Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nSPq0uvUfian4adlqZRkIC28uqk.roa
File: nSPq0uvUfian4adlqZRkIC28uqk.roa (raw, json)
Hash identifier: eirK5bkggf8EZfFngBAWNYEIAZLHOrg5z94Qd++7N8A=
Subject key identifier: 9D:23:EA:D2:EB:D4:7E:26:A7:E1:A7:65:A9:94:64:20:2D:BC:BA:A9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1100
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nSPq0uvUfian4adlqZRkIC28uqk.roa
Signing time: Fri 05 Apr 2024 07:22:47 +0000
ROA not before: Fri 05 Apr 2024 07:22:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4352 (0x1100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 5 07:22:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9D23EAD2EBD47E26A7E1A765A99464202DBCBAA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ea:6e:da:d1:91:32:7b:20:05:f6:09:75:78:
5a:b1:59:d3:29:7c:68:ec:a9:c1:46:62:54:35:d4:
78:06:5a:8b:7c:70:3d:cb:e0:eb:c6:7c:58:40:f9:
a6:e2:22:3d:c1:14:3d:29:3d:0b:9b:53:f9:02:1e:
01:1c:19:65:48:32:a0:ca:fd:00:8e:8b:ab:a2:2e:
c7:9e:37:dc:34:5a:9e:77:25:fb:e8:fd:82:b4:5c:
c7:ae:9d:3e:21:90:08:0e:e8:00:ce:da:fd:09:04:
5e:c6:66:8d:c1:c0:e8:be:d8:bd:e9:46:8e:e0:dc:
39:36:d8:d4:65:9b:fd:9e:70:07:b8:56:92:28:7a:
ae:d4:76:8b:cd:ba:f3:c6:e0:06:d8:c6:53:14:7f:
6c:22:5e:9b:da:8d:dd:09:0b:17:49:1f:25:0b:4a:
f4:72:d6:f6:5c:28:83:ce:8f:d5:60:fc:63:10:7f:
cb:37:2c:f5:8e:5c:0f:53:16:c1:a9:46:59:91:1f:
ff:f0:7f:1d:66:a2:ea:4f:f4:c5:fa:4d:6e:e3:80:
09:83:97:47:9e:80:b7:3e:7f:79:31:6f:be:ab:c2:
a2:7d:3f:54:d5:9d:b4:d8:59:9c:b1:0c:24:6c:e2:
e6:3d:df:43:c9:3f:62:e5:ab:ed:16:74:f2:87:d0:
a5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:23:EA:D2:EB:D4:7E:26:A7:E1:A7:65:A9:94:64:20:2D:BC:BA:A9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nSPq0uvUfian4adlqZRkIC28uqk.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
07:d8:62:47:4f:49:4e:a1:0d:59:d6:ff:c4:85:61:3b:11:9c:
f8:9b:1a:79:95:fc:35:97:4e:05:d6:69:12:39:f2:7f:b1:3e:
a3:9f:f2:89:72:08:42:8f:8d:55:66:0e:e8:00:85:66:8b:ac:
34:6c:fc:05:a8:cb:fd:49:26:a1:09:c9:3b:13:ce:57:ae:af:
9b:ae:b2:c0:2c:1c:23:e4:e1:fa:34:0e:c3:d7:d3:72:0f:de:
50:36:74:c3:0c:20:ab:f1:7c:98:84:50:21:55:24:35:3c:8f:
3e:fe:89:a3:7e:fa:9d:29:f6:1c:b4:d2:67:42:75:0d:f7:07:
48:3f:87:61:fa:8b:83:f6:fc:84:a5:9a:88:ac:b8:dc:5a:24:
ed:f4:ab:83:e8:be:03:27:bd:15:d3:9d:47:1c:5b:f2:ab:62:
12:cc:f6:00:4c:29:d3:7a:f3:05:84:44:f5:98:0c:ee:31:96:
bd:34:7f:a6:5b:d1:a8:cd:55:02:9e:3f:6f:87:43:a2:90:fa:
19:9d:b2:ea:58:c9:c6:d7:0e:cb:12:ca:40:88:0d:19:e3:84:
3d:db:e5:fc:d3:cd:c4:c4:83:f7:8d:6c:4a:08:d1:94:76:9a:
b7:c0:ec:6f:8d:cc:0c:58:e6:97:28:22:b7:03:7c:20:7f:f0:
2a:2f:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 05:42:59 2025 by rpki-client