Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zfdlIFvirjSkqz42qEV-msfz0M8.roa
File: zfdlIFvirjSkqz42qEV-msfz0M8.roa (raw, json)
Hash identifier: YB6hUk4tbXHLPRI44GJ4m6eDLoHJNLfH0/prrgT71lw=
Subject key identifier: CD:F7:65:20:5B:E2:AE:34:A4:AB:3E:36:A8:45:7E:9A:C7:F3:D0:CF
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1B76
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zfdlIFvirjSkqz42qEV-msfz0M8.roa
Signing time: Fri 03 May 2024 04:54:09 +0000
ROA not before: Fri 03 May 2024 04:54:09 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7030 (0x1b76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 3 04:54:09 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CDF765205BE2AE34A4AB3E36A8457E9AC7F3D0CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:94:f8:24:40:a0:16:1e:1d:3f:4e:68:08:
6e:e3:f4:8b:c5:8c:f9:63:db:b2:ab:43:d6:df:53:
09:ef:2c:bf:48:3c:ec:53:67:4f:e9:51:40:33:43:
f7:2a:ba:fd:7e:c9:4f:b0:49:85:e6:eb:e0:9b:88:
cf:bc:cb:40:9d:f3:e1:24:bf:a1:ba:11:82:c1:db:
c3:89:3e:c6:31:34:a7:32:06:10:a5:ca:f3:53:cf:
05:22:1d:bf:72:fd:39:7d:bb:2f:f3:58:aa:05:32:
af:b7:7e:3b:76:03:f2:a1:d3:03:9f:40:8c:09:c1:
bd:36:b3:95:22:76:f4:af:9f:59:6d:55:db:67:da:
38:6e:98:c2:ea:7d:01:48:21:37:43:9d:a7:b5:1f:
8c:a0:65:69:10:53:7a:ac:e1:ac:e5:eb:87:5f:3a:
df:5c:f4:76:80:40:75:4d:64:85:fa:b5:c3:5b:53:
14:92:2c:d8:5d:56:5a:d8:c6:00:43:55:0b:94:40:
ef:76:ce:c2:15:86:a6:81:40:f1:3c:c8:3c:6c:40:
a3:ac:6f:f4:c8:07:f7:b1:c9:69:80:ea:ce:a4:f8:
3a:f4:73:e1:7c:5c:c6:23:ed:4e:5b:ac:91:c6:01:
95:57:f4:bb:a2:0e:2d:be:f1:e7:de:1d:d1:97:6c:
a2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F7:65:20:5B:E2:AE:34:A4:AB:3E:36:A8:45:7E:9A:C7:F3:D0:CF
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zfdlIFvirjSkqz42qEV-msfz0M8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:76:0a:73:c6:13:92:57:a3:c8:98:84:b6:84:42:74:16:9f:
03:f9:41:51:ec:48:f1:cb:e2:5c:a2:47:9e:54:a3:fc:aa:64:
9a:7e:ed:5f:be:83:63:58:85:4d:a4:1e:c4:23:ed:76:34:f1:
e9:ff:b7:07:66:cb:05:0f:0e:71:8a:64:37:3a:e6:5b:fc:e1:
a3:fe:34:2d:5b:8d:f6:7a:cf:79:2c:95:8b:0d:61:fe:ab:cb:
71:fe:cb:fc:66:85:2f:db:94:bc:02:f0:f7:1b:e4:ca:e1:da:
e2:2a:c3:b1:9b:f9:20:41:aa:7b:58:ca:a7:08:b2:2c:d5:2a:
58:67:86:d5:ff:26:55:d4:34:ef:19:cf:73:16:3b:d6:6f:da:
33:15:20:43:1a:eb:5e:cd:94:51:7c:08:da:ae:74:b8:b1:48:
ef:d7:f3:55:1b:16:62:a1:93:c6:49:2a:2e:a0:4e:b5:2a:0c:
a9:77:9b:ee:0e:6e:6a:78:2a:6a:c8:cd:3e:c2:b0:f7:80:27:
c6:ca:22:50:8c:f7:04:0a:31:d7:29:e3:d7:76:d3:6c:1f:b2:
91:9b:38:9f:e6:87:2a:1d:29:fc:a7:67:6e:0e:fc:bf:74:4a:
fa:7b:51:24:6f:2b:bf:8c:4a:a2:d7:ec:bf:54:53:6a:ed:87:
89:b1:f5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 11:34:08 2025 by rpki-client