Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/mnECUYydQRsR2HM2fYfx95Vx1ZU.roa
File: mnECUYydQRsR2HM2fYfx95Vx1ZU.roa (raw, json)
Hash identifier: 7A5r/8orWtH/hUjrbqRBECsspj+pjOzHAQBGrhWH6hw=
Subject key identifier: 9A:71:02:51:8C:9D:41:1B:11:D8:73:36:7D:87:F1:F7:95:71:D5:95
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F5C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mnECUYydQRsR2HM2fYfx95Vx1ZU.roa
Signing time: Sun 31 Mar 2024 22:22:36 +0000
ROA not before: Sun 31 Mar 2024 22:22:36 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3932 (0xf5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 22:22:36 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9A7102518C9D411B11D873367D87F1F79571D595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:a2:f5:55:5b:9b:0b:44:4e:8c:a4:04:95:
8f:96:2a:db:fd:40:db:7b:0a:14:b7:0f:23:35:6f:
65:c2:23:10:24:ff:90:5f:64:88:9d:da:08:33:31:
36:07:16:68:0a:c8:36:b4:8a:b4:bc:41:70:89:bb:
ad:6b:b2:0a:94:dd:4d:67:b7:4d:69:d5:d0:91:fc:
b9:3b:74:49:f2:c2:26:12:de:e3:e0:ac:6f:cc:e8:
a2:24:7a:a0:96:27:fe:cb:9e:66:4b:90:2e:36:fa:
93:2b:e7:12:4e:07:9f:83:5e:b2:ac:40:df:d9:a7:
f2:a8:3d:9b:73:c6:79:c5:5f:6c:96:5a:d9:65:12:
8e:b3:7b:a6:e4:9b:63:cf:73:4b:37:2f:f0:62:c0:
ae:6c:4e:c0:92:1b:8e:7b:f2:8e:ee:64:9c:ae:50:
9a:a9:2a:16:05:40:22:78:6d:86:c0:f2:c4:47:70:
64:d1:5d:ef:c1:5b:34:7d:9d:e2:3d:c8:c3:b5:2f:
c6:3e:c5:70:4c:c2:f3:13:f7:d3:0d:c5:37:fc:46:
4f:39:f3:8e:23:db:78:4f:7c:6e:4a:d0:b6:db:09:
f0:98:f0:a9:d0:fc:26:8c:e5:5d:cb:69:ef:77:c5:
18:9f:9a:b7:90:59:d4:75:9f:6b:dd:4a:d6:d5:63:
18:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:71:02:51:8C:9D:41:1B:11:D8:73:36:7D:87:F1:F7:95:71:D5:95
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/mnECUYydQRsR2HM2fYfx95Vx1ZU.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:fe:51:6d:88:4e:ff:17:56:13:d1:9e:90:ed:b3:ab:19:f2:
0e:0c:47:ca:0c:74:1c:3f:06:7c:15:c5:b5:d8:71:52:16:b2:
d6:e5:70:32:5c:a5:4b:9d:ba:34:8f:e3:6a:4d:ee:6f:ac:54:
8e:2f:53:26:09:1e:f0:a3:0c:e1:15:8d:20:0d:82:8d:08:59:
cb:35:87:bc:50:c3:d0:86:75:45:7c:0f:b4:20:c6:ac:2e:d3:
06:15:d0:2a:61:63:25:8e:82:3a:65:b5:fc:cf:eb:91:1d:76:
23:80:ca:66:f5:4a:4f:43:af:e3:d8:a2:ba:a7:61:d8:73:46:
32:3e:2d:da:da:7c:e8:ec:b9:ff:b1:e5:26:13:81:bf:97:38:
0b:e6:6b:96:e4:27:15:4b:d8:2f:c0:f2:10:ef:bf:d3:fe:1f:
ed:5e:af:c2:79:2c:23:ed:50:a2:ca:17:25:63:15:65:d8:76:
62:44:0b:e0:0c:3d:f6:d1:05:f5:ee:8b:47:51:7d:1a:d4:d2:
8f:8b:5d:8a:3b:5e:e9:11:c9:e0:5e:e7:dd:0d:d6:95:05:47:
af:f2:42:16:4f:7e:02:18:72:93:c3:eb:c9:c5:16:55:b0:6e:
0c:23:8f:55:d3:98:01:bc:9c:53:3d:07:0c:fa:ae:b0:ec:cd:
c6:25:92:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:49:00 2025 by rpki-client