Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ySFCQDAAmIC_i0afch7_-lugtPQ.roa
File: ySFCQDAAmIC_i0afch7_-lugtPQ.roa (raw, json)
Hash identifier: IYGgIG+N02UTXbyVtPs9Mkg8b4Z7keCwWMPu8Y4i0IA=
Subject key identifier: C9:21:42:40:30:00:98:80:BF:8B:46:9F:72:1E:FF:FA:5B:A0:B4:F4
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 100A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ySFCQDAAmIC_i0afch7_-lugtPQ.roa
Signing time: Tue 02 Apr 2024 17:53:32 +0000
ROA not before: Tue 02 Apr 2024 17:53:32 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4106 (0x100a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 2 17:53:32 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C921424030009880BF8B469F721EFFFA5BA0B4F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:f5:88:8d:4f:a0:5c:80:b1:e4:7d:00:f3:
ce:35:26:18:87:32:08:c3:b9:f8:65:0d:44:2e:41:
7a:06:60:f2:12:d9:c6:8e:90:7a:f6:74:39:55:b6:
f9:a0:09:b9:23:04:48:5d:ba:8c:af:9a:63:3d:eb:
2c:7a:f7:13:5c:e7:95:de:67:fc:29:28:10:3c:69:
a1:9c:4c:ff:89:cd:02:c1:4b:52:51:37:19:d2:a6:
47:30:77:9c:12:4e:a8:ac:ee:a8:46:13:42:ed:af:
33:7f:f7:13:37:29:84:d7:ab:9f:6a:b5:3f:77:79:
e6:af:ff:63:1c:92:b9:ec:96:09:4d:c1:07:b2:01:
53:cc:8c:88:ef:0e:cd:b0:7b:81:72:d7:a6:82:cd:
b3:6c:10:1f:c6:ac:5b:49:6c:93:67:49:fa:b5:ac:
6b:f3:63:76:ac:3b:1a:d0:d5:8e:39:bc:b5:ab:81:
03:f4:ce:08:24:51:25:6b:4e:95:11:73:26:0e:9a:
0b:cd:62:f2:88:03:c2:8c:52:29:1c:32:d7:2c:48:
3c:b5:c3:8c:19:be:06:ec:59:da:0a:c9:96:5e:6e:
17:fd:d2:70:88:e2:a3:32:3f:74:84:1a:e7:cf:ec:
5c:22:8a:35:91:24:63:d4:a6:75:0f:36:32:f2:e5:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:42:40:30:00:98:80:BF:8B:46:9F:72:1E:FF:FA:5B:A0:B4:F4
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ySFCQDAAmIC_i0afch7_-lugtPQ.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:a7:6a:0b:32:8b:bd:8c:d7:5d:58:a7:80:64:ce:df:12:ef:
bd:4f:ad:62:99:57:35:3d:8c:4c:71:45:1d:f1:cc:cd:cd:68:
12:1a:04:bd:79:35:fb:30:6c:3a:92:fe:f0:11:13:a7:e0:b4:
fd:b7:5b:2c:ce:15:a9:3f:b4:c2:5d:78:50:69:5e:44:e7:db:
b5:c1:69:4b:02:35:1a:d7:3c:f7:ee:74:17:c7:78:59:1c:e8:
df:0a:18:2f:68:22:16:a1:a7:e6:27:55:60:b0:9a:14:83:d6:
13:eb:80:b7:54:b4:ba:b1:fc:ae:d5:c0:57:48:7d:29:70:93:
57:5f:cc:f5:18:00:f3:15:9f:6f:29:9e:41:e7:c0:bb:1c:aa:
21:a6:b6:b9:c5:52:f3:8f:94:93:8e:1c:01:3e:d1:f6:83:ee:
10:c1:07:24:99:f5:34:c4:a4:87:e2:ad:8a:0d:07:31:2e:b2:
5c:64:4f:ae:11:d0:5d:f4:ee:bc:51:e0:eb:2e:f3:f2:75:dd:
97:c5:b7:33:10:b6:83:75:1b:c9:59:21:6f:e1:8b:5e:7d:46:
c9:39:8d:43:81:8b:2a:81:34:c5:d7:74:ed:9a:86:d4:7e:d0:
2f:cb:f5:c3:f4:c4:3c:2a:c9:12:b2:38:42:db:b7:bf:a4:1b:
10:53:6a:17
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEAowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDIx
NzUzMzJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEM5MjE0MjQwMzAwMDk4
ODBCRjhCNDY5RjcyMUVGRkZBNUJBMEI0RjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfsvWIjU+gXICx5H0A8841JhiHMgjDufhlDUQuQXoGYPIS2caO
kHr2dDlVtvmgCbkjBEhduoyvmmM96yx69xNc55XeZ/wpKBA8aaGcTP+JzQLBS1JR
NxnSpkcwd5wSTqis7qhGE0LtrzN/9xM3KYTXq59qtT93eeav/2MckrnslglNwQey
AVPMjIjvDs2we4Fy16aCzbNsEB/GrFtJbJNnSfq1rGvzY3asOxrQ1Y45vLWrgQP0
zggkUSVrTpURcyYOmgvNYvKIA8KMUikcMtcsSDy1w4wZvgbsWdoKyZZebhf90nCI
4qMyP3SEGufP7FwiijWRJGPUpnUPNjLy5T8FAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUySFCQDAAmIC/i0afch7/+lugtPQwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3lTRkNRREFBbUlDX2kw
YWZjaDdfLWx1Z3RQUS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEADKdqCzKLvYzXXVingGTO3xLvvU+tYplX
NT2MTHFFHfHMzc1oEhoEvXk1+zBsOpL+8BETp+C0/bdbLM4VqT+0wl14UGleROfb
tcFpSwI1Gtc89+50F8d4WRzo3woYL2giFqGn5idVYLCaFIPWE+uAt1S0urH8rtXA
V0h9KXCTV1/M9RgA8xWfbymeQefAuxyqIaa2ucVS84+Uk44cAT7R9oPuEMEHJJn1
NMSkh+Ktig0HMS6yXGRPrhHQXfTuvFHg6y7z8nXdl8W3MxC2g3UbyVkhb+GLXn1G
yTmNQ4GLKoE0xdd07ZqG1H7QL8v1w/TEPCrJErI4Qtu3v6QbEFNqFw==
-----END CERTIFICATE-----
Generated at Sun May 18 04:47:59 2025 by rpki-client