Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ZZmkFiQ1ChRwO0ylVB5oVCJmqM8.roa
File: ZZmkFiQ1ChRwO0ylVB5oVCJmqM8.roa (raw, json)
Hash identifier: ih9+Csp+pTsNBigSZ8czf1rnc1Qg4L2nHx/krMET/kQ=
Subject key identifier: 65:99:A4:16:24:35:0A:14:70:3B:4C:A5:54:1E:68:54:22:66:A8:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1454
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZZmkFiQ1ChRwO0ylVB5oVCJmqM8.roa
Signing time: Sun 14 Apr 2024 04:23:15 +0000
ROA not before: Sun 14 Apr 2024 04:23:15 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5204 (0x1454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 04:23:15 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=6599A41624350A14703B4CA5541E68542266A8CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:18:0b:bf:53:51:f9:18:4d:d8:bc:bf:df:
d1:3a:15:d4:aa:07:4c:a9:3a:68:d4:4f:2f:a8:6b:
9f:e7:19:e0:24:8f:93:f5:3b:5e:9a:e9:ee:7b:8d:
16:b8:c0:da:60:72:90:09:5c:1a:99:49:c6:fd:8b:
9c:e7:c6:3a:d7:e2:dc:cf:5c:49:e7:96:53:d4:52:
9b:75:a8:78:06:42:09:36:f2:36:8a:2a:fc:29:42:
cc:f3:4c:3d:30:bd:d8:97:21:0c:4c:47:47:90:9b:
38:46:46:5a:db:e8:60:37:57:b7:48:3b:12:86:51:
26:6f:e1:d2:cc:e9:a7:28:35:74:d8:db:17:c4:a7:
30:c2:43:8e:bf:c6:5d:6e:67:7a:ca:73:d7:ee:ca:
e8:b6:cd:e6:76:a5:a9:e6:9e:10:c7:c4:e7:f3:8b:
cc:ff:fb:63:3f:e7:6e:27:73:c2:ca:d8:74:2d:ba:
28:24:15:2b:83:a2:53:09:cb:91:02:75:1e:57:5b:
39:09:74:2d:f8:86:9a:cd:89:9c:bf:9f:e2:ed:5f:
36:c1:4f:7f:4a:5f:6b:19:f8:b7:2d:ab:36:08:21:
e5:4a:b7:06:90:8a:f1:63:f2:c1:42:e8:1b:ab:8e:
ed:49:36:9d:5c:00:56:7d:a0:f5:ec:21:95:36:8a:
93:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:A4:16:24:35:0A:14:70:3B:4C:A5:54:1E:68:54:22:66:A8:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ZZmkFiQ1ChRwO0ylVB5oVCJmqM8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
83:98:29:2d:32:8a:85:a3:19:e5:6d:c0:2e:de:92:70:36:50:
65:d9:bd:fc:ac:11:36:a3:a0:56:ac:ba:49:77:84:47:34:69:
83:e8:d3:0f:38:52:d4:a7:95:c3:26:0f:3d:ff:fd:ea:f7:53:
e4:c1:87:d7:5b:d5:af:21:4e:41:ec:86:a6:32:c3:f6:8d:91:
10:04:21:0e:42:5f:26:d1:e5:47:e1:63:93:4f:8d:1d:f2:44:
af:76:d2:9c:f6:45:4a:c2:f7:0d:94:76:b7:5b:ac:6b:49:b4:
3a:28:57:68:0c:e4:c0:ca:77:ef:31:02:4d:a9:1f:7e:b0:02:
ab:41:28:15:15:a2:cc:ee:16:c4:57:f4:f1:5d:fd:d5:3d:33:
e0:c3:c5:0a:d9:73:b7:43:4c:17:a7:bc:55:f0:cd:fc:ab:de:
84:da:6a:7d:cc:a6:3f:32:6d:66:5a:61:3f:6e:7d:c5:70:4c:
ed:d9:e6:ce:4f:cd:c0:df:87:dc:97:87:af:fc:e0:dc:35:02:
e2:45:c0:bb:db:46:9b:99:c3:bd:c1:1d:1f:b1:de:c4:5d:1e:
eb:9d:cd:0e:8c:74:b2:50:d1:59:94:d5:2c:1e:98:90:cf:42:
da:8c:3d:f4:b0:2b:fa:9b:fd:b2:51:f3:d2:02:93:9b:65:f4:
ef:a9:35:7b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFFQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTQw
NDIzMTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY1OTlBNDE2MjQzNTBB
MTQ3MDNCNENBNTU0MUU2ODU0MjI2NkE4Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQrBgLv1NR+RhN2Ly/39E6FdSqB0ypOmjUTy+oa5/nGeAkj5P1
O16a6e57jRa4wNpgcpAJXBqZScb9i5znxjrX4tzPXEnnllPUUpt1qHgGQgk28jaK
KvwpQszzTD0wvdiXIQxMR0eQmzhGRlrb6GA3V7dIOxKGUSZv4dLM6acoNXTY2xfE
pzDCQ46/xl1uZ3rKc9fuyui2zeZ2panmnhDHxOfzi8z/+2M/524nc8LK2HQtuigk
FSuDolMJy5ECdR5XWzkJdC34hprNiZy/n+LtXzbBT39KX2sZ+LctqzYIIeVKtwaQ
ivFj8sFC6Burju1JNp1cAFZ9oPXsIZU2ipPVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUZZmkFiQ1ChRwO0ylVB5oVCJmqM8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1pabWtGaVExQ2hSd08w
eWxWQjVvVkNKbXFNOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAg5gpLTKKhaMZ5W3ALt6ScDZQZdm9/KwR
NqOgVqy6SXeERzRpg+jTDzhS1KeVwyYPPf/96vdT5MGH11vVryFOQeyGpjLD9o2R
EAQhDkJfJtHlR+Fjk0+NHfJEr3bSnPZFSsL3DZR2t1usa0m0OihXaAzkwMp37zEC
TakffrACq0EoFRWizO4WxFf08V391T0z4MPFCtlzt0NMF6e8VfDN/KvehNpqfcym
PzJtZlphP259xXBM7dnmzk/NwN+H3JeHr/zg3DUC4kXAu9tGm5nDvcEdH7HexF0e
653NDox0slDRWZTVLB6YkM9C2ow99LAr+pv9slHz0gKTm2X076k1ew==
-----END CERTIFICATE-----
Generated at Sun May 18 04:46:26 2025 by rpki-client