Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/h8ycS0zqTJq0uYQh6k3X8BqPQhY.roa
File: h8ycS0zqTJq0uYQh6k3X8BqPQhY.roa (raw, json)
Hash identifier: CsRc6/ujcYD8rGfZzbiBkA6OSXsNtdDjxlDbfDjdEMs=
Subject key identifier: 87:CC:9C:4B:4C:EA:4C:9A:B4:B9:84:21:EA:4D:D7:F0:1A:8F:42:16
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1956
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/h8ycS0zqTJq0uYQh6k3X8BqPQhY.roa
Signing time: Sat 27 Apr 2024 12:54:35 +0000
ROA not before: Sat 27 Apr 2024 12:54:35 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6486 (0x1956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 12:54:35 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=87CC9C4B4CEA4C9AB4B98421EA4DD7F01A8F4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:32:69:54:25:4a:17:83:a7:63:b1:b1:d5:
07:06:19:73:c9:54:71:2e:00:c8:d5:b0:49:96:52:
f9:35:48:a0:8c:0f:64:a2:00:6d:31:15:df:c3:38:
ee:00:13:73:e0:8d:52:90:cc:95:48:bf:a5:6c:56:
77:96:42:94:81:6d:b0:21:d5:c2:8e:c5:4f:d4:04:
30:5d:01:44:58:6e:b6:69:8b:ac:1d:dc:6f:fd:f7:
19:3b:01:ac:e7:76:29:93:20:c6:41:dc:64:ed:b5:
36:cd:87:8c:f0:b0:52:fb:5b:36:ea:64:20:53:f9:
df:35:83:39:b9:6c:db:b9:ba:8b:5e:bb:8e:fa:48:
e0:6c:93:46:f6:a2:f6:5a:16:e7:61:dc:94:8f:b1:
77:bb:ae:cc:29:6f:bf:41:46:55:f2:41:18:89:ab:
1e:94:3e:1d:e8:a5:aa:ab:c3:85:1c:57:ba:4a:05:
e1:a9:65:bc:15:0c:32:a4:cb:7e:66:77:d4:2c:41:
f0:31:3a:e9:0a:fe:df:cc:ba:84:98:8a:1a:c2:0d:
ce:02:55:b9:a3:fc:71:ba:c5:94:93:ac:73:98:42:
bd:b1:d5:e9:60:86:e6:4b:95:57:36:3f:61:81:4e:
9f:e3:df:aa:78:d5:d4:6a:44:aa:a0:60:1a:82:4d:
22:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CC:9C:4B:4C:EA:4C:9A:B4:B9:84:21:EA:4D:D7:F0:1A:8F:42:16
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/h8ycS0zqTJq0uYQh6k3X8BqPQhY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:32:de:95:d4:18:0e:02:80:05:b9:fd:e9:ea:d4:20:48:0d:
e4:78:11:36:f1:01:e1:a7:d1:9f:fe:92:29:5a:f7:20:30:47:
b8:cb:80:e0:ec:0d:cd:fa:3b:35:a8:d7:96:66:08:ad:c1:98:
c8:bc:97:c8:cb:e7:37:71:39:2e:98:fe:eb:c8:e4:45:ce:d8:
d9:65:d4:b8:b8:ef:62:d9:79:de:9b:7f:9a:bc:70:e2:5d:40:
93:6c:e5:76:c8:c8:f7:40:a0:60:a9:45:6b:b7:1e:82:ae:09:
0c:64:d9:51:3b:78:a5:fa:62:98:77:94:59:12:67:ec:88:db:
6d:2c:6f:bc:7a:e2:c6:78:5f:69:da:d9:d0:47:66:b3:67:21:
62:9f:26:7b:56:7b:6f:d3:f9:a4:93:d4:07:e1:ac:6f:ab:3e:
7b:8d:f8:82:6b:60:8b:29:3e:be:6b:fe:c2:2b:ed:9d:92:33:
d5:05:cb:45:72:ae:3b:a8:be:88:8f:b5:c7:3c:33:0f:5f:3b:
ee:6e:29:58:ed:4c:9b:3f:31:df:06:04:31:7e:cb:de:73:6d:
80:4b:3f:77:a3:fb:a3:82:81:68:6b:ca:c1:53:2b:c2:9a:9b:
8d:bd:51:06:11:af:f2:72:a1:69:4a:fb:dd:ed:98:bc:79:7f:
4d:7a:2f:58
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjcx
MjU0MzVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDg3Q0M5QzRCNENFQTRD
OUFCNEI5ODQyMUVBNEREN0YwMUE4RjQyMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjcjJpVCVKF4OnY7Gx1QcGGXPJVHEuAMjVsEmWUvk1SKCMD2Si
AG0xFd/DOO4AE3PgjVKQzJVIv6VsVneWQpSBbbAh1cKOxU/UBDBdAURYbrZpi6wd
3G/99xk7AazndimTIMZB3GTttTbNh4zwsFL7WzbqZCBT+d81gzm5bNu5uoteu476
SOBsk0b2ovZaFudh3JSPsXe7rswpb79BRlXyQRiJqx6UPh3opaqrw4UcV7pKBeGp
ZbwVDDKky35md9QsQfAxOukK/t/MuoSYihrCDc4CVbmj/HG6xZSTrHOYQr2x1elg
huZLlVc2P2GBTp/j36p41dRqRKqgYBqCTSJBAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUh8ycS0zqTJq0uYQh6k3X8BqPQhYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2g4eWNTMHpxVEpxMHVZ
UWg2azNYOEJxUFFoWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAYDLeldQYDgKABbn96erUIEgN5HgRNvEB
4afRn/6SKVr3IDBHuMuA4OwNzfo7NajXlmYIrcGYyLyXyMvnN3E5Lpj+68jkRc7Y
2WXUuLjvYtl53pt/mrxw4l1Ak2zldsjI90CgYKlFa7cegq4JDGTZUTt4pfpimHeU
WRJn7IjbbSxvvHrixnhfadrZ0Edms2chYp8me1Z7b9P5pJPUB+Gsb6s+e434gmtg
iyk+vmv+wivtnZIz1QXLRXKuO6i+iI+1xzwzD1877m4pWO1Mmz8x3wYEMX7L3nNt
gEs/d6P7o4KBaGvKwVMrwpqbjb1RBhGv8nKhaUr73e2YvHl/TXovWA==
-----END CERTIFICATE-----
Generated at Mon May 19 05:59:17 2025 by rpki-client