Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/jM9x8sv56tlj3phI_NIXqtx34zE.roa
File: jM9x8sv56tlj3phI_NIXqtx34zE.roa (raw, json)
Hash identifier: 80IhmluUfPUW21n0XXgyMXkqjdOS2hdDINeBr9AY+Ds=
Subject key identifier: 8C:CF:71:F2:CB:F9:EA:D9:63:DE:98:48:FC:D2:17:AA:DC:77:E3:31
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 133A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jM9x8sv56tlj3phI_NIXqtx34zE.roa
Signing time: Thu 11 Apr 2024 05:53:13 +0000
ROA not before: Thu 11 Apr 2024 05:53:13 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4922 (0x133a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 11 05:53:13 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=8CCF71F2CBF9EAD963DE9848FCD217AADC77E331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:25:b0:4f:94:46:58:28:56:70:06:32:4c:cb:
e3:b5:61:11:6b:73:98:08:c9:38:65:52:71:f1:32:
73:03:67:de:ee:47:43:78:80:a5:ca:90:5f:11:e7:
d7:23:45:78:8a:b2:bd:2d:d2:bf:14:f3:69:81:a3:
ca:b2:4f:0a:82:82:47:a1:10:f6:fd:0b:ea:ac:11:
09:01:e8:3d:46:c1:01:7e:f7:68:e5:c3:42:da:74:
84:dd:4d:fb:23:d0:e1:7b:58:67:6a:79:35:a1:f9:
db:c6:d6:ce:25:11:77:0f:85:98:b4:19:72:8b:82:
7b:c3:b9:1e:48:9f:0b:f6:2e:b3:20:1e:44:78:95:
59:04:68:6f:88:80:2b:6c:aa:3a:48:bf:55:69:d7:
15:d7:3f:a6:ce:cc:e1:5a:4c:b6:93:b3:7e:71:52:
df:33:16:fe:77:72:a9:9d:b9:de:c9:4b:c5:be:d7:
9d:4c:8a:ec:4f:cc:c9:ab:d2:4a:46:8e:81:c0:dc:
c6:c0:76:f6:83:b0:66:6e:17:52:97:d9:a5:ad:50:
72:d4:84:a1:54:61:57:93:59:c8:a9:a3:90:e8:eb:
0e:ae:6a:80:03:5b:b4:ec:bf:9d:c0:b5:2d:83:1b:
18:6f:9f:99:26:41:94:f5:13:e6:f3:38:68:4d:2d:
80:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CF:71:F2:CB:F9:EA:D9:63:DE:98:48:FC:D2:17:AA:DC:77:E3:31
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/jM9x8sv56tlj3phI_NIXqtx34zE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9d:bb:be:d7:57:ed:00:a8:21:a3:c2:c5:07:92:91:d3:05:78:
be:c5:cd:e8:03:9e:0b:99:2c:d7:fe:fa:5a:01:a0:2f:b3:45:
3e:d7:19:64:59:94:03:2b:fb:8a:4e:88:7a:2e:76:53:74:4f:
b9:c4:15:41:8a:a4:67:c7:be:fc:f1:51:a0:1a:b8:09:2d:15:
f6:37:55:c9:f1:59:77:95:7d:d9:05:fe:ee:1e:e3:ca:00:b5:
fe:7c:22:80:36:c1:aa:1e:b2:da:8b:5c:ad:4f:49:c8:2c:7a:
ae:6a:de:51:22:cd:cb:6c:e6:2b:1c:28:ee:a2:8b:41:87:fe:
22:38:b7:03:83:20:a7:3c:f6:1f:78:a2:ba:08:cb:7b:78:84:
6f:22:5f:5e:ec:2e:35:c5:a2:cb:fd:3c:9f:bd:a7:0e:3a:88:
78:c8:b9:7c:e7:d2:9b:ea:24:e6:f0:ad:fa:7a:1b:32:09:c0:
b1:1a:63:f0:91:ae:3f:0c:3b:46:15:31:25:e0:ba:88:f2:10:
40:20:8e:00:26:6b:d1:89:14:9f:e9:e7:6d:f9:ef:b2:19:07:
b9:85:fe:dd:82:52:29:b7:d1:c4:c3:54:2c:8b:e2:76:d6:9b:
7e:4a:26:2c:59:8f:d4:f0:4d:20:c0:2e:4f:17:5a:69:7c:d5:
31:20:d6:67
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEzowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTEw
NTUzMTNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDhDQ0Y3MUYyQ0JGOUVB
RDk2M0RFOTg0OEZDRDIxN0FBREM3N0UzMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDrJbBPlEZYKFZwBjJMy+O1YRFrc5gIyThlUnHxMnMDZ97uR0N4
gKXKkF8R59cjRXiKsr0t0r8U82mBo8qyTwqCgkehEPb9C+qsEQkB6D1GwQF+92jl
w0LadITdTfsj0OF7WGdqeTWh+dvG1s4lEXcPhZi0GXKLgnvDuR5Inwv2LrMgHkR4
lVkEaG+IgCtsqjpIv1Vp1xXXP6bOzOFaTLaTs35xUt8zFv53cqmdud7JS8W+151M
iuxPzMmr0kpGjoHA3MbAdvaDsGZuF1KX2aWtUHLUhKFUYVeTWcipo5Do6w6uaoAD
W7Tsv53AtS2DGxhvn5kmQZT1E+bzOGhNLYBfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUjM9x8sv56tlj3phI/NIXqtx34zEwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2pNOXg4c3Y1NnRsajNw
aElfTklYcXR4MzR6RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAnbu+11ftAKgho8LFB5KR0wV4vsXN6AOe
C5ks1/76WgGgL7NFPtcZZFmUAyv7ik6Iei52U3RPucQVQYqkZ8e+/PFRoBq4CS0V
9jdVyfFZd5V92QX+7h7jygC1/nwigDbBqh6y2otcrU9JyCx6rmreUSLNy2zmKxwo
7qKLQYf+Iji3A4Mgpzz2H3iiugjLe3iEbyJfXuwuNcWiy/08n72nDjqIeMi5fOfS
m+ok5vCt+nobMgnAsRpj8JGuPww7RhUxJeC6iPIQQCCOACZr0YkUn+nnbfnvshkH
uYX+3YJSKbfRxMNULIvidtabfkomLFmP1PBNIMAuTxdaaXzVMSDWZw==
-----END CERTIFICATE-----
Generated at Sun May 18 08:16:54 2025 by rpki-client