Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qEvkXLjCR_v41wEMO7UmcGI9E6k.roa
File: qEvkXLjCR_v41wEMO7UmcGI9E6k.roa (raw, json)
Hash identifier: uwKUinNqap5ArqxnPd1qcqFJMSwJ6gOCyEg9Rje7evQ=
Subject key identifier: A8:4B:E4:5C:B8:C2:47:FB:F8:D7:01:0C:3B:B5:26:70:62:3D:13:A9
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 114A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qEvkXLjCR_v41wEMO7UmcGI9E6k.roa
Signing time: Sat 06 Apr 2024 01:52:49 +0000
ROA not before: Sat 06 Apr 2024 01:52:49 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4426 (0x114a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 6 01:52:49 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A84BE45CB8C247FBF8D7010C3BB52670623D13A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:b7:d8:1d:6d:4b:5e:9f:86:0f:be:75:d1:
aa:14:f4:35:3c:55:34:42:08:15:fb:23:8f:82:21:
a8:6e:01:de:6c:ca:34:d9:23:a9:27:b7:5e:b7:9a:
03:4b:2c:9d:33:2b:d6:94:b2:87:a0:0d:3d:33:aa:
ba:dd:a4:54:66:a1:84:5c:56:7a:76:99:af:6c:b5:
e8:73:0e:ab:00:f8:70:23:2c:e3:97:3f:52:04:bf:
ea:e1:f0:5a:bc:c8:97:9a:8d:2d:4b:bf:25:64:db:
b9:65:10:cd:80:60:71:14:67:47:26:0e:5f:22:00:
e2:ba:42:93:8b:61:47:46:bc:17:24:84:c5:83:7a:
39:92:1f:1d:dc:6f:a8:36:d3:ff:11:78:cc:94:26:
d9:6c:e8:ab:02:50:46:dc:9d:16:16:32:9f:bd:fd:
aa:aa:83:b0:1d:49:12:42:32:1f:60:e2:94:af:5d:
6a:ad:e6:d2:54:a3:21:d1:0b:3d:df:57:fd:8e:92:
b0:32:46:dc:e4:19:0e:4a:df:7d:92:fa:76:68:c6:
b5:7b:38:6e:8b:cd:35:83:a6:1e:98:98:7f:60:0b:
93:89:01:5c:68:5b:6d:12:d6:3a:ea:a3:45:d9:6b:
dd:2c:67:d2:19:98:b8:ed:8e:4f:e5:53:c5:e4:79:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4B:E4:5C:B8:C2:47:FB:F8:D7:01:0C:3B:B5:26:70:62:3D:13:A9
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qEvkXLjCR_v41wEMO7UmcGI9E6k.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d4:6c:f6:91:a3:27:4c:b6:4e:c8:2b:d5:82:f1:f3:2c:62:be:
99:45:9c:8a:eb:64:ad:d3:1e:85:11:5a:15:81:1e:2b:e7:62:
79:1a:70:50:36:ff:12:75:0a:90:a2:ff:f4:ba:dc:10:30:a1:
d9:93:2f:ee:b3:a4:47:87:b7:d1:64:5e:48:1f:11:da:59:fa:
94:fb:1a:10:d1:4f:f3:65:36:25:b2:59:cd:71:8d:7b:7f:28:
38:40:05:98:07:0e:1d:6f:98:12:7e:50:f2:a0:5b:73:bc:d5:
05:0a:f2:dd:1a:e2:95:d6:73:18:75:0b:9c:2a:10:98:cd:f3:
04:98:15:48:45:03:40:5e:0f:79:a4:5f:74:68:7f:ab:ee:3f:
48:85:e5:6b:6c:f4:c1:23:01:73:e8:4c:17:16:02:3e:72:f7:
77:ae:99:eb:7a:07:75:1d:90:92:ce:8e:ae:d4:03:d8:97:51:
53:e2:5f:11:60:e2:68:ad:17:bb:1f:72:b5:01:0f:7f:8d:2a:
2c:8a:3c:9e:0a:13:c8:dd:c3:b5:e9:88:a7:94:d9:d6:bb:3a:
1f:b6:9d:75:b2:89:21:f2:f4:13:08:70:78:5c:2f:33:01:33:
5a:68:f7:3d:84:7f:3a:ef:4c:14:90:c0:56:73:a0:67:60:4c:
08:57:eb:88
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDYw
MTUyNDlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE4NEJFNDVDQjhDMjQ3
RkJGOEQ3MDEwQzNCQjUyNjcwNjIzRDEzQTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDinrfYHW1LXp+GD7510aoU9DU8VTRCCBX7I4+CIahuAd5syjTZ
I6knt163mgNLLJ0zK9aUsoegDT0zqrrdpFRmoYRcVnp2ma9stehzDqsA+HAjLOOX
P1IEv+rh8Fq8yJeajS1LvyVk27llEM2AYHEUZ0cmDl8iAOK6QpOLYUdGvBckhMWD
ejmSHx3cb6g20/8ReMyUJtls6KsCUEbcnRYWMp+9/aqqg7AdSRJCMh9g4pSvXWqt
5tJUoyHRCz3fV/2OkrAyRtzkGQ5K332S+nZoxrV7OG6LzTWDph6YmH9gC5OJAVxo
W20S1jrqo0XZa90sZ9IZmLjtjk/lU8XkeaAPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqEvkXLjCR/v41wEMO7UmcGI9E6kwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3FFdmtYTGpDUl92NDF3
RU1PN1VtY0dJOUU2ay5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA1Gz2kaMnTLZOyCvVgvHzLGK+mUWciutk
rdMehRFaFYEeK+dieRpwUDb/EnUKkKL/9LrcEDCh2ZMv7rOkR4e30WReSB8R2ln6
lPsaENFP82U2JbJZzXGNe38oOEAFmAcOHW+YEn5Q8qBbc7zVBQry3RrildZzGHUL
nCoQmM3zBJgVSEUDQF4PeaRfdGh/q+4/SIXla2z0wSMBc+hMFxYCPnL3d66Z63oH
dR2Qks6OrtQD2JdRU+JfEWDiaK0Xux9ytQEPf40qLIo8ngoTyN3DtemIp5TZ1rs6
H7addbKJIfL0EwhweFwvMwEzWmj3PYR/Ou9MFJDAVnOgZ2BMCFfriA==
-----END CERTIFICATE-----
Generated at Sun May 18 10:57:10 2025 by rpki-client