Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qEjeCvROC763ekfz87SpSSjEosY.roa
File: qEjeCvROC763ekfz87SpSSjEosY.roa (raw, json)
Hash identifier: txbilBo79YRK0zArpo2mJlM3gj1cKQ7q2I9sxOesxyk=
Subject key identifier: A8:48:DE:0A:F4:4E:0B:BE:B7:7A:47:F3:F3:B4:A9:49:28:C4:A2:C6
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B32
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qEjeCvROC763ekfz87SpSSjEosY.roa
Signing time: Thu 02 May 2024 11:54:06 +0000
ROA not before: Thu 02 May 2024 11:54:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6962 (0x1b32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 11:54:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A848DE0AF44E0BBEB77A47F3F3B4A94928C4A2C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:58:4a:0e:81:c3:95:1e:37:a3:e2:8a:d7:
d0:7f:52:66:29:58:31:1a:81:be:d3:1d:9d:c3:db:
97:e1:3f:d2:87:a1:cb:80:16:1a:68:f5:e0:02:6f:
98:5f:b0:21:12:39:3c:7f:84:ce:6c:ae:3a:45:1c:
aa:ea:85:6b:b0:8b:27:d0:12:79:f7:3c:f6:27:ac:
b7:e3:a4:6c:48:77:31:98:fe:52:50:ee:8d:5b:84:
24:a9:c1:02:83:4e:1a:f5:5c:8e:c6:7b:4c:7d:57:
6c:8b:b5:c7:b5:cc:38:80:a6:42:62:94:b4:a5:ec:
e8:c7:74:3f:bc:1a:05:9f:e8:66:42:84:a7:73:97:
a8:ce:64:de:0f:fd:d7:f3:7a:d0:4e:2a:e2:04:3f:
9d:11:0d:f3:1c:a9:b4:0b:fa:b6:97:03:cb:19:bc:
b1:41:92:25:3b:5c:3c:99:67:9e:b7:e1:9d:7c:a6:
f2:f9:cd:f1:c6:2a:9b:bf:48:d1:72:29:9a:af:ad:
b6:67:fb:1f:5a:9d:c1:da:c3:58:1a:24:f5:4d:86:
21:af:94:26:3c:ab:6b:62:00:11:a2:bb:a4:bd:9a:
0c:dc:3b:47:45:7d:d2:6d:93:20:34:53:80:c1:97:
30:ae:7d:99:cf:08:b9:08:31:6c:b8:82:cc:0f:f1:
4c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:DE:0A:F4:4E:0B:BE:B7:7A:47:F3:F3:B4:A9:49:28:C4:A2:C6
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qEjeCvROC763ekfz87SpSSjEosY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:2a:ea:05:f9:c4:29:22:ec:df:8d:20:7f:d2:c1:f9:8c:a4:
45:1d:57:51:33:3c:ac:bd:8e:a6:1a:a9:3c:94:cc:ef:e4:76:
94:87:92:97:77:93:ad:ca:26:6f:07:1b:7d:4b:96:d2:da:7e:
f1:a8:44:f1:64:0b:da:91:e3:cc:91:66:58:77:07:36:a7:a1:
8e:03:40:85:8d:d4:8b:74:e8:65:3e:6e:14:40:0d:7c:7f:7b:
c7:d6:bb:71:f1:27:58:80:14:17:18:83:09:66:32:27:25:47:
fe:f5:13:37:9d:08:e4:c7:0f:a9:aa:ed:42:4b:ab:ed:df:18:
ce:a1:74:4a:8d:df:ac:5e:23:45:9f:ae:52:d2:0f:61:fd:6b:
59:0a:4a:c1:08:3d:20:b8:9a:0b:73:eb:2d:fe:84:c7:b9:45:
13:65:00:18:e6:51:c5:f4:85:ca:22:bd:19:00:67:a1:f7:e6:
74:78:b0:06:0f:a5:b0:7c:56:31:77:d2:1e:47:1e:bc:30:5f:
d5:9f:44:0c:2b:08:6b:c3:74:b2:f1:e3:33:55:a6:52:82:81:
91:8e:b7:53:03:40:c8:53:dc:f5:8f:8e:d6:7d:e0:4f:b9:90:
c6:6d:5d:6a:42:cf:cc:cf:33:55:73:ea:ab:06:ab:6f:c5:79:
5d:7c:8a:b8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDIx
MTU0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE4NDhERTBBRjQ0RTBC
QkVCNzdBNDdGM0YzQjRBOTQ5MjhDNEEyQzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCU1hKDoHDlR43o+KK19B/UmYpWDEagb7THZ3D25fhP9KHocuA
Fhpo9eACb5hfsCESOTx/hM5srjpFHKrqhWuwiyfQEnn3PPYnrLfjpGxIdzGY/lJQ
7o1bhCSpwQKDThr1XI7Ge0x9V2yLtce1zDiApkJilLSl7OjHdD+8GgWf6GZChKdz
l6jOZN4P/dfzetBOKuIEP50RDfMcqbQL+raXA8sZvLFBkiU7XDyZZ5634Z18pvL5
zfHGKpu/SNFyKZqvrbZn+x9ancHaw1gaJPVNhiGvlCY8q2tiABGiu6S9mgzcO0dF
fdJtkyA0U4DBlzCufZnPCLkIMWy4gswP8UzXAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqEjeCvROC763ekfz87SpSSjEosYwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3FFamVDdlJPQzc2M2Vr
Zno4N1NwU1NqRW9zWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAQyrqBfnEKSLs340gf9LB+YykRR1XUTM8
rL2OphqpPJTM7+R2lIeSl3eTrcombwcbfUuW0tp+8ahE8WQL2pHjzJFmWHcHNqeh
jgNAhY3Ui3ToZT5uFEANfH97x9a7cfEnWIAUFxiDCWYyJyVH/vUTN50I5McPqart
Qkur7d8YzqF0So3frF4jRZ+uUtIPYf1rWQpKwQg9ILiaC3PrLf6Ex7lFE2UAGOZR
xfSFyiK9GQBnoffmdHiwBg+lsHxWMXfSHkcevDBf1Z9EDCsIa8N0svHjM1WmUoKB
kY63UwNAyFPc9Y+O1n3gT7mQxm1dakLPzM8zVXPqqwarb8V5XXyKuA==
-----END CERTIFICATE-----
Generated at Sun May 18 11:04:24 2025 by rpki-client