Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/v3bmSowyJAonMaengV1_XxiNFj8.roa
File: v3bmSowyJAonMaengV1_XxiNFj8.roa (raw, json)
Hash identifier: cMoHS/iO9xOo16xQvjiVPNuB1cQhH/lE5aVeP905Ul4=
Subject key identifier: BF:76:E6:4A:8C:32:24:0A:27:31:A7:A7:81:5D:7F:5F:18:8D:16:3F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 18D8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/v3bmSowyJAonMaengV1_XxiNFj8.roa
Signing time: Fri 26 Apr 2024 05:23:46 +0000
ROA not before: Fri 26 Apr 2024 05:23:46 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6360 (0x18d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 26 05:23:46 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=BF76E64A8C32240A2731A7A7815D7F5F188D163F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c4:d0:f4:f8:7e:c8:1e:49:92:f4:b2:74:6a:
a8:9c:70:e5:17:73:be:da:69:21:a6:12:6e:93:f5:
1f:dc:97:ee:71:e0:14:2c:3b:c5:c1:c2:26:9a:1e:
f8:f1:06:4a:d9:86:ea:e0:2f:64:4e:f3:97:3a:83:
fd:3c:63:95:d4:8c:6a:b4:43:69:08:79:37:42:ec:
ee:4c:cc:59:c3:c8:2c:12:6a:e7:34:a8:71:4a:87:
31:d8:f9:47:3b:f9:b6:e0:71:fa:3d:32:7a:bb:d6:
be:c8:1b:7e:c4:f5:34:2a:64:64:fe:53:2e:2a:a8:
92:7c:d0:57:a9:7c:50:12:ae:e9:82:12:8f:63:a0:
30:66:c2:b6:e3:4d:ac:70:6f:a2:18:c3:9c:14:06:
70:09:b7:74:00:3e:95:e0:31:ca:08:5d:a2:a6:15:
91:f5:a9:ef:9f:a5:9d:2b:15:9c:fe:73:6d:5d:11:
01:84:ff:fb:3a:27:2e:8d:8c:13:a8:ea:54:a3:57:
bc:94:f6:f0:29:16:42:e6:d3:2d:6c:67:b6:a2:b0:
79:80:aa:33:d3:49:5a:1a:78:e9:78:38:ab:96:18:
91:8f:e1:d4:de:8a:fb:ed:51:5e:88:fe:01:e0:30:
f9:18:77:4a:f1:3b:5f:2f:6e:f6:af:47:b8:b3:8e:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:76:E6:4A:8C:32:24:0A:27:31:A7:A7:81:5D:7F:5F:18:8D:16:3F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/v3bmSowyJAonMaengV1_XxiNFj8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:6d:42:ee:96:ad:2a:17:19:50:f9:2e:65:f6:04:87:f1:e5:
10:e9:71:b3:af:95:a2:62:81:0e:d6:40:3a:dd:19:c7:13:66:
8e:70:26:24:66:b0:b1:ba:59:8d:ee:9d:34:c5:28:47:b6:e2:
2f:75:03:d7:e5:bf:6f:19:71:47:ea:9d:18:b1:c5:fe:24:41:
22:32:fa:ea:1a:74:39:e4:b2:46:4f:06:d4:ce:ec:76:33:b7:
ac:33:52:f3:72:6d:ab:41:8b:ba:8b:87:8f:55:31:46:b9:d3:
d2:c6:f6:97:f6:ad:db:0b:4f:ee:e5:c6:4c:f0:93:73:13:85:
e6:c0:ac:e9:f4:ab:d0:25:53:4a:2d:6d:71:02:35:ad:e1:c4:
62:b5:7d:ce:d3:44:f6:63:09:99:bf:a0:5a:f5:35:e7:a0:85:
a7:f7:ca:cc:dc:99:a9:8e:e8:05:c9:40:ec:1b:91:85:95:dd:
a5:91:79:59:60:16:6f:6f:70:5c:5c:0c:83:4e:59:9d:09:7e:
ac:46:24:bb:ff:36:04:11:26:c4:94:b9:bc:99:f0:c7:e3:0d:
45:bd:b5:c6:c0:95:9e:b3:4d:91:3e:a4:02:e7:93:ce:f6:3c:
a9:19:aa:7f:6e:da:72:19:76:7c:4e:54:a4:6e:f2:7b:29:c4:
08:9f:be:4c
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGNgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjYw
NTIzNDZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEJGNzZFNjRBOEMzMjI0
MEEyNzMxQTdBNzgxNUQ3RjVGMTg4RDE2M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZxND0+H7IHkmS9LJ0aqiccOUXc77aaSGmEm6T9R/cl+5x4BQs
O8XBwiaaHvjxBkrZhurgL2RO85c6g/08Y5XUjGq0Q2kIeTdC7O5MzFnDyCwSauc0
qHFKhzHY+Uc7+bbgcfo9Mnq71r7IG37E9TQqZGT+Uy4qqJJ80FepfFASrumCEo9j
oDBmwrbjTaxwb6IYw5wUBnAJt3QAPpXgMcoIXaKmFZH1qe+fpZ0rFZz+c21dEQGE
//s6Jy6NjBOo6lSjV7yU9vApFkLm0y1sZ7aisHmAqjPTSVoaeOl4OKuWGJGP4dTe
ivvtUV6I/gHgMPkYd0rxO18vbvavR7izjk/FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUv3bmSowyJAonMaengV1/XxiNFj8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3YzYm1Tb3d5SkFvbk1h
ZW5nVjFfWHhpTkZqOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAVm1C7patKhcZUPkuZfYEh/HlEOlxs6+V
omKBDtZAOt0ZxxNmjnAmJGawsbpZje6dNMUoR7biL3UD1+W/bxlxR+qdGLHF/iRB
IjL66hp0OeSyRk8G1M7sdjO3rDNS83Jtq0GLuouHj1UxRrnT0sb2l/at2wtP7uXG
TPCTcxOF5sCs6fSr0CVTSi1tcQI1reHEYrV9ztNE9mMJmb+gWvU156CFp/fKzNyZ
qY7oBclA7BuRhZXdpZF5WWAWb29wXFwMg05ZnQl+rEYku/82BBEmxJS5vJnwx+MN
Rb21xsCVnrNNkT6kAueTzvY8qRmqf27achl2fE5UpG7yeynECJ++TA==
-----END CERTIFICATE-----
Generated at Sun May 18 05:46:13 2025 by rpki-client