Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/dwJBzim1bZ0kBkvh9GDJGcjAxZY.roa
File: dwJBzim1bZ0kBkvh9GDJGcjAxZY.roa (raw, json)
Hash identifier: n8uyDPHYBBRLNkU2erMF5fBLw/08N6NM2lnEXzFIqgE=
Subject key identifier: 77:02:41:CE:29:B5:6D:9D:24:06:4B:E1:F4:60:C9:19:C8:C0:C5:96
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1230
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dwJBzim1bZ0kBkvh9GDJGcjAxZY.roa
Signing time: Mon 08 Apr 2024 11:22:56 +0000
ROA not before: Mon 08 Apr 2024 11:22:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4656 (0x1230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 11:22:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=770241CE29B56D9D24064BE1F460C919C8C0C596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:5a:01:ba:3e:3e:59:cb:e4:69:5b:80:56:
e0:62:ef:20:66:50:86:50:ec:cb:87:29:f1:32:01:
c7:d9:0b:2c:c7:9e:23:c9:77:97:d6:6d:83:7f:5c:
bb:3c:ff:55:4d:2c:c1:97:f6:40:d3:8f:79:b5:f9:
bc:ca:ba:dc:bb:27:0f:50:ef:cd:4e:4a:4a:96:49:
b0:9b:83:62:13:c6:5f:49:91:7d:8b:4c:03:b8:64:
e7:f3:e1:b2:d0:4c:69:85:59:8d:2c:ec:3c:f4:3e:
47:bf:f0:8e:93:e9:e0:22:5a:5b:fc:12:2c:e7:c4:
1c:ff:ca:a7:ba:5f:09:62:b3:6a:c8:31:7e:c2:08:
d5:9b:ff:a5:c9:2d:cc:09:54:bd:2f:48:8a:72:a6:
41:81:f7:d3:eb:b6:02:ca:4e:e0:7a:fb:46:bb:9f:
15:9b:1b:eb:0d:31:6d:46:9b:1e:1f:b8:5c:48:61:
cb:8b:78:21:07:27:6c:d2:6a:a1:11:ea:f2:c6:db:
f8:92:21:25:85:aa:cb:1c:82:aa:37:81:bc:2d:c5:
e5:12:e3:a2:30:6c:7b:09:2a:e5:60:55:ad:d7:e0:
a4:e2:3e:75:34:64:d2:09:56:11:2f:8f:54:97:1d:
43:e6:79:1e:41:5f:93:bf:97:51:91:6d:88:d5:46:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:41:CE:29:B5:6D:9D:24:06:4B:E1:F4:60:C9:19:C8:C0:C5:96
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/dwJBzim1bZ0kBkvh9GDJGcjAxZY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:03:de:6b:6f:e4:cb:66:09:0c:04:fd:65:94:f2:f1:2e:0c:
24:25:2f:a2:bb:41:70:cb:f9:97:90:9d:7f:17:a1:fa:d0:2f:
d7:c4:f5:b6:71:96:e2:c1:3a:b4:0f:eb:b9:40:c9:66:df:c8:
b3:5d:68:53:67:4a:fa:46:d1:66:f8:13:cf:65:ee:09:d6:7d:
45:b0:a3:e9:43:c1:77:15:24:3e:88:d9:2a:de:d6:7a:1d:59:
a0:88:2d:ee:ad:0e:76:6c:e5:c1:57:57:7d:b1:0c:3e:27:ed:
45:17:42:c3:89:f4:0a:aa:3c:3e:8f:04:70:51:df:ef:74:09:
76:f3:39:ce:06:37:81:23:4c:47:dc:1d:42:75:3e:31:35:70:
2e:f0:8d:ab:05:0c:e4:86:b8:d3:f9:4e:c2:c0:58:9d:e5:ae:
1f:7b:9f:51:f7:a2:2a:b1:40:9a:e5:29:53:ac:9b:4e:1c:e0:
a0:91:90:d8:97:08:7f:4e:0d:4c:51:ed:10:c4:1c:f6:d9:dd:
e1:d2:16:2f:63:cb:ba:c0:53:2f:22:89:3f:28:b1:05:5c:0b:
b6:6c:c6:23:a3:7d:11:fb:32:de:41:02:ee:0b:05:29:2c:1a:
3d:10:5f:e5:78:dd:e1:22:28:0a:e0:dc:f9:30:e5:43:1a:4b:
5a:bf:48:e2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEjAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDgx
MTIyNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDc3MDI0MUNFMjlCNTZE
OUQyNDA2NEJFMUY0NjBDOTE5QzhDMEM1OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCog1oBuj4+WcvkaVuAVuBi7yBmUIZQ7MuHKfEyAcfZCyzHniPJ
d5fWbYN/XLs8/1VNLMGX9kDTj3m1+bzKuty7Jw9Q781OSkqWSbCbg2ITxl9JkX2L
TAO4ZOfz4bLQTGmFWY0s7Dz0Pke/8I6T6eAiWlv8EiznxBz/yqe6Xwlis2rIMX7C
CNWb/6XJLcwJVL0vSIpypkGB99PrtgLKTuB6+0a7nxWbG+sNMW1Gmx4fuFxIYcuL
eCEHJ2zSaqER6vLG2/iSISWFqsscgqo3gbwtxeUS46IwbHsJKuVgVa3X4KTiPnU0
ZNIJVhEvj1SXHUPmeR5BX5O/l1GRbYjVRpBLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUdwJBzim1bZ0kBkvh9GDJGcjAxZYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2R3SkJ6aW0xYlowa0Jr
dmg5R0RKR2NqQXhaWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAigPea2/ky2YJDAT9ZZTy8S4MJCUvortB
cMv5l5Cdfxeh+tAv18T1tnGW4sE6tA/ruUDJZt/Is11oU2dK+kbRZvgTz2XuCdZ9
RbCj6UPBdxUkPojZKt7Weh1ZoIgt7q0OdmzlwVdXfbEMPiftRRdCw4n0Cqo8Po8E
cFHf73QJdvM5zgY3gSNMR9wdQnU+MTVwLvCNqwUM5Ia40/lOwsBYneWuH3ufUfei
KrFAmuUpU6ybThzgoJGQ2JcIf04NTFHtEMQc9tnd4dIWL2PLusBTLyKJPyixBVwL
tmzGI6N9Efsy3kEC7gsFKSwaPRBf5Xjd4SIoCuDc+TDlQxpLWr9I4g==
-----END CERTIFICATE-----
Generated at Sun May 18 05:53:21 2025 by rpki-client