Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/rvcFVwCzZsVmyWJRL00VxxdXOps.roa
File: rvcFVwCzZsVmyWJRL00VxxdXOps.roa (raw, json)
Hash identifier: YjDhjyHvFtQ3nPJggCQP5Xql3uhvx4HcXwCeZZH7W+c=
Subject key identifier: AE:F7:05:57:00:B3:66:C5:66:C9:62:51:2F:4D:15:C7:17:57:3A:9B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B00
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rvcFVwCzZsVmyWJRL00VxxdXOps.roa
Signing time: Wed 01 May 2024 23:24:06 +0000
ROA not before: Wed 01 May 2024 23:24:06 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6912 (0x1b00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 23:24:06 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AEF7055700B366C566C962512F4D15C717573A9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:f6:d9:05:e1:3e:ac:09:df:13:1f:4a:cf:
10:f7:e1:b2:84:d9:87:c4:68:1a:82:94:5d:c4:11:
7c:ef:3a:dd:4f:c6:cb:4d:1d:53:4d:03:0d:0b:d8:
d1:1e:9a:e8:e2:63:05:59:dc:a0:be:89:93:b5:99:
35:b7:d9:f9:4b:3b:a8:f1:40:d3:58:87:e7:2a:c9:
8e:b6:87:8d:1b:a1:e5:91:0f:28:e6:9f:52:b7:5c:
b6:0e:a3:59:f1:f8:b1:06:1a:58:d5:7e:a1:82:15:
1d:e7:58:b7:df:4a:db:56:62:d2:3e:82:54:66:cf:
f6:2a:ec:9d:95:fa:ef:d6:33:e9:4f:86:00:9a:d6:
c7:1b:ef:92:0b:7d:f6:db:7e:0b:36:a5:56:71:a7:
cb:7e:69:73:74:b2:60:4c:ae:46:5e:e2:e8:9a:3f:
7e:28:b8:db:f0:68:8c:74:e0:fa:72:50:b1:dc:65:
ed:2b:4b:2f:e1:bc:3c:80:78:d2:0d:1d:ed:0d:67:
0e:b4:ef:c6:88:47:79:0f:01:38:15:ea:b5:57:4b:
34:45:7e:3d:ce:35:c8:f4:74:b0:2b:06:70:a1:25:
03:0c:d4:4d:59:e0:61:d1:a7:fe:05:b2:bf:19:2d:
7b:16:e4:95:1a:f0:d4:5a:bb:ba:66:62:0f:f0:90:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F7:05:57:00:B3:66:C5:66:C9:62:51:2F:4D:15:C7:17:57:3A:9B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/rvcFVwCzZsVmyWJRL00VxxdXOps.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c8:25:cf:9c:bd:67:af:f5:3a:7b:36:17:19:48:75:24:18:0f:
3c:57:77:8d:cf:ce:08:65:3c:c2:e4:8b:52:45:ab:3b:01:3d:
65:89:e9:fb:cf:ee:eb:69:4d:e1:2e:0c:63:05:b0:ec:c7:09:
30:52:cf:c0:57:af:1b:66:e3:97:70:34:f5:12:0e:87:5d:e8:
e2:e1:0e:c0:36:71:0d:ee:d6:e1:8d:ce:b1:86:e9:12:c6:92:
87:d1:cf:41:d7:fb:5f:e6:8c:b7:0e:a9:cb:50:41:e8:9c:c2:
9d:45:aa:32:ab:3e:0f:82:2a:56:29:c5:30:2d:04:9c:5e:b6:
77:83:80:dc:22:75:b1:ad:c6:24:3b:4e:49:f3:24:92:65:2f:
26:f9:6a:07:a4:65:00:c7:31:3e:64:99:21:60:c0:ec:7f:bf:
29:b4:35:6f:ce:01:f2:25:ce:f9:d8:c0:9f:f2:74:51:54:71:
9c:d4:c7:7b:5e:77:66:45:b9:db:c0:a5:91:d6:11:db:da:2f:
96:ae:0e:fc:98:c9:62:2c:fb:fb:da:49:6b:58:b1:68:72:e2:
f5:e1:7b:67:8a:93:96:cc:ef:27:81:37:84:ae:4d:11:31:28:
b5:7c:b3:94:f1:f3:74:94:de:6f:81:26:9d:b1:61:7d:1a:9c:
e1:a3:3a:b0
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGwAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDEy
MzI0MDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFFRjcwNTU3MDBCMzY2
QzU2NkM5NjI1MTJGNEQxNUM3MTc1NzNBOUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDksPbZBeE+rAnfEx9KzxD34bKE2YfEaBqClF3EEXzvOt1PxstN
HVNNAw0L2NEemujiYwVZ3KC+iZO1mTW32flLO6jxQNNYh+cqyY62h40boeWRDyjm
n1K3XLYOo1nx+LEGGljVfqGCFR3nWLffSttWYtI+glRmz/Yq7J2V+u/WM+lPhgCa
1scb75ILffbbfgs2pVZxp8t+aXN0smBMrkZe4uiaP34ouNvwaIx04PpyULHcZe0r
Sy/hvDyAeNINHe0NZw6078aIR3kPATgV6rVXSzRFfj3ONcj0dLArBnChJQMM1E1Z
4GHRp/4Fsr8ZLXsW5JUa8NRau7pmYg/wkKcHAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUrvcFVwCzZsVmyWJRL00VxxdXOpswHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3J2Y0ZWd0N6WnNWbXlX
SlJMMDBWeHhkWE9wcy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAyCXPnL1nr/U6ezYXGUh1JBgPPFd3jc/O
CGU8wuSLUkWrOwE9ZYnp+8/u62lN4S4MYwWw7McJMFLPwFevG2bjl3A09RIOh13o
4uEOwDZxDe7W4Y3OsYbpEsaSh9HPQdf7X+aMtw6py1BB6JzCnUWqMqs+D4IqVinF
MC0EnF62d4OA3CJ1sa3GJDtOSfMkkmUvJvlqB6RlAMcxPmSZIWDA7H+/KbQ1b84B
8iXO+djAn/J0UVRxnNTHe153ZkW528ClkdYR29ovlq4O/JjJYiz7+9pJa1ixaHLi
9eF7Z4qTlszvJ4E3hK5NETEotXyzlPHzdJTeb4EmnbFhfRqc4aM6sA==
-----END CERTIFICATE-----
Generated at Sun May 18 11:03:18 2025 by rpki-client