Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zO5se39VQ5eOjKhJPoilJ2gWqqo.roa
File: zO5se39VQ5eOjKhJPoilJ2gWqqo.roa (raw, json)
Hash identifier: 8jasuXOFqzF+ePebWFhJ5/4AeQ1Exw12OWM9m0Ln1hU=
Subject key identifier: CC:EE:6C:7B:7F:55:43:97:8E:8C:A8:49:3E:88:A5:27:68:16:AA:AA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1410
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zO5se39VQ5eOjKhJPoilJ2gWqqo.roa
Signing time: Sat 13 Apr 2024 11:23:14 +0000
ROA not before: Sat 13 Apr 2024 11:23:14 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5136 (0x1410)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 11:23:14 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CCEE6C7B7F5543978E8CA8493E88A5276816AAAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:a4:2b:a0:85:44:1e:2e:6b:09:a3:b5:7c:
19:6b:6d:98:8d:0c:d5:e1:05:8e:3e:2d:52:3a:f0:
31:dd:eb:f6:20:61:91:d5:af:c1:58:6a:6e:bf:11:
fc:cd:da:8c:58:f9:de:0f:51:1b:1f:9f:4e:e8:56:
85:26:52:a1:77:d0:31:7e:16:85:da:ed:66:45:8f:
ab:d4:91:2e:53:bf:f6:7f:1d:71:11:12:e3:a0:5d:
21:2b:39:ed:31:a4:01:ad:ed:2f:8d:71:20:ff:2e:
ee:0a:ff:89:e7:54:0f:a8:53:fe:a3:4c:df:91:b5:
c3:89:28:87:c2:5c:42:5d:18:13:e3:49:58:82:46:
8f:f2:d6:e2:41:02:1a:33:73:d9:ac:ea:bf:be:db:
f8:39:f1:fd:06:81:81:a5:77:f6:dd:4b:47:3d:e3:
2c:36:84:6b:11:25:c6:ce:7e:5e:db:a0:3e:d5:e9:
3a:f4:d6:6d:79:08:84:32:3e:d1:f4:8f:f5:4c:60:
1e:3c:c3:d8:bb:5e:26:a8:b7:37:d9:4d:f5:70:e3:
71:4d:a7:97:00:0d:58:7a:6a:c4:49:32:8e:e3:6b:
1b:d4:f7:ba:b6:38:8d:44:68:6b:f9:d7:5a:a2:7f:
5b:71:77:b6:64:19:85:9f:fe:08:fd:ee:af:de:72:
93:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:EE:6C:7B:7F:55:43:97:8E:8C:A8:49:3E:88:A5:27:68:16:AA:AA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zO5se39VQ5eOjKhJPoilJ2gWqqo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6b:e8:56:5d:67:44:39:a0:9c:1d:d5:16:a5:be:31:a5:79:75:
6f:ee:18:05:51:ab:0c:5d:32:05:f5:c8:65:db:7b:f4:e7:96:
7b:2e:af:fa:f7:14:a4:f9:be:78:c3:c8:b8:f0:46:19:98:f7:
9c:f5:b7:37:84:e6:ab:ed:48:0e:59:1b:53:65:92:1d:55:3a:
1f:4d:d4:01:df:03:17:b0:48:8e:a6:8f:8b:36:ef:39:72:8f:
3e:1a:12:d5:03:94:75:da:0d:65:fc:a0:60:83:7e:40:f6:73:
fc:e7:b7:e1:9e:10:9c:d1:b5:2b:f1:10:3c:62:e4:ef:e3:01:
1b:95:ea:5f:41:74:83:59:3d:89:55:23:f1:e6:c2:e9:42:35:
80:ac:d8:ae:14:fd:f8:30:04:c4:6d:34:ea:67:12:44:ca:93:
dd:25:68:78:15:d1:77:23:51:3b:90:e0:d0:19:55:56:e1:f3:
09:45:fb:f1:bd:8a:3e:ce:1b:29:6c:5d:c7:9f:da:83:16:9e:
87:ec:d1:78:dd:e0:33:2a:51:f0:93:2e:b6:98:e6:80:1e:02:
2e:69:e2:bb:a9:60:fd:0a:9e:9f:f4:27:d5:f3:d6:75:18:af:
f7:c2:ea:19:c9:e9:d4:d1:be:aa:aa:77:a4:2c:2e:1c:ef:04:
85:5f:75:3d
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFBAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTMx
MTIzMTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKENDRUU2QzdCN0Y1NTQz
OTc4RThDQTg0OTNFODhBNTI3NjgxNkFBQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL6KQroIVEHi5rCaO1fBlrbZiNDNXhBY4+LVI68DHd6/YgYZHV
r8FYam6/EfzN2oxY+d4PURsfn07oVoUmUqF30DF+FoXa7WZFj6vUkS5Tv/Z/HXER
EuOgXSErOe0xpAGt7S+NcSD/Lu4K/4nnVA+oU/6jTN+RtcOJKIfCXEJdGBPjSViC
Ro/y1uJBAhozc9ms6r++2/g58f0GgYGld/bdS0c94yw2hGsRJcbOfl7boD7V6Tr0
1m15CIQyPtH0j/VMYB48w9i7XiaotzfZTfVw43FNp5cADVh6asRJMo7jaxvU97q2
OI1EaGv511qif1txd7ZkGYWf/gj97q/ecpPfAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUzO5se39VQ5eOjKhJPoilJ2gWqqowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3pPNXNlMzlWUTVlT2pL
aEpQb2lsSjJnV3Fxby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAa+hWXWdEOaCcHdUWpb4xpXl1b+4YBVGr
DF0yBfXIZdt79OeWey6v+vcUpPm+eMPIuPBGGZj3nPW3N4Tmq+1IDlkbU2WSHVU6
H03UAd8DF7BIjqaPizbvOXKPPhoS1QOUddoNZfygYIN+QPZz/Oe34Z4QnNG1K/EQ
PGLk7+MBG5XqX0F0g1k9iVUj8ebC6UI1gKzYrhT9+DAExG006mcSRMqT3SVoeBXR
dyNRO5Dg0BlVVuHzCUX78b2KPs4bKWxdx5/agxaeh+zReN3gMypR8JMutpjmgB4C
Lmniu6lg/Qqen/Qn1fPWdRiv98LqGcnp1NG+qqp3pCwuHO8EhV91PQ==
-----END CERTIFICATE-----
Generated at Sun May 18 05:39:46 2025 by rpki-client