Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/nb5-O1IKs91KFFCOjJpuBh-rf3c.roa
File: nb5-O1IKs91KFFCOjJpuBh-rf3c.roa (raw, json)
Hash identifier: P1LGz3Gn4xBz0SYl3/OqrqK+4EaiIo5rfGFq6yOATrc=
Subject key identifier: 9D:BE:7E:3B:52:0A:B3:DD:4A:14:50:8E:8C:9A:6E:06:1F:AB:7F:77
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1BB0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nb5-O1IKs91KFFCOjJpuBh-rf3c.roa
Signing time: Fri 03 May 2024 19:24:20 +0000
ROA not before: Fri 03 May 2024 19:24:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7088 (0x1bb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 19:24:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9DBE7E3B520AB3DD4A14508E8C9A6E061FAB7F77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:44:ae:da:6c:2e:39:50:60:1e:bb:4e:e6:
24:d1:fb:43:0b:68:b3:eb:fd:b8:a9:0c:f4:1e:dd:
7c:bf:b2:bb:5c:10:cd:c3:c4:ff:79:42:32:a3:ed:
0f:b8:96:41:b2:b2:dc:9a:0c:2a:6f:fa:1c:24:88:
c3:a1:70:e0:d8:0c:9b:da:0c:59:2d:07:18:1c:85:
0d:6a:66:2d:77:a8:ab:31:9a:4d:88:d3:ed:1f:49:
a6:90:43:4d:4c:0c:2f:79:e1:22:44:01:3d:4e:32:
aa:e5:f4:22:4e:fc:5a:ae:2a:2e:eb:b2:8e:e6:67:
22:c2:af:fe:8c:c9:4e:07:00:7c:7e:97:b8:1f:1e:
11:b5:4d:74:c2:ea:48:b8:fb:cc:41:95:9f:04:14:
a6:6e:52:b6:2e:31:0b:46:7a:1d:0c:9a:b7:fa:14:
8a:b2:7d:a0:86:76:fb:53:5e:e2:4b:73:aa:1f:4b:
2b:b8:a8:5b:50:de:6c:02:12:ee:a9:1a:67:ec:26:
e2:36:f6:d4:43:71:4b:c5:90:04:9a:ac:37:ea:47:
01:57:37:19:9a:81:78:c0:6b:17:27:79:88:27:ef:
59:9a:9c:37:45:46:c1:ed:18:fb:db:ed:8d:fa:16:
bf:34:7e:fa:1d:e1:dd:f4:97:69:65:56:f0:de:f1:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BE:7E:3B:52:0A:B3:DD:4A:14:50:8E:8C:9A:6E:06:1F:AB:7F:77
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/nb5-O1IKs91KFFCOjJpuBh-rf3c.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1e:7a:0f:37:01:5b:10:38:bb:af:c9:83:8a:b9:01:26:fd:4b:
55:fb:32:2f:6c:64:6a:5a:bf:a4:84:d8:0f:58:4b:33:9f:65:
d9:fb:40:4e:5e:80:96:1e:da:07:cf:63:7e:1a:51:c7:49:a8:
f2:05:4a:de:b8:82:dd:fc:7c:37:81:85:ed:a2:e1:f6:ed:97:
72:7e:fe:1f:90:ba:dc:7c:07:0d:12:60:d5:a4:70:e6:f2:46:
63:22:9f:00:89:6e:58:31:a2:11:9f:02:84:cb:a2:cd:19:66:
d4:24:23:93:4e:4c:90:e8:81:7c:ef:c1:d7:7f:c7:4b:26:85:
71:d8:f7:3f:93:82:88:80:e7:9a:75:48:3f:8c:d0:0d:5a:24:
16:10:20:8c:5b:d6:53:96:b5:40:8a:a3:de:55:14:e3:e0:19:
27:9a:ac:9b:d0:14:2d:20:b3:b7:b2:53:e1:cb:c1:6f:07:d6:
ab:7f:81:0c:13:d8:42:91:85:e4:39:6d:ba:89:ff:2b:d5:8e:
ca:ea:23:35:60:fd:13:2e:82:eb:75:8b:e6:11:3c:08:a6:45:
fb:b6:5a:aa:54:31:0d:80:f0:04:4a:a4:91:4e:f9:57:37:4f:
23:13:f1:2f:39:53:91:a3:ac:a2:9a:ad:7c:94:9f:3c:a1:ea:
d8:c3:9a:59
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICG7AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDMx
OTI0MjBaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlEQkU3RTNCNTIwQUIz
REQ0QTE0NTA4RThDOUE2RTA2MUZBQjdGNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDV10Su2mwuOVBgHrtO5iTR+0MLaLPr/bipDPQe3Xy/srtcEM3D
xP95QjKj7Q+4lkGystyaDCpv+hwkiMOhcODYDJvaDFktBxgchQ1qZi13qKsxmk2I
0+0fSaaQQ01MDC954SJEAT1OMqrl9CJO/FquKi7rso7mZyLCr/6MyU4HAHx+l7gf
HhG1TXTC6ki4+8xBlZ8EFKZuUrYuMQtGeh0Mmrf6FIqyfaCGdvtTXuJLc6ofSyu4
qFtQ3mwCEu6pGmfsJuI29tRDcUvFkASarDfqRwFXNxmagXjAaxcneYgn71manDdF
RsHtGPvb7Y36Fr80fvod4d30l2llVvDe8VTvAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUnb5+O1IKs91KFFCOjJpuBh+rf3cwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL25iNS1PMUlLczkxS0ZG
Q09qSnB1QmgtcmYzYy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAHnoPNwFbEDi7r8mDirkBJv1LVfsyL2xk
alq/pITYD1hLM59l2ftATl6Alh7aB89jfhpRx0mo8gVK3riC3fx8N4GF7aLh9u2X
cn7+H5C63HwHDRJg1aRw5vJGYyKfAIluWDGiEZ8ChMuizRlm1CQjk05MkOiBfO/B
13/HSyaFcdj3P5OCiIDnmnVIP4zQDVokFhAgjFvWU5a1QIqj3lUU4+AZJ5qsm9AU
LSCzt7JT4cvBbwfWq3+BDBPYQpGF5Dltuon/K9WOyuojNWD9Ey6C63WL5hE8CKZF
+7ZaqlQxDYDwBEqkkU75VzdPIxPxLzlTkaOsopqtfJSfPKHq2MOaWQ==
-----END CERTIFICATE-----
Generated at Sun May 18 04:43:23 2025 by rpki-client