Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/sAlWZNLxDtA67FjSTt0hu6rKkjc.roa
File: sAlWZNLxDtA67FjSTt0hu6rKkjc.roa (raw, json)
Hash identifier: ARYnqAoFZLhEZQ4IvoM5GYdcSxmj1qEOREEi+MQmwvI=
Subject key identifier: B0:09:56:64:D2:F1:0E:D0:3A:EC:58:D2:4E:DD:21:BB:AA:CA:92:37
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B12
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sAlWZNLxDtA67FjSTt0hu6rKkjc.roa
Signing time: Thu 02 May 2024 03:54:07 +0000
ROA not before: Thu 02 May 2024 03:54:07 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6930 (0x1b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 2 03:54:07 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B0095664D2F10ED03AEC58D24EDD21BBAACA9237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:d8:f3:17:e7:62:f7:7b:a7:22:2a:e4:88:
c1:41:03:42:e8:c9:cd:5c:de:10:46:9f:e7:0c:45:
3e:00:23:aa:1d:77:7d:14:ca:20:5c:b6:3a:0a:ce:
00:8a:9a:a6:f9:78:18:90:29:44:80:14:02:df:d2:
55:2c:18:ef:61:6a:d9:6a:eb:6b:04:19:e6:d3:ca:
bd:90:94:63:1d:90:6a:89:06:7e:1f:37:94:10:99:
1d:7a:21:2b:24:dc:98:d8:3f:59:c3:72:14:4e:d1:
2c:04:07:80:08:cf:78:5f:67:2b:4e:5a:10:07:72:
60:74:06:18:42:5d:a8:62:a5:76:2f:66:3b:a1:bd:
d7:a8:57:47:0e:0c:ad:a9:43:b2:04:76:20:8a:da:
fc:7e:3e:0e:8c:af:a0:da:2d:fd:ca:b2:d8:78:03:
92:e7:1e:51:95:3f:c2:74:8b:7c:21:ba:57:f7:71:
19:76:4d:68:08:79:6f:06:fb:f7:04:e7:f4:88:b9:
45:26:0a:a7:d0:c2:73:b8:a5:05:36:b3:4c:cb:b1:
20:7e:46:be:cc:10:4d:26:f5:ed:a8:cb:b4:91:a2:
cb:95:2a:ac:90:6c:71:14:e6:46:0b:ba:aa:7c:20:
70:6a:e3:19:1e:7c:51:8a:d6:b1:91:e5:83:07:75:
ec:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:09:56:64:D2:F1:0E:D0:3A:EC:58:D2:4E:DD:21:BB:AA:CA:92:37
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sAlWZNLxDtA67FjSTt0hu6rKkjc.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1a:00:22:3d:cf:ca:1f:2f:d8:58:f8:d9:a2:49:ec:0c:9b:ba:
ed:4e:50:17:96:53:f2:3c:f0:ae:3f:83:3e:f1:c8:5b:f8:96:
d9:ab:bb:ed:8b:df:80:77:22:80:80:1d:ab:04:a4:eb:41:2c:
bd:ae:cc:79:46:b7:71:9d:bb:c5:2e:8c:a6:1f:a3:6d:c3:6f:
8e:4b:0f:9e:05:89:fd:36:ce:da:ca:ba:76:03:55:e0:88:69:
21:09:f6:0e:1f:96:b7:b2:51:3f:a4:dc:85:b0:70:1d:84:8a:
7c:c2:e2:b3:ff:dc:ed:78:78:20:1c:0f:13:3b:00:ea:7c:76:
de:3e:e3:1a:4a:e7:5d:86:a6:28:01:45:fc:55:e6:06:20:0f:
49:c0:86:1c:eb:0d:59:67:28:bd:a1:20:d7:c8:ec:cd:5d:9e:
c3:3b:bf:81:37:da:07:b6:a1:77:7c:21:ee:6b:fc:6c:a8:09:
9e:25:78:c3:49:38:d1:b4:e1:3b:64:b1:60:a8:f4:d8:97:1a:
6f:f6:19:e5:af:26:d0:ce:82:70:8c:0a:8c:d2:ff:91:91:61:
3f:7d:81:25:e2:70:f2:45:c9:b9:43:8f:f3:c1:e1:9b:34:ee:
72:8e:b2:51:79:a7:16:7e:5b:52:70:f6:ac:ce:14:e8:16:0b:
07:37:ed:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:53:59 2025 by rpki-client