Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zxmjp6PP2P-blDq7MVxfkI0NCyY.roa
File: zxmjp6PP2P-blDq7MVxfkI0NCyY.roa (raw, json)
Hash identifier: XHkTLEnaknS2mw6IdzGUdqw9loeA56//77GRa40TAKc=
Subject key identifier: CF:19:A3:A7:A3:CF:D8:FF:9B:94:3A:BB:31:5C:5F:90:8D:0D:0B:26
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1AFC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zxmjp6PP2P-blDq7MVxfkI0NCyY.roa
Signing time: Wed 01 May 2024 22:24:05 +0000
ROA not before: Wed 01 May 2024 22:24:05 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6908 (0x1afc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 1 22:24:05 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=CF19A3A7A3CFD8FF9B943ABB315C5F908D0D0B26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:dd:6f:ab:60:ab:05:b6:a4:6f:fb:e9:d4:6c:
23:c2:fa:76:29:c1:c5:db:21:65:43:a5:f1:a4:9c:
ef:aa:1d:e0:8e:63:ad:34:37:4f:7c:63:b3:18:c6:
4e:3f:89:10:23:ed:8a:9e:82:aa:bc:23:57:7e:de:
15:58:20:a6:24:00:f7:7d:29:99:b3:5f:c8:f8:ea:
0c:a3:16:7e:9f:a1:3d:67:d8:9c:42:e7:20:ec:14:
6e:0b:21:9d:b0:b0:ce:66:f5:c3:9c:69:d1:39:f9:
18:5a:c7:05:fe:01:fb:5c:de:07:25:5e:ab:4c:51:
d2:de:15:01:d0:7d:5e:41:2c:ef:ce:40:32:24:58:
29:ca:81:24:1e:bd:9b:81:94:3f:f0:72:27:b2:99:
77:2d:3c:08:28:56:4c:e4:a1:50:86:87:da:d2:d3:
3e:21:1c:eb:70:aa:de:6e:ee:35:b5:a8:f8:76:27:
8c:61:7a:b2:26:1f:e5:cf:cf:02:26:08:55:29:da:
15:2f:6e:98:6b:74:14:ee:d8:8e:66:b5:b5:75:1b:
47:b1:cd:3b:38:c2:6e:f7:fc:a6:9c:4b:7f:e9:b6:
0a:00:2b:ac:49:89:45:8e:61:fa:20:19:c0:a4:26:
f3:6b:48:df:99:b4:a8:a5:a1:6c:f4:3f:c5:46:24:
08:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:19:A3:A7:A3:CF:D8:FF:9B:94:3A:BB:31:5C:5F:90:8D:0D:0B:26
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zxmjp6PP2P-blDq7MVxfkI0NCyY.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:e5:c2:28:05:e2:36:08:95:8b:6c:07:2d:32:e8:e5:02:29:
7a:98:32:2b:d2:e1:53:68:e0:fe:eb:66:c9:69:c8:4f:02:10:
ee:92:84:25:cd:49:5c:32:ca:c3:55:e0:4b:40:1f:98:7e:03:
09:6e:07:71:3c:49:02:1e:d2:fb:5e:94:7d:c4:75:05:9c:a2:
82:68:ae:07:1d:d2:34:35:10:8e:66:d5:cb:52:ae:0e:4a:85:
2c:9f:34:d0:3f:79:27:5b:3c:69:0f:88:46:f5:e6:64:0f:b8:
a6:9d:7b:18:26:eb:d3:6d:18:9a:73:0f:68:ab:69:e9:40:5f:
3a:01:0f:9b:c2:15:74:20:2e:a7:78:ac:48:a4:b6:d5:80:57:
88:f4:50:aa:47:e0:1f:62:a0:ca:1a:8d:d0:c8:ab:35:20:bf:
f2:fd:22:33:3e:42:75:69:dc:b4:64:f1:a3:da:23:e8:e6:d3:
b3:99:7f:75:b2:04:9b:cb:d2:25:8a:0d:13:d7:45:7a:68:57:
c5:1d:35:0f:a9:a3:14:03:1a:69:ef:62:ae:80:15:20:d4:e6:
1a:a7:b0:be:65:6c:6f:a1:f9:20:f6:81:11:04:ae:14:8f:2c:
9f:22:65:b8:3d:c5:98:b3:13:87:ca:ff:25:f3:01:67:83:7a:
49:90:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:38:26 2025 by rpki-client