Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/q6-mhh0SDfthC2-9BDQuBocMq4M.roa
File: q6-mhh0SDfthC2-9BDQuBocMq4M.roa (raw, json)
Hash identifier: U0jCSkWKQFr+zyT7vQpYcDTu+eOLdltkuU+6XFbovw0=
Subject key identifier: AB:AF:A6:86:1D:12:0D:FB:61:0B:6F:BD:04:34:2E:06:87:0C:AB:83
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1970
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/q6-mhh0SDfthC2-9BDQuBocMq4M.roa
Signing time: Sat 27 Apr 2024 19:23:49 +0000
ROA not before: Sat 27 Apr 2024 19:23:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6512 (0x1970)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 27 19:23:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=ABAFA6861D120DFB610B6FBD04342E06870CAB83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e6:a3:4d:ab:6a:7f:ae:10:84:56:b7:59:9b:
dc:f8:49:1d:05:31:b0:c6:c6:06:10:94:8f:1a:ad:
0b:b6:18:97:f3:83:f1:7c:f7:da:44:c1:86:08:b3:
bd:fe:45:69:a2:9f:b4:bb:f8:60:d6:cb:09:19:82:
20:75:d6:0b:cc:85:5f:88:b4:32:7f:a7:15:28:de:
9b:e0:56:bd:c3:43:55:5f:a3:c0:8f:e0:37:06:47:
98:70:ce:39:db:60:c3:d9:1f:a4:56:9f:8d:6e:6a:
94:2b:65:b0:1e:ac:e4:bb:b8:87:25:41:7f:11:29:
96:2a:19:a4:da:f3:a4:fd:05:f7:57:64:c2:c9:2a:
0a:05:a2:79:f3:d8:7a:e7:94:98:08:ab:a5:b6:3c:
cc:cb:a4:d5:69:e4:30:da:35:2e:53:0f:10:1e:28:
92:7d:2d:83:44:97:f6:df:0f:0f:0c:74:20:43:6a:
d7:83:02:25:c2:d5:bc:80:8e:5b:ed:1d:5f:d8:23:
c5:21:6b:a5:e6:08:5d:98:dd:ee:8a:3b:90:63:40:
cf:12:03:79:5b:08:86:61:f2:9f:b1:6e:e3:8b:ab:
dc:3a:ca:60:a9:fb:8c:30:04:82:09:9d:06:5a:5c:
9b:d7:2a:73:f4:5a:4d:a0:38:75:d1:f7:e5:14:42:
67:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:A6:86:1D:12:0D:FB:61:0B:6F:BD:04:34:2E:06:87:0C:AB:83
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/q6-mhh0SDfthC2-9BDQuBocMq4M.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:65:f9:bf:36:e0:a1:4a:1e:92:06:b9:f6:cd:17:ae:23:6e:
b1:eb:88:da:45:4d:87:68:6f:e1:41:10:de:a7:5f:ae:a0:95:
a5:72:f1:61:49:09:41:81:8f:6d:22:ff:2c:8d:cd:17:a2:79:
3f:59:c8:d1:8d:ee:d0:1a:fb:67:27:df:88:d6:56:bd:10:69:
cc:bc:21:09:de:db:20:e7:e5:66:74:9e:75:4f:5b:21:c0:dc:
06:35:6b:52:0f:af:ee:32:b4:9e:72:e2:00:cd:a0:08:54:ae:
39:66:24:0d:f3:8d:ac:c6:fc:eb:25:f4:07:e5:ca:bb:ae:6a:
71:48:de:48:9d:37:01:7c:d1:8d:c0:35:6b:7e:5a:c8:3e:f9:
d9:22:e9:ce:8a:fb:dc:b7:b8:26:12:c6:9e:2f:b1:a0:b6:5d:
0b:2a:ea:88:4d:6c:95:db:b6:57:5a:84:e9:c5:0b:0d:94:d1:
f9:79:73:6a:e7:62:66:95:fe:84:3a:e8:a4:30:67:c7:ff:64:
63:c4:b8:7c:ed:49:d1:64:15:6f:45:83:0e:c1:8b:b6:a7:74:
45:64:5b:2c:9d:05:6b:ae:f0:27:0c:69:ae:ee:e2:83:45:e9:
17:41:e7:80:fa:d7:7f:77:b2:39:42:0e:3c:d0:18:98:b5:23:
8a:35:f8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:53:09 2025 by rpki-client