Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/r_aW6-s1PS6S6uPwV-T3OXEHRSM.roa
File: r_aW6-s1PS6S6uPwV-T3OXEHRSM.roa (raw, json)
Hash identifier: sLwE32H+8dLIdkRWJg1yo0MdJI5vsj69qtK+WlaU32E=
Subject key identifier: AF:F6:96:EB:EB:35:3D:2E:92:EA:E3:F0:57:E4:F7:39:71:07:45:23
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B6C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/r_aW6-s1PS6S6uPwV-T3OXEHRSM.roa
Signing time: Fri 03 May 2024 02:24:07 +0000
ROA not before: Fri 03 May 2024 02:24:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7020 (0x1b6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 02:24:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AFF696EBEB353D2E92EAE3F057E4F73971074523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:27:8b:31:77:35:50:56:a2:dd:a4:e4:2f:36:
7b:27:7f:eb:bd:96:91:ae:e8:19:3f:11:7a:12:24:
fd:fa:2b:93:20:2f:f0:2e:45:65:fb:aa:c8:a2:52:
95:ab:df:56:29:f5:60:a7:dc:1e:39:cf:13:8b:21:
cc:a0:98:0f:f9:74:d6:d4:fc:ca:7b:93:61:3e:0e:
91:96:fd:93:63:e8:a4:fd:9f:a5:c1:25:66:c3:0e:
79:df:b2:59:1d:1e:3e:9e:ad:bf:8b:f8:f0:50:59:
30:62:60:28:ec:25:6a:ab:5f:f0:64:1a:7c:f9:8e:
d0:39:f8:04:75:b2:81:d0:c2:db:d8:81:b7:68:95:
ff:0d:1c:aa:52:55:13:c2:55:63:f5:40:bf:3c:d7:
78:8b:c1:f9:5c:d8:e3:3b:e1:06:e3:7d:99:45:94:
ee:1c:a8:c8:60:61:26:b4:08:bb:22:63:07:4e:5e:
45:74:48:cf:70:ee:21:7e:f2:6d:48:76:c4:11:ad:
3c:3f:f0:4e:bb:93:3c:6f:aa:bf:1c:66:25:fd:36:
46:1c:e0:94:51:13:49:03:d4:68:00:53:20:d7:54:
b7:58:b2:e2:1a:b5:e1:86:b9:af:64:c0:3c:ed:e5:
89:d6:af:0e:71:6f:be:4c:30:9f:dd:43:45:b1:19:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F6:96:EB:EB:35:3D:2E:92:EA:E3:F0:57:E4:F7:39:71:07:45:23
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/r_aW6-s1PS6S6uPwV-T3OXEHRSM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:7a:e9:c6:c2:f6:ee:a6:8f:32:ad:28:be:e8:e6:15:75:d7:
3e:a5:3b:f7:2a:75:98:ac:4b:23:f8:28:bc:e3:c2:05:41:d3:
f6:b0:1a:7e:97:23:0f:25:ce:1a:ee:4b:7e:3e:58:63:96:72:
6c:ce:7c:dd:dc:ed:66:16:78:d2:4d:f6:dc:05:3e:d3:01:c8:
cb:cf:ab:e3:83:b0:19:c0:a0:b1:29:0c:2e:8b:da:88:91:67:
88:7a:3d:7e:9b:03:70:23:46:b7:43:f9:13:35:36:c3:22:37:
4d:74:74:57:d7:83:7f:c3:e3:c9:55:75:7f:ac:2d:fb:c3:4a:
de:51:2f:36:86:e1:cd:71:d0:12:51:2e:e3:07:1d:7b:75:30:
69:1f:eb:b5:3b:e4:95:c4:53:10:8b:18:0e:09:71:a2:f7:c5:
85:3b:7c:72:04:99:d2:ab:a0:95:e6:4c:bb:8b:67:ff:f6:ab:
5f:b2:d8:8f:d8:92:13:3d:af:30:fa:7b:56:ad:6c:ae:21:51:
c4:d9:60:af:93:6e:fb:bd:2a:d2:dc:85:d8:95:88:af:a2:7c:
5e:73:d9:c9:52:e1:94:13:44:18:28:86:29:44:f7:3a:d9:a4:
a0:a0:48:6e:bc:9b:d4:22:bb:6e:4d:10:78:6e:13:a9:db:e2:
1a:eb:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:46:23 2025 by rpki-client