Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/la6gVyYXsV25la7eax8ncwW_AoA.roa
File: la6gVyYXsV25la7eax8ncwW_AoA.roa (raw, json)
Hash identifier: 9aara3R64Njq1afxKty4pHJRdxQRsoSPoasvD6Rx9hk=
Subject key identifier: 95:AE:A0:57:26:17:B1:5D:B9:95:AE:DE:6B:1F:27:73:05:BF:02:80
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B72
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/la6gVyYXsV25la7eax8ncwW_AoA.roa
Signing time: Fri 03 May 2024 03:54:10 +0000
ROA not before: Fri 03 May 2024 03:54:10 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7026 (0x1b72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 03:54:10 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=95AEA0572617B15DB995AEDE6B1F277305BF0280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:44:e5:ab:76:0d:41:ac:6e:06:9f:c3:b3:
03:32:e0:65:18:5a:d6:b8:36:07:09:37:19:c5:49:
fd:e3:4b:42:e8:eb:94:36:97:f0:b1:cf:1d:9f:0f:
70:76:67:68:3b:2d:67:b3:af:c6:fb:20:1b:09:fb:
ba:2e:ff:d3:5f:3e:b5:36:6c:9d:15:39:1f:61:3c:
31:60:1c:fa:36:7e:64:39:ff:02:2b:5c:25:86:b6:
a2:5a:96:81:e4:79:82:3e:19:a5:02:cd:16:8a:29:
16:61:2a:41:3a:81:d9:08:1a:29:bf:a0:56:ea:f2:
88:d2:17:66:2c:d9:66:af:cd:e7:e2:2c:a9:03:8c:
30:1e:b1:24:0a:ed:4e:62:1b:9a:92:4d:3a:e9:49:
e5:54:98:da:9f:47:8b:cd:6e:63:df:33:7b:a6:1e:
3b:36:ca:5e:e6:8f:2d:3f:d2:2f:92:40:5b:d9:69:
6c:f4:ca:07:e2:c0:ee:8b:48:80:ee:96:cc:b7:40:
50:a4:dd:6a:e2:a7:6d:c9:9b:0c:53:21:49:bb:64:
50:57:d3:03:82:9c:0e:7a:a3:a6:96:c3:f0:03:85:
43:b3:da:b9:29:d3:ff:ba:83:28:1e:f7:d5:0f:ed:
cd:58:81:78:f4:9f:fd:e5:e2:f4:d4:65:2a:05:fc:
02:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AE:A0:57:26:17:B1:5D:B9:95:AE:DE:6B:1F:27:73:05:BF:02:80
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/la6gVyYXsV25la7eax8ncwW_AoA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4e:39:0d:4c:b2:a2:ab:b5:40:84:bd:a9:b9:a3:a0:6a:8a:66:
02:10:e8:d1:76:41:dc:32:c1:91:15:88:03:2c:5f:3d:8a:8b:
18:55:e5:24:85:fd:d9:39:a0:ed:87:0b:e9:9d:d4:cf:15:51:
de:19:09:e0:4f:53:45:36:aa:83:71:18:b2:11:79:d6:5c:8a:
7b:10:45:ba:85:5e:25:5f:98:2f:47:63:34:98:69:f4:6c:3a:
e2:fd:97:41:ee:46:5a:d1:da:22:f1:4d:fe:67:b3:44:59:19:
ee:6c:5d:a8:58:68:a9:1e:72:d6:18:67:b2:3d:4c:a5:ce:ed:
89:ae:98:b1:62:76:e8:dc:23:f3:3b:73:95:ca:1e:bb:58:65:
43:85:41:46:24:31:37:25:76:dc:80:f4:54:92:d5:6d:2d:aa:
64:9f:e2:fe:0d:ae:10:60:bc:1a:07:71:c8:62:96:4d:47:a3:
e5:2c:78:4d:d5:ff:6b:d4:ef:04:22:22:e9:28:7e:a5:f2:d1:
05:25:5e:83:10:5e:9d:0f:20:b2:a4:85:5d:93:2f:7d:81:b0:
6b:da:de:63:e2:10:4d:2d:bf:ce:ae:59:8f:eb:1c:25:be:da:
b6:b1:94:bb:ee:74:f2:07:31:c2:4e:7f:3d:d0:19:89:47:cc:
90:72:73:32
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG3IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMw
MzU0MTBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDk1QUVBMDU3MjYxN0Ix
NURCOTk1QUVERTZCMUYyNzczMDVCRjAyODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwRUTlq3YNQaxuBp/DswMy4GUYWta4NgcJNxnFSf3jS0Lo65Q2
l/Cxzx2fD3B2Z2g7LWezr8b7IBsJ+7ou/9NfPrU2bJ0VOR9hPDFgHPo2fmQ5/wIr
XCWGtqJaloHkeYI+GaUCzRaKKRZhKkE6gdkIGim/oFbq8ojSF2Ys2WavzefiLKkD
jDAesSQK7U5iG5qSTTrpSeVUmNqfR4vNbmPfM3umHjs2yl7mjy0/0i+SQFvZaWz0
ygfiwO6LSIDulsy3QFCk3Wrip23JmwxTIUm7ZFBX0wOCnA56o6aWw/ADhUOz2rkp
0/+6gyge99UP7c1YgXj0n/3l4vTUZSoF/AJNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUla6gVyYXsV25la7eax8ncwW/AoAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2xhNmdWeVlYc1YyNWxh
N2VheDhuY3dXX0FvQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEATjkNTLKiq7VAhL2puaOgaopmAhDo0XZB
3DLBkRWIAyxfPYqLGFXlJIX92Tmg7YcL6Z3UzxVR3hkJ4E9TRTaqg3EYshF51lyK
exBFuoVeJV+YL0djNJhp9Gw64v2XQe5GWtHaIvFN/mezRFkZ7mxdqFhoqR5y1hhn
sj1Mpc7tia6YsWJ26Nwj8ztzlcoeu1hlQ4VBRiQxNyV23ID0VJLVbS2qZJ/i/g2u
EGC8GgdxyGKWTUej5Sx4TdX/a9TvBCIi6Sh+pfLRBSVegxBenQ8gsqSFXZMvfYGw
a9reY+IQTS2/zq5Zj+scJb7atrGUu+508gcxwk5/PdAZiUfMkHJzMg==
-----END CERTIFICATE-----
Generated at Sun May 18 05:39:44 2025 by rpki-client