Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/glCTj9kNSUnxbxYWL3MqeVxwbJI.roa
File:                     glCTj9kNSUnxbxYWL3MqeVxwbJI.roa (raw, json)
Hash identifier:          mOkgsXJRb0yCQuyPdR7kjTazD4dKMspKYMdOPSdBb+U=
Subject key identifier:   82:50:93:8F:D9:0D:49:49:F1:6F:16:16:2F:73:2A:79:5C:70:6C:92
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       19C8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/glCTj9kNSUnxbxYWL3MqeVxwbJI.roa
Signing time:             Sun 28 Apr 2024 17:23:53 +0000
ROA not before:           Sun 28 Apr 2024 17:23:53 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6600 (0x19c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 28 17:23:53 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=8250938FD90D4949F16F16162F732A795C706C92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:40:1c:39:99:38:1b:a5:af:e0:d5:ed:3f:
                    38:82:e5:6e:c9:33:d8:59:c1:c9:c1:60:6d:83:5a:
                    38:18:b6:7a:9e:4d:a2:4d:de:72:75:4c:3a:30:66:
                    7e:71:0a:cd:7f:32:73:43:e2:af:6e:9a:9f:2d:07:
                    53:b9:cb:6d:5c:ae:cc:4a:37:bc:71:0e:ef:63:64:
                    45:18:11:f6:d7:f0:cf:ec:48:b5:05:79:d0:8d:bd:
                    23:82:ff:28:a8:4d:ae:1c:88:f3:8c:7a:8b:ef:4a:
                    9a:8d:7e:62:1d:46:93:ab:be:68:3d:a8:0a:0b:fb:
                    5e:14:27:cb:4f:1d:97:81:81:c8:4a:72:60:54:f6:
                    6d:f3:f7:d7:43:fe:f5:ed:5a:3f:6e:70:d8:77:97:
                    43:88:c5:5a:c1:2f:06:1e:5b:db:d0:ef:ac:58:06:
                    b3:c5:0d:90:e0:74:1b:01:f2:ff:99:6f:b8:d2:b5:
                    da:61:75:c1:e8:10:7e:ed:12:f5:7c:61:ae:51:e2:
                    df:49:05:fd:58:56:b4:8f:d3:71:5d:ef:05:1a:0a:
                    46:51:93:bf:dc:40:38:92:2a:8c:62:bb:5f:38:68:
                    13:91:6c:70:07:c3:60:f5:d5:ee:ba:c8:93:22:d4:
                    f7:03:de:1f:63:25:cf:69:42:ee:f2:ac:be:61:35:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:50:93:8F:D9:0D:49:49:F1:6F:16:16:2F:73:2A:79:5C:70:6C:92
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/glCTj9kNSUnxbxYWL3MqeVxwbJI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:2e:b9:c1:39:23:8d:b5:3d:bc:02:87:56:e9:6b:9c:e2:
         6f:1c:31:12:85:55:12:4d:e6:46:98:3c:3b:c2:f8:9d:d5:db:
         58:33:c8:ae:0e:ba:6e:49:ec:da:1e:92:b7:d5:84:b3:7a:10:
         70:d2:e8:8d:68:03:06:5a:d6:10:89:f0:0d:e8:a2:3e:b9:1f:
         50:d8:18:e1:e9:9c:00:b6:ea:19:ef:3b:0d:ad:bd:73:10:61:
         c5:8a:16:29:ca:71:b8:bf:e4:b2:41:48:0e:fd:5f:f8:2e:c7:
         f2:e6:9e:81:82:18:a5:96:8d:57:a1:2b:b2:b8:c2:f9:7c:3a:
         3c:a7:ad:16:2e:b7:87:da:72:68:f9:1c:8b:d6:de:de:ba:5d:
         b9:fc:37:84:4b:94:44:82:f7:25:b5:fc:4d:ac:72:4f:05:81:
         32:08:0a:68:1d:46:f0:1e:e2:c4:2c:fd:93:e7:db:12:51:ba:
         97:89:bf:ed:8a:03:5c:a6:b1:9c:cb:bc:34:1d:ee:8b:8b:8e:
         98:4b:dd:ff:7f:0e:20:95:4f:e3:59:2f:2e:2d:35:1a:92:0a:
         af:54:63:0d:9f:4c:15:88:f8:fe:35:ce:9e:39:6c:6f:1e:f1:
         ee:0d:83:17:e1:08:f8:05:17:d6:bf:22:10:d6:00:d6:cb:a9:
         a9:64:12:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:31:33 2025 by rpki-client