Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YD0__8COLSn_h2-NiCtWNDjog3M.roa
File: YD0__8COLSn_h2-NiCtWNDjog3M.roa (raw, json)
Hash identifier: pvb0SqHBxtdQXO487GJEwlkvWXPusB8mriU901v4s/s=
Subject key identifier: 60:3D:3F:FF:C0:8E:2D:29:FF:87:6F:8D:88:2B:56:34:38:E8:83:73
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F24
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YD0__8COLSn_h2-NiCtWNDjog3M.roa
Signing time: Sun 31 Mar 2024 08:22:36 +0000
ROA not before: Sun 31 Mar 2024 08:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3876 (0xf24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 08:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=603D3FFFC08E2D29FF876F8D882B563438E88373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6a:91:dc:9c:bb:72:c2:44:8e:89:b8:7e:e7:
73:f6:ca:80:38:65:cf:63:5e:29:c8:d2:a7:a7:29:
58:ed:5c:e4:b9:1f:57:84:b2:4c:6d:0e:b7:6d:40:
f2:9f:6e:2c:88:08:02:bf:ea:4e:ca:7c:6e:01:e5:
12:17:f5:3e:2b:f6:e1:a1:a3:a0:6a:90:45:4f:66:
c7:55:94:bf:de:b3:bd:9c:46:a5:0e:f6:6b:c5:1f:
60:14:1f:a4:8a:d6:21:ee:88:5e:39:e6:cb:48:6e:
01:1f:bf:be:ac:f5:26:db:ae:5c:67:95:86:18:86:
56:5a:c4:e0:8d:73:5d:8d:e3:0a:86:08:6d:86:b6:
6e:aa:51:5b:65:36:32:41:26:f3:ec:10:b0:81:70:
e7:ad:14:6e:9c:e0:ac:2c:45:21:b0:25:92:00:47:
6d:ac:20:9c:05:aa:79:2a:30:73:d0:42:27:22:87:
d4:e4:d5:c9:bc:16:fd:e7:a5:93:ee:5c:94:b8:7d:
23:38:35:09:9f:64:37:a8:ce:aa:d2:9f:20:60:58:
d5:e9:4b:23:b3:8f:82:b9:ac:bf:46:6f:3b:c3:dc:
c6:dd:ac:b7:15:d3:b1:38:1e:cb:68:46:15:00:39:
e5:32:bd:b8:af:f5:44:87:e4:60:b9:1c:4c:e2:20:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:3F:FF:C0:8E:2D:29:FF:87:6F:8D:88:2B:56:34:38:E8:83:73
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YD0__8COLSn_h2-NiCtWNDjog3M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
04:16:84:af:2a:92:12:81:8e:40:85:d5:11:71:aa:ae:9f:f5:
38:d1:7e:4d:43:83:3e:56:c8:71:4a:fd:17:1d:53:96:6b:cf:
90:c1:2f:ec:63:d4:c9:48:03:2d:10:bc:15:0e:97:c9:8b:5b:
aa:97:da:a0:3f:6e:d6:d2:24:31:65:5b:83:17:4d:84:45:fc:
27:ce:b7:90:44:e8:cb:a8:62:2b:db:33:2c:c4:1c:58:fc:b6:
11:c3:32:9d:57:33:12:8c:e3:e9:fc:4b:f3:e5:15:fa:04:8b:
d9:d3:56:1c:d4:a3:b5:20:82:db:64:93:5c:0e:0c:a2:d6:fb:
e4:7d:15:7a:db:9d:29:a5:ef:01:aa:e8:e6:b3:fe:78:f0:41:
2b:8c:c9:68:85:60:75:12:3a:ad:5e:86:b8:23:fc:62:39:1f:
7d:56:3b:bb:98:d7:a0:d8:a3:97:13:0f:b5:59:55:f1:bc:bd:
d2:48:92:a6:12:4e:c6:d5:af:c1:07:44:49:b1:c2:3f:5d:85:
0e:16:bf:93:65:43:f2:20:6d:c6:87:75:db:af:9e:c1:07:6c:
b7:8f:19:28:a1:31:94:5a:6d:00:02:21:2c:cc:90:c0:22:fc:
5e:74:ef:9a:1b:d5:04:c5:e5:02:01:90:8c:4b:34:e0:5c:d4:
a1:63:4d:9a
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDyQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzEw
ODIyMzZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYwM0QzRkZGQzA4RTJE
MjlGRjg3NkY4RDg4MkI1NjM0MzhFODgzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKapHcnLtywkSOibh+53P2yoA4Zc9jXinI0qenKVjtXOS5H1eE
skxtDrdtQPKfbiyICAK/6k7KfG4B5RIX9T4r9uGho6BqkEVPZsdVlL/es72cRqUO
9mvFH2AUH6SK1iHuiF455stIbgEfv76s9SbbrlxnlYYYhlZaxOCNc12N4wqGCG2G
tm6qUVtlNjJBJvPsELCBcOetFG6c4KwsRSGwJZIAR22sIJwFqnkqMHPQQicih9Tk
1cm8Fv3npZPuXJS4fSM4NQmfZDeozqrSnyBgWNXpSyOzj4K5rL9GbzvD3MbdrLcV
07E4HstoRhUAOeUyvbiv9USH5GC5HEziIMIbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUYD0//8COLSn/h2+NiCtWNDjog3MwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1lEMF9fOENPTFNuX2gy
LU5pQ3RXTkRqb2czTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEABBaEryqSEoGOQIXVEXGqrp/1ONF+TUOD
PlbIcUr9Fx1TlmvPkMEv7GPUyUgDLRC8FQ6XyYtbqpfaoD9u1tIkMWVbgxdNhEX8
J863kEToy6hiK9szLMQcWPy2EcMynVczEozj6fxL8+UV+gSL2dNWHNSjtSCC22ST
XA4Motb75H0VetudKaXvAaro5rP+ePBBK4zJaIVgdRI6rV6GuCP8YjkffVY7u5jX
oNijlxMPtVlV8by90kiSphJOxtWvwQdESbHCP12FDha/k2VD8iBtxod126+ewQds
t48ZKKExlFptAAIhLMyQwCL8XnTvmhvVBMXlAgGQjEs04FzUoWNNmg==
-----END CERTIFICATE-----
Generated at Sun May 18 10:51:48 2025 by rpki-client