f:77:f0:55:00:15:db:19:
aa:b9:73:61:d7:9d:5e:c8:2a:3f:79:f9:a0:67:c1:
fe:73:f8:96:d8:bf:f2:39:87:bf:aa:ba:f0:3b:42:
a4:0b:e7:df:cf:45:7c:a7:98:64:e3:a1:8c:05:fb:
1c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:AB:94:4B:DA:FF:4F:B2:C8:57:42:74:59:2F:35:7F:82:66:13
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/XQurlEva_0-yyFdCdFkvNX-CZhM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:35:69:8c:82:3b:54:06:90:02:cc:b0:38:b3:d6:98:67:79:
89:d9:ad:7f:9f:3e:61:4e:ef:ae:3e:54:5c:9a:ef:36:f6:13:
64:bf:fe:c2:c0:0b:e3:45:0c:5f:1c:6f:41:69:9d:99:ed:9a:
dc:07:7f:f0:af:b8:4e:4a:2d:51:93:32:df:9b:d9:94:c4:81:
d4:75:47:b6:8c:f0:4a:12:ac:77:a0:fb:fb:7a:7f:1a:da:e6:
4f:50:87:d9:41:95:de:b8:af:17:98:99:7c:78:3d:3c:89:af:
a2:8c:9d:30:cb:7c:35:98:6f:9b:26:5a:7c:ad:40:8c:b9:e1:
24:ee:a4:3d:7e:7e:56:0d:6b:17:7a:5e:d9:4d:98:00:bd:d4:
a5:11:2c:1a:b4:ae:b9:7e:91:8d:12:0d:c9:2a:7d:3e:80:e7:
63:28:b5:5f:73:f7:bc:20:fe:23:0c:63:59:aa:d2:30:4c:d7:
4c:93:61:4f:3b:4f:71:cf:68:ac:b2:ce:25:32:c6:aa:cd:06:
e3:b1:ae:2d:30:97:72:a9:f6:72:19:51:5b:fa:a5:f2:db:81:
65:87:86:8c:5e:84:4a:cd:61:45:dc:37:fb:c9:81:0e:33:85:
a7:c1:c3:f1:62:8e:fd:ed:e5:6a:89:52:09:a1:0f:8c:38:5a:
48:57:92:95
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFsYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjAx
NjUzMzhaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDVEMEJBQjk0NEJEQUZG
NEZCMkM4NTc0Mjc0NTkyRjM1N0Y4MjY2MTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn9/G+R+61qNViY1qgsO8PAq7NZ15vFQvR3PrcsJMzbsLjIsux
mwSMwNJXCQmCm9Wg3uLgXlYawWDCRrlq/hKJG5zyKpGgikGe8wsq2q+Pht2SKp9M
RoExCq4Q+pls3m666Fj2wfBXXra7cMHDewvwWKDpP5X4hHXOkjIebxYOtCfunUUx
tRk6FW8EsFEZca805Ma2lfhOJ4aOaaNohBGNd/0YJ/VFtrm3gT3bVcIokijFd7SE
RfT4iLoeW3CuxAcbllVGSO4shH4/d/BVABXbGaq5c2HXnV7IKj95+aBnwf5z+JbY
v/I5h7+quvA7QqQL59/PRXynmGTjoYwF+xxvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUXQurlEva/0+yyFdCdFkvNX+CZhMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1hRdXJsRXZhXzAteXlG
ZENkRmt2TlgtQ1poTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAvTVpjII7VAaQAsywOLPWmGd5idmtf58+
YU7vrj5UXJrvNvYTZL/+wsAL40UMXxxvQWmdme2a3Ad/8K+4TkotUZMy35vZlMSB
1HVHtozwShKsd6D7+3p/GtrmT1CH2UGV3rivF5iZfHg9PImvooydMMt8NZhvmyZa
fK1AjLnhJO6kPX5+Vg1rF3pe2U2YAL3UpREsGrSuuX6RjRINySp9PoDnYyi1X3P3
vCD+IwxjWarSMEzXTJNhTztPcc9orLLOJTLGqs0G47GuLTCXcqn2chlRW/ql8tuB
ZYeGjF6ESs1hRdw3+8mBDjOFp8HD8WKO/e3laolSCaEPjDhaSFeSlQ==
-----END CERTIFICATE-----
Generated at Sun May 18 04:44:28 2025 by rpki-client