Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/m4Ifwk6_iohoDSGDamuKQ0pK2ac.roa
File: m4Ifwk6_iohoDSGDamuKQ0pK2ac.roa (raw, json)
Hash identifier: 0MYiZZocPcZmD7ZZU3Uz3p+xdieZLfu0UiHuMi1yb/k=
Subject key identifier: 9B:82:1F:C2:4E:BF:8A:88:68:0D:21:83:6A:6B:8A:43:4A:4A:D9:A7
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C6C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m4Ifwk6_iohoDSGDamuKQ0pK2ac.roa
Signing time: Sun 05 May 2024 18:24:27 +0000
ROA not before: Sun 05 May 2024 18:24:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7276 (0x1c6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 18:24:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B821FC24EBF8A88680D21836A6B8A434A4AD9A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:50:e0:fa:12:b3:ee:8f:42:81:9e:e3:63:
ea:89:9a:98:2a:ea:43:b1:57:f7:7c:8d:af:4d:2d:
42:ea:65:a2:60:af:5e:34:76:86:c0:f5:e7:1d:30:
0a:1a:5d:31:ef:f6:1b:06:38:f1:22:c2:ca:41:0d:
6f:06:7d:d7:e5:26:75:7b:0a:ea:6f:5c:cc:6e:a2:
32:a8:a5:8e:92:50:64:31:3a:3d:7f:2d:af:a7:74:
0c:70:42:be:e4:c9:fb:5e:24:9d:9f:68:2c:54:3d:
f8:c6:db:86:81:6a:f5:0b:e2:50:2f:71:83:7f:1f:
67:d5:06:87:32:21:48:5e:e4:06:5e:9a:48:2f:83:
ce:0e:29:35:68:35:84:b1:14:3d:db:1a:56:1f:7f:
f9:d7:3a:46:1c:e5:e6:b0:ad:fa:02:bd:60:0a:96:
c3:9d:64:49:d5:85:51:4f:4b:f1:37:33:d3:ea:71:
e8:85:8a:01:8b:2e:29:bf:13:18:64:c0:9a:a6:58:
1c:1a:11:99:e1:4d:b6:b3:65:d7:c3:d8:3a:61:c6:
49:16:58:01:10:0e:a9:e0:bf:2a:1e:87:b0:06:6d:
86:32:5a:89:fe:20:a7:70:7a:a1:14:d5:9e:d4:65:
9c:1e:d9:4b:f4:af:79:59:6a:e8:6b:16:0d:f0:03:
ec:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:82:1F:C2:4E:BF:8A:88:68:0D:21:83:6A:6B:8A:43:4A:4A:D9:A7
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m4Ifwk6_iohoDSGDamuKQ0pK2ac.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:27:40:30:14:2c:12:d4:0a:e5:c6:ba:e0:17:48:53:d7:fb:
c9:b0:3c:11:52:4c:fa:ad:72:1b:f2:81:7b:1b:25:69:9a:76:
fa:e7:c2:19:fa:94:0f:b1:82:38:11:f5:50:9c:f0:42:d5:b2:
70:3b:7f:df:38:6d:f2:36:2b:7a:e8:56:3c:d8:2b:8c:40:47:
1e:e6:aa:94:4c:fa:2c:f0:36:e1:13:8a:36:06:09:d1:14:31:
2b:9f:3a:3e:dd:d2:1b:27:22:c4:35:b0:78:14:27:e8:72:22:
e7:7f:d8:28:ae:c2:ba:74:35:30:0d:09:1e:cc:3f:8a:1a:40:
11:50:c9:cb:c4:ea:76:f4:74:52:12:10:6e:aa:c7:ef:ed:fa:
63:4b:8a:b5:76:d4:19:b0:dd:fb:ea:70:a5:a2:a8:8f:9f:18:
65:74:d8:2f:52:3d:8e:b4:1c:2a:40:05:b7:86:03:f2:fc:0d:
24:a0:0c:85:10:11:a2:15:c2:2b:2d:fb:f2:8d:fa:a2:9d:15:
67:9d:7c:35:c6:f8:74:8f:aa:23:88:a2:b2:b3:00:c3:9a:ed:
bc:2f:f5:08:25:3e:73:75:df:7c:2d:9e:54:94:9d:9e:43:18:
bd:e4:0c:50:70:74:b5:87:bb:92:27:bc:04:94:f2:42:15:36:
80:8d:30:74
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUx
ODI0MjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlCODIxRkMyNEVCRjhB
ODg2ODBEMjE4MzZBNkI4QTQzNEE0QUQ5QTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyDFDg+hKz7o9CgZ7jY+qJmpgq6kOxV/d8ja9NLULqZaJgr140
dobA9ecdMAoaXTHv9hsGOPEiwspBDW8GfdflJnV7CupvXMxuojKopY6SUGQxOj1/
La+ndAxwQr7kyfteJJ2faCxUPfjG24aBavUL4lAvcYN/H2fVBocyIUhe5AZemkgv
g84OKTVoNYSxFD3bGlYff/nXOkYc5eawrfoCvWAKlsOdZEnVhVFPS/E3M9PqceiF
igGLLim/ExhkwJqmWBwaEZnhTbazZdfD2DphxkkWWAEQDqngvyoeh7AGbYYyWon+
IKdweqEU1Z7UZZwe2Uv0r3lZauhrFg3wA+ylAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUm4Ifwk6/iohoDSGDamuKQ0pK2acwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL200SWZ3azZfaW9ob0RT
R0RhbXVLUTBwSzJhYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEARydAMBQsEtQK5ca64BdIU9f7ybA8EVJM
+q1yG/KBexslaZp2+ufCGfqUD7GCOBH1UJzwQtWycDt/3zht8jYreuhWPNgrjEBH
HuaqlEz6LPA24ROKNgYJ0RQxK586Pt3SGycixDWweBQn6HIi53/YKK7CunQ1MA0J
Hsw/ihpAEVDJy8TqdvR0UhIQbqrH7+36Y0uKtXbUGbDd++pwpaKoj58YZXTYL1I9
jrQcKkAFt4YD8vwNJKAMhRARohXCKy378o36op0VZ518Ncb4dI+qI4iisrMAw5rt
vC/1CCU+c3XffC2eVJSdnkMYveQMUHB0tYe7kie8BJTyQhU2gI0wdA==
-----END CERTIFICATE-----
Generated at Sun May 18 05:57:48 2025 by rpki-client