Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/g3rEoVku4L4IrD-G0JuKkyOHF0g.roa
File: g3rEoVku4L4IrD-G0JuKkyOHF0g.roa (raw, json)
Hash identifier: 71rFUlJgSh1+1jw6lbyo5eBP23q2xre9YFTp8E2XRaM=
Subject key identifier: 83:7A:C4:A1:59:2E:E0:BE:08:AC:3F:86:D0:9B:8A:93:23:87:17:48
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1654
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/g3rEoVku4L4IrD-G0JuKkyOHF0g.roa
Signing time: Fri 19 Apr 2024 12:23:27 +0000
ROA not before: Fri 19 Apr 2024 12:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5716 (0x1654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 12:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=837AC4A1592EE0BE08AC3F86D09B8A9323871748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:50:48:49:d2:2a:04:a2:16:cb:97:92:8c:
e0:51:b1:7f:c2:05:9a:10:c1:fd:ab:1a:84:78:19:
30:e7:75:e7:43:5a:2c:d0:95:2b:5f:ec:e0:36:23:
03:51:a1:4a:66:b7:92:fc:f8:ed:44:41:33:51:99:
9d:19:b6:09:98:45:d8:be:93:a3:1d:12:a0:9f:87:
69:88:51:ac:69:a9:6a:6c:c0:a8:ed:92:52:e0:88:
52:e8:29:9b:6a:f2:58:bc:d8:85:9d:a6:7f:9e:35:
d6:c7:ab:97:cd:0d:02:41:a2:4b:67:ec:af:1a:2d:
43:fe:13:87:47:07:37:1d:f0:a2:71:ab:8f:64:5b:
74:2b:eb:e7:14:6b:4f:0d:27:6f:61:a7:12:0d:95:
d7:3c:e5:08:c8:dc:ee:27:cb:bd:17:f7:42:7c:8b:
f9:a1:24:e2:64:b6:66:de:c5:07:7e:47:10:ad:10:
f7:c1:8a:55:0b:62:6b:40:fd:a7:bf:f5:5d:d3:ae:
e4:b4:3b:2a:35:83:1d:16:36:ae:4e:a8:5d:64:d1:
52:35:b9:b6:ea:7b:6b:61:0f:c3:73:2c:eb:b1:0d:
e8:8b:93:79:2e:66:82:16:fc:05:0c:e8:9c:b7:37:
da:ce:9b:0d:99:74:74:9d:1f:66:0c:3f:b2:66:12:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7A:C4:A1:59:2E:E0:BE:08:AC:3F:86:D0:9B:8A:93:23:87:17:48
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/g3rEoVku4L4IrD-G0JuKkyOHF0g.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:70:96:ff:f3:85:9e:d6:8f:1b:02:1c:f2:03:6b:83:36:35:
37:35:3a:b7:10:93:c2:9f:14:15:29:87:03:e3:0d:e2:64:c1:
2f:e3:17:4e:74:90:cf:19:3b:9b:2e:00:64:b8:da:73:02:27:
19:6c:6b:a0:c8:d9:12:00:34:8a:d7:e4:ca:fb:4f:87:af:76:
84:10:a7:a8:36:a6:90:83:df:50:5a:b1:4a:cd:a2:bd:dd:4d:
97:7f:e2:9f:54:ba:c9:c7:ea:63:1c:fc:80:83:29:09:a9:3b:
17:d7:e4:0a:46:83:6b:f4:19:02:77:8e:40:3b:e6:e8:d5:6f:
90:c9:ac:45:5d:f1:70:41:0f:11:c1:40:6d:49:b9:8f:08:93:
ac:6e:9d:58:d9:be:0f:46:77:f9:04:a0:78:35:a7:b1:5d:c1:
da:08:ff:5f:d9:44:7e:e6:48:81:97:58:ae:61:f0:00:87:56:
83:27:4a:6b:4d:f7:75:11:ca:2a:3e:5f:45:71:54:91:66:87:
0d:9e:40:92:cd:d0:d8:d3:11:ab:4a:d9:9a:bc:4c:5e:38:d6:
1e:d1:de:e9:cc:44:f9:8d:36:52:35:ed:29:50:d1:f5:13:17:
02:12:71:f3:fb:31:98:e7:9a:be:d2:7d:83:a7:06:f1:c6:09:
a8:a2:60:4e
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFlQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTkx
MjIzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDgzN0FDNEExNTkyRUUw
QkUwOEFDM0Y4NkQwOUI4QTkzMjM4NzE3NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6H1BISdIqBKIWy5eSjOBRsX/CBZoQwf2rGoR4GTDndedDWizQ
lStf7OA2IwNRoUpmt5L8+O1EQTNRmZ0ZtgmYRdi+k6MdEqCfh2mIUaxpqWpswKjt
klLgiFLoKZtq8li82IWdpn+eNdbHq5fNDQJBoktn7K8aLUP+E4dHBzcd8KJxq49k
W3Qr6+cUa08NJ29hpxINldc85QjI3O4ny70X90J8i/mhJOJktmbexQd+RxCtEPfB
ilULYmtA/ae/9V3TruS0Oyo1gx0WNq5OqF1k0VI1ubbqe2thD8NzLOuxDeiLk3ku
ZoIW/AUM6Jy3N9rOmw2ZdHSdH2YMP7JmEuOrAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUg3rEoVku4L4IrD+G0JuKkyOHF0gwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2czckVvVmt1NEw0SXJE
LUcwSnVLa3lPSEYwZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAGnCW//OFntaPGwIc8gNrgzY1NzU6txCT
wp8UFSmHA+MN4mTBL+MXTnSQzxk7my4AZLjacwInGWxroMjZEgA0itfkyvtPh692
hBCnqDamkIPfUFqxSs2ivd1Nl3/in1S6ycfqYxz8gIMpCak7F9fkCkaDa/QZAneO
QDvm6NVvkMmsRV3xcEEPEcFAbUm5jwiTrG6dWNm+D0Z3+QSgeDWnsV3B2gj/X9lE
fuZIgZdYrmHwAIdWgydKa033dRHKKj5fRXFUkWaHDZ5Aks3Q2NMRq0rZmrxMXjjW
HtHe6cxE+Y02UjXtKVDR9RMXAhJx8/sxmOeavtJ9g6cG8cYJqKJgTg==
-----END CERTIFICATE-----
Generated at Sun May 18 05:59:06 2025 by rpki-client