Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/suyR5G_zDX1Ja9KdCVT8TnXw6J0.roa
File: suyR5G_zDX1Ja9KdCVT8TnXw6J0.roa (raw, json)
Hash identifier: 6YInaAHLgi3gicMuLnddVWh2cMyDZW4usNBaNLcRsnU=
Subject key identifier: B2:EC:91:E4:6F:F3:0D:7D:49:6B:D2:9D:09:54:FC:4E:75:F0:E8:9D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A00
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/suyR5G_zDX1Ja9KdCVT8TnXw6J0.roa
Signing time: Mon 29 Apr 2024 07:24:05 +0000
ROA not before: Mon 29 Apr 2024 07:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6656 (0x1a00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 07:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=B2EC91E46FF30D7D496BD29D0954FC4E75F0E89D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c9:b4:6c:e5:cf:d6:6b:7b:5f:d2:29:f1:0f:
04:a6:84:22:47:28:8e:93:70:9e:6d:a0:59:cf:7e:
87:7f:a5:be:c3:f2:05:a0:63:e1:98:d1:83:93:4a:
8b:ac:1a:1a:8e:dc:79:5f:ad:ac:4c:36:99:0d:02:
b2:c8:54:d2:ad:46:f1:01:ac:e7:13:e5:6b:94:c1:
ae:26:72:df:fb:aa:ae:b2:c1:5d:1f:8a:fd:31:e9:
c9:76:aa:75:f2:73:b8:a6:e5:98:10:e6:ae:f6:2d:
ee:da:eb:59:0f:90:fa:d6:5d:d0:d1:f5:fb:2b:6e:
b9:de:5e:e8:cb:16:8e:e4:b0:03:09:5c:e5:03:11:
a9:7e:ef:66:32:c1:fe:5f:41:e3:07:4f:85:08:7d:
07:a2:85:b2:0d:30:8b:38:d9:b3:12:27:6f:b3:55:
9e:27:59:5f:a4:23:c1:84:0c:67:4c:4f:ce:64:5a:
ab:d4:26:d0:75:b6:84:eb:8c:9a:84:40:6e:c0:39:
ff:f3:97:fe:7b:89:4e:02:5a:56:f9:ba:90:60:f7:
d0:dc:b9:1e:75:13:6f:d7:58:b4:9d:11:59:e8:48:
00:75:35:1f:fc:49:df:11:92:b4:e2:84:e5:a8:3c:
ed:76:38:c8:70:25:fd:b1:54:25:c6:83:55:c6:42:
c3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:EC:91:E4:6F:F3:0D:7D:49:6B:D2:9D:09:54:FC:4E:75:F0:E8:9D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/suyR5G_zDX1Ja9KdCVT8TnXw6J0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
da:16:44:02:14:c6:1d:e0:f4:f3:f7:63:48:0f:2b:a6:75:a5:
f7:bd:c6:3b:c0:49:5d:b5:66:45:a6:cb:10:09:e1:07:47:a5:
28:df:c5:68:03:67:b9:d0:d2:1d:23:47:58:b8:f3:bd:01:9a:
13:3c:d2:41:de:b8:e6:0b:19:58:68:cb:d9:82:11:6e:6d:d5:
2a:8c:56:16:c0:45:0d:7a:bb:83:7a:a2:8d:91:53:cc:ac:86:
39:c6:33:1e:d6:b3:42:62:15:99:66:fa:13:03:24:ee:e2:59:
d2:71:84:ec:98:d0:62:b9:7a:a9:60:09:23:92:6a:3b:52:0b:
7b:f8:d7:1d:b0:cd:11:32:cd:ce:bb:1d:25:8b:c6:f8:26:cb:
3d:5f:0f:ee:1a:dc:ef:7a:dd:d1:88:dc:25:16:af:8e:f6:56:
cb:70:ed:87:90:d4:78:fb:02:ae:48:ae:52:03:23:3e:50:18:
66:b1:b3:a9:ee:a0:ca:69:65:42:e3:96:23:5b:35:d0:88:bc:
41:bf:f0:2b:4b:18:fc:85:c9:22:38:83:df:9f:cc:6b:a6:58:
ec:a2:88:84:7b:98:e4:66:cf:22:19:e4:ab:1e:a8:38:4d:e2:
84:0d:da:93:d7:d1:d3:8a:2e:e7:15:c4:c4:fb:6e:11:52:bc:
d6:74:eb:91
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGgAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjkw
NzI0MDVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEIyRUM5MUU0NkZGMzBE
N0Q0OTZCRDI5RDA5NTRGQzRFNzVGMEU4OUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSybRs5c/Wa3tf0inxDwSmhCJHKI6TcJ5toFnPfod/pb7D8gWg
Y+GY0YOTSousGhqO3HlfraxMNpkNArLIVNKtRvEBrOcT5WuUwa4mct/7qq6ywV0f
iv0x6cl2qnXyc7im5ZgQ5q72Le7a61kPkPrWXdDR9fsrbrneXujLFo7ksAMJXOUD
Eal+72Yywf5fQeMHT4UIfQeihbINMIs42bMSJ2+zVZ4nWV+kI8GEDGdMT85kWqvU
JtB1toTrjJqEQG7AOf/zl/57iU4CWlb5upBg99DcuR51E2/XWLSdEVnoSAB1NR/8
Sd8RkrTihOWoPO12OMhwJf2xVCXGg1XGQsPzAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUsuyR5G/zDX1Ja9KdCVT8TnXw6J0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3N1eVI1R196RFgxSmE5
S2RDVlQ4VG5YdzZKMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA2hZEAhTGHeD08/djSA8rpnWl973GO8BJ
XbVmRabLEAnhB0elKN/FaANnudDSHSNHWLjzvQGaEzzSQd645gsZWGjL2YIRbm3V
KoxWFsBFDXq7g3qijZFTzKyGOcYzHtazQmIVmWb6EwMk7uJZ0nGE7JjQYrl6qWAJ
I5JqO1ILe/jXHbDNETLNzrsdJYvG+CbLPV8P7hrc73rd0YjcJRavjvZWy3Dth5DU
ePsCrkiuUgMjPlAYZrGzqe6gymllQuOWI1s10Ii8Qb/wK0sY/IXJIjiD35/Ma6ZY
7KKIhHuY5GbPIhnkqx6oOE3ihA3ak9fR04ou5xXExPtuEVK81nTrkQ==
-----END CERTIFICATE-----
Generated at Sun May 18 04:53:02 2025 by rpki-client