Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/_0OCBk22_Y6Ux4p4xGqCuVv4kLQ.roa
File: _0OCBk22_Y6Ux4p4xGqCuVv4kLQ.roa (raw, json)
Hash identifier: QXF0zx0UZqx6Zao5W3+IRjV1kNXG39r5lZr4KTDLCgM=
Subject key identifier: FF:43:82:06:4D:B6:FD:8E:94:C7:8A:78:C4:6A:82:B9:5B:F8:90:B4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11FE
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_0OCBk22_Y6Ux4p4xGqCuVv4kLQ.roa
Signing time: Sun 07 Apr 2024 22:52:57 +0000
ROA not before: Sun 07 Apr 2024 22:52:57 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4606 (0x11fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 22:52:57 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FF4382064DB6FD8E94C78A78C46A82B95BF890B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:47:64:7e:63:44:cb:af:fd:3a:d2:be:f9:
af:95:7e:0f:23:7a:9c:c1:2a:d4:22:08:c8:fa:82:
59:35:22:30:f2:9c:37:b8:ac:a6:e9:00:99:75:3b:
3f:ee:c7:c9:f7:3b:b4:e6:53:2d:f2:bc:3f:db:2c:
20:2f:d3:32:4f:f1:c4:b9:92:09:6e:30:14:0c:c4:
60:ae:25:34:01:9d:5e:99:a7:7e:5d:40:4c:60:07:
3f:64:1c:99:a5:b0:b2:2d:a3:ca:15:66:ae:cc:b2:
71:d9:bd:f3:da:c7:b0:fb:0f:50:e7:de:bc:ab:63:
17:23:dc:1c:54:46:14:01:27:e2:a0:37:4c:bc:38:
a3:c3:f6:c7:95:9b:80:60:50:83:5d:e7:3a:11:a2:
1e:2b:38:eb:20:44:d4:d1:57:b3:e7:26:13:f2:19:
b9:9a:1a:25:26:36:fe:f3:fb:38:cc:3d:de:52:d1:
93:8e:71:5d:ee:29:4c:b5:f3:7f:fa:86:84:a1:64:
f7:50:2a:bf:9c:e7:40:d6:79:a4:cf:ca:ed:9c:fd:
d4:0f:ce:fd:13:fd:f7:00:6a:98:23:52:f3:d9:74:
ff:05:d2:e6:21:d7:86:6d:57:db:51:63:cb:bf:aa:
c5:df:2a:eb:55:2f:4e:73:8e:55:7b:e2:8e:98:8b:
d2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:43:82:06:4D:B6:FD:8E:94:C7:8A:78:C4:6A:82:B9:5B:F8:90:B4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/_0OCBk22_Y6Ux4p4xGqCuVv4kLQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:1c:90:6a:ac:41:b2:da:7b:7d:a6:3f:a8:c3:65:7b:fc:34:
fd:51:76:f8:34:a5:99:2f:d2:1d:09:21:41:fa:a8:e6:c1:7b:
b2:a9:02:1d:76:a0:45:4e:0f:e6:f1:f5:12:3f:2d:87:1f:03:
83:f3:2e:54:7c:34:2e:30:d5:35:06:a5:e1:9b:c8:1c:7b:4b:
e6:b1:69:22:df:02:a5:b0:59:d4:ee:88:fe:c6:b1:10:d7:87:
89:2f:21:4b:0f:51:ea:63:af:5f:d5:7b:0f:ad:ba:dc:cf:a2:
ee:8b:8a:32:87:b8:dd:c7:27:f7:be:ca:b9:56:45:0b:62:0f:
28:03:a4:5a:1e:14:a4:bc:01:39:86:0b:06:6c:59:4b:d1:09:
eb:88:b7:ec:79:9f:6e:f5:3f:9d:95:d7:c4:7a:26:13:d2:fd:
93:69:2e:97:64:89:2c:2d:ca:54:ce:81:26:07:4a:60:fc:03:
9e:aa:1c:2b:f3:41:3a:60:76:8a:9b:55:f1:5a:52:42:08:72:
02:1f:22:30:fa:e2:13:d7:c1:7e:f4:90:0b:2f:5c:65:9d:ee:
94:8f:94:ee:9b:40:97:91:81:c1:e2:3f:ff:9c:d9:39:1c:65:
5c:cd:15:03:97:7b:fa:a4:36:07:6c:37:c9:7d:46:ee:a4:a0:
9e:3e:26:bd
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEf4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDcy
MjUyNTdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZGNDM4MjA2NERCNkZE
OEU5NEM3OEE3OEM0NkE4MkI5NUJGODkwQjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu8kdkfmNEy6/9OtK++a+Vfg8jepzBKtQiCMj6glk1IjDynDe4
rKbpAJl1Oz/ux8n3O7TmUy3yvD/bLCAv0zJP8cS5kgluMBQMxGCuJTQBnV6Zp35d
QExgBz9kHJmlsLIto8oVZq7MsnHZvfPax7D7D1Dn3ryrYxcj3BxURhQBJ+KgN0y8
OKPD9seVm4BgUINd5zoRoh4rOOsgRNTRV7PnJhPyGbmaGiUmNv7z+zjMPd5S0ZOO
cV3uKUy183/6hoShZPdQKr+c50DWeaTPyu2c/dQPzv0T/fcAapgjUvPZdP8F0uYh
14ZtV9tRY8u/qsXfKutVL05zjlV74o6Yi9IzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU/0OCBk22/Y6Ux4p4xGqCuVv4kLQwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL18wT0NCazIyX1k2VXg0
cDR4R3FDdVZ2NGtMUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAqhyQaqxBstp7faY/qMNle/w0/VF2+DSl
mS/SHQkhQfqo5sF7sqkCHXagRU4P5vH1Ej8thx8Dg/MuVHw0LjDVNQal4ZvIHHtL
5rFpIt8CpbBZ1O6I/saxENeHiS8hSw9R6mOvX9V7D6263M+i7ouKMoe43ccn977K
uVZFC2IPKAOkWh4UpLwBOYYLBmxZS9EJ64i37HmfbvU/nZXXxHomE9L9k2kul2SJ
LC3KVM6BJgdKYPwDnqocK/NBOmB2iptV8VpSQghyAh8iMPriE9fBfvSQCy9cZZ3u
lI+U7ptAl5GBweI//5zZORxlXM0VA5d7+qQ2B2w3yX1G7qSgnj4mvQ==
-----END CERTIFICATE-----
Generated at Sun May 18 05:57:36 2025 by rpki-client