Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/s1S5TTihfqkpEIfklgy-fSijNO8.roa
File:                     s1S5TTihfqkpEIfklgy-fSijNO8.roa (raw, json)
Hash identifier:          7OotNPue8W6McrDIw9lDiaSnAXNKWgomlWKhCTT1C98=
Subject key identifier:   B3:54:B9:4D:38:A1:7E:A9:29:10:87:E4:96:0C:BE:7D:28:A3:34:EF
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       197A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/s1S5TTihfqkpEIfklgy-fSijNO8.roa
Signing time:             Sat 27 Apr 2024 21:53:53 +0000
ROA not before:           Sat 27 Apr 2024 21:53:53 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6522 (0x197a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 27 21:53:53 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=B354B94D38A17EA9291087E4960CBE7D28A334EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:66:8e:8e:73:3a:5f:4e:3e:b4:51:33:23:62:
                    e1:79:9f:44:17:c9:fd:2e:bc:3f:c6:6e:94:91:16:
                    d6:00:02:a8:19:af:9b:e2:50:bc:4f:93:11:16:10:
                    ab:7a:8b:49:de:3d:e1:ea:3b:ad:83:4b:17:1e:94:
                    08:8c:10:9d:27:8a:25:00:c1:24:49:49:9d:78:2b:
                    80:02:64:50:31:ac:a9:fc:64:a2:8f:89:65:2a:96:
                    33:fc:3b:d6:33:97:82:13:f6:aa:05:f5:85:bc:d9:
                    b0:d1:1c:23:12:2e:63:b6:34:19:1f:0f:34:ff:84:
                    79:e4:7d:99:a2:2b:8b:b9:ea:d7:37:77:2e:c5:18:
                    9e:a5:d9:89:36:0d:23:be:4b:7a:33:4a:75:66:b0:
                    72:f8:d8:70:cc:18:63:08:09:41:2e:00:e6:2a:ef:
                    1e:83:d8:a7:b2:5a:4a:56:41:d6:bd:5e:a5:32:51:
                    5c:69:28:59:06:ce:60:97:44:a3:4b:f0:57:39:d6:
                    62:c1:2c:27:39:a8:03:ba:36:aa:8d:aa:cd:af:c2:
                    da:b5:ef:e6:31:73:93:3c:a9:0c:7e:17:c5:94:b0:
                    8b:62:8c:bb:db:2e:dd:a2:95:a0:22:9e:25:3b:83:
                    ef:80:f2:2d:73:ec:3e:42:e0:eb:5c:67:d6:d6:b3:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:B9:4D:38:A1:7E:A9:29:10:87:E4:96:0C:BE:7D:28:A3:34:EF
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/s1S5TTihfqkpEIfklgy-fSijNO8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:31:89:4f:1b:49:2c:0d:a2:39:54:84:73:e1:66:05:65:
         18:d5:2b:e4:1c:c1:e8:73:02:12:be:24:14:c3:01:05:95:6a:
         15:b9:7b:d3:62:6c:47:42:62:2a:7c:9e:90:e2:ef:7c:05:9a:
         5e:7f:1c:ec:51:27:2a:03:5c:da:ed:c4:20:4d:a6:ca:d2:ea:
         d3:61:f2:ae:bf:d6:f8:fe:a6:65:8d:ed:08:cb:19:d3:88:2b:
         4d:48:e0:78:a6:0b:11:e8:20:e9:82:f3:0e:87:84:fe:8e:63:
         8a:62:ee:e8:17:28:94:44:a7:e8:33:9a:ff:77:9f:1d:08:74:
         f2:d3:79:d9:d7:4a:95:ea:37:8f:91:06:e1:52:66:df:cd:6b:
         ea:a8:9c:ce:ec:77:8a:aa:94:bd:68:f6:50:ec:b5:87:37:3b:
         a6:25:5c:8f:9f:a4:a7:8f:f7:e5:a3:e5:69:d1:60:eb:39:d4:
         69:6f:26:32:b4:05:c7:6f:63:a7:ab:f8:0f:00:f3:2b:ff:5b:
         ec:01:d6:51:c2:a9:e7:f2:6a:9c:f2:a5:af:0d:e2:27:fb:d7:
         c8:74:a2:2c:db:f0:d9:20:b3:3b:af:d3:c0:f4:34:3d:84:40:
         5a:c8:55:6a:49:90:ee:52:9e:07:73:f0:17:a1:e0:d4:a1:69:
         b3:c4:3a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:50:01 2025 by rpki-client