Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/h8IFB4hpJp_lqt5tFKM2Plf5FjA.roa
File: h8IFB4hpJp_lqt5tFKM2Plf5FjA.roa (raw, json)
Hash identifier: BRqCQyRbZTmje8H4dxyq6+BdWA6VWkCDPdLHtufGtS4=
Subject key identifier: 87:C2:05:07:88:69:26:9F:E5:AA:DE:6D:14:A3:36:3E:57:F9:16:30
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C4E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/h8IFB4hpJp_lqt5tFKM2Plf5FjA.roa
Signing time: Sun 05 May 2024 10:54:14 +0000
ROA not before: Sun 05 May 2024 10:54:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7246 (0x1c4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 10:54:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=87C205078869269FE5AADE6D14A3363E57F91630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4f:e5:bd:35:a4:de:93:1a:62:e3:53:16:df:
2f:97:2b:aa:76:af:17:e1:1b:e1:97:f2:a8:5b:8a:
c5:70:11:55:0b:f2:80:ca:e3:35:77:b1:be:7f:07:
d2:29:44:5c:de:d8:1c:0a:22:77:74:44:ef:c4:dc:
c9:2b:d3:7b:cb:aa:61:3d:17:11:a3:3d:35:30:82:
90:9c:55:fb:04:b0:6f:97:2d:9f:cc:09:f0:ef:ad:
e6:c0:c6:2b:c2:fa:51:bf:fe:be:f9:fd:0a:9d:b3:
2a:db:8c:4c:f5:93:61:6b:1a:ca:6b:27:d8:95:3e:
c6:03:cf:ea:8e:9f:df:fb:81:ad:bd:7d:f9:67:91:
1c:fc:73:09:1a:b9:cf:63:8c:2b:ee:c9:73:91:62:
5c:65:97:55:26:67:45:cf:e9:14:33:5b:60:42:2f:
2b:8b:54:7d:1a:a8:88:01:67:f6:14:5a:51:4e:6d:
ad:18:fe:e7:92:ad:42:86:a7:1b:2a:60:4f:e8:51:
52:25:22:e3:af:b7:b9:dd:e3:1e:56:70:cc:dc:d7:
27:f9:ef:ca:a0:c8:9d:8a:db:ff:8c:39:ba:8b:2b:
76:7a:fe:34:6a:36:ec:3a:ca:03:c2:68:4f:90:f2:
18:1b:29:c2:86:6c:86:58:51:93:c9:24:02:43:c0:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C2:05:07:88:69:26:9F:E5:AA:DE:6D:14:A3:36:3E:57:F9:16:30
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/h8IFB4hpJp_lqt5tFKM2Plf5FjA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:62:23:4b:cc:9b:18:75:26:07:ca:60:7f:59:3c:36:32:87:
1f:64:bc:ce:47:b7:9f:4a:50:1e:3a:44:a1:b7:69:80:17:5e:
87:61:ab:46:45:04:f0:ec:60:f6:f9:da:2e:01:4f:25:de:01:
f6:36:70:a8:d3:41:d4:99:91:5e:72:2d:d1:58:e3:d8:85:b6:
41:f1:54:e2:2b:d6:03:4d:00:e5:08:ad:ac:0f:41:d9:0e:dd:
d4:e7:c0:67:c7:9a:1c:c9:48:32:37:e6:e9:6e:91:c5:b8:c0:
50:2c:98:91:ec:33:a2:e1:7d:bf:c0:52:40:65:dd:17:2f:fb:
48:ad:ff:2b:c3:a7:1a:8b:96:ad:e0:a9:38:ee:7a:62:23:e7:
70:37:74:f3:22:8e:4b:90:68:64:be:f6:9d:c9:53:ec:77:ea:
30:ea:d8:db:e2:7d:59:ee:ca:76:a8:cf:73:cb:26:54:f8:9f:
2f:0f:42:e3:45:35:67:72:11:26:4e:cb:ae:73:8c:42:29:0c:
0a:0f:ac:57:ee:10:9b:0a:30:cd:b2:f2:cf:f2:78:46:b0:6d:
34:93:99:75:ba:2d:c7:70:f5:20:e4:dd:e9:3c:08:6f:91:55:
1b:2a:e9:3e:98:c8:3f:8b:71:dd:0b:0a:d7:f3:66:0c:a8:30:
0f:4a:f5:72
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHE4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUx
MDU0MTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg3QzIwNTA3ODg2OTI2
OUZFNUFBREU2RDE0QTMzNjNFNTdGOTE2MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDET+W9NaTekxpi41MW3y+XK6p2rxfhG+GX8qhbisVwEVUL8oDK
4zV3sb5/B9IpRFze2BwKInd0RO/E3Mkr03vLqmE9FxGjPTUwgpCcVfsEsG+XLZ/M
CfDvrebAxivC+lG//r75/QqdsyrbjEz1k2FrGsprJ9iVPsYDz+qOn9/7ga29ffln
kRz8cwkauc9jjCvuyXORYlxll1UmZ0XP6RQzW2BCLyuLVH0aqIgBZ/YUWlFOba0Y
/ueSrUKGpxsqYE/oUVIlIuOvt7nd4x5WcMzc1yf578qgyJ2K2/+MObqLK3Z6/jRq
Nuw6ygPCaE+Q8hgbKcKGbIZYUZPJJAJDwDd7AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUh8IFB4hpJp/lqt5tFKM2Plf5FjAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2g4SUZCNGhwSnBfbHF0
NXRGS00yUGxmNUZqQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAmWIjS8ybGHUmB8pgf1k8NjKHH2S8zke3
n0pQHjpEobdpgBdeh2GrRkUE8Oxg9vnaLgFPJd4B9jZwqNNB1JmRXnIt0Vjj2IW2
QfFU4ivWA00A5QitrA9B2Q7d1OfAZ8eaHMlIMjfm6W6RxbjAUCyYkewzouF9v8BS
QGXdFy/7SK3/K8OnGouWreCpOO56YiPncDd08yKOS5BoZL72nclT7HfqMOrY2+J9
We7KdqjPc8smVPifLw9C40U1Z3IRJk7LrnOMQikMCg+sV+4QmwowzbLyz/J4RrBt
NJOZdbotx3D1IOTd6TwIb5FVGyrpPpjIP4tx3QsK1/NmDKgwD0r1cg==
-----END CERTIFICATE-----
Generated at Sun May 18 04:43:32 2025 by rpki-client