Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/-1DJeWjeDa90kvF3mApiEi0mnBM.roa
File: -1DJeWjeDa90kvF3mApiEi0mnBM.roa (raw, json)
Hash identifier: lHzafOg+Xkz9VRwHpjq29vkGs1QkeTPkzRDRkc4RZHE=
Subject key identifier: FB:50:C9:79:68:DE:0D:AF:74:92:F1:77:98:0A:62:12:2D:26:9C:13
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1D06
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-1DJeWjeDa90kvF3mApiEi0mnBM.roa
Signing time: Tue 07 May 2024 08:54:19 +0000
ROA not before: Tue 07 May 2024 08:54:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7430 (0x1d06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 7 08:54:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FB50C97968DE0DAF7492F177980A62122D269C13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:7b:32:2d:44:e6:24:0d:38:1e:06:2a:7c:
df:9c:db:f1:6d:82:10:3b:50:f3:20:89:1d:00:d2:
d5:7c:55:41:86:9f:75:d1:fc:66:cc:61:04:4c:a7:
01:39:42:45:15:da:f3:d9:56:2f:db:64:af:e8:7b:
88:30:8c:3c:1d:4e:37:c7:f1:ef:a9:1c:99:8c:39:
e8:0c:82:c9:dc:97:f8:ee:83:9a:8e:8d:31:9d:5b:
8f:11:7a:0b:05:0d:9b:6d:08:a5:63:85:2b:c3:c6:
ab:d9:5c:fd:c0:05:ee:ff:49:57:ce:fb:d1:92:9e:
16:a2:5c:3b:af:78:ff:59:8e:17:ad:be:0c:cc:7c:
62:4d:3a:99:ff:c5:51:61:b6:ac:62:ac:d0:90:1f:
43:d2:5f:71:d3:0b:f0:74:ba:5b:bf:1b:a4:e2:f2:
ab:d7:49:12:b5:c7:ce:ae:90:99:a3:30:fa:81:c5:
5f:13:47:f1:a8:a5:42:1e:e1:4f:b5:0a:7c:4e:50:
74:12:b1:f2:52:8b:2f:b5:75:51:36:a0:ba:2d:36:
4d:7d:99:48:80:d7:03:cb:09:56:af:7a:52:e9:8e:
a4:d2:0d:61:1b:5b:63:84:bb:b3:25:4c:94:ba:8c:
b3:2e:69:05:31:a2:96:0b:bf:a0:61:35:35:79:0a:
ab:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:50:C9:79:68:DE:0D:AF:74:92:F1:77:98:0A:62:12:2D:26:9C:13
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/-1DJeWjeDa90kvF3mApiEi0mnBM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:6c:81:ae:38:74:8a:7f:75:e7:22:88:0d:2e:40:d6:b9:88:
ff:e9:01:c6:53:cc:e6:34:7e:95:9d:b7:b5:ff:d1:4f:37:b1:
4c:c7:af:6e:fb:9e:04:79:37:d8:40:32:42:41:37:11:40:7a:
28:9d:69:1d:b6:f6:fb:50:08:fc:b4:e3:3e:fc:5a:ae:2c:67:
6c:ca:ce:ec:c6:79:bc:0e:1c:9b:e3:7a:4c:4b:d0:4b:25:67:
bd:f5:1c:b9:44:54:e0:42:47:2b:59:c5:af:87:87:d6:6b:e3:
39:7b:60:dd:89:06:3e:6a:df:23:1e:82:5c:6d:e9:b2:ea:1c:
25:d2:3d:d2:95:b0:80:95:df:49:f6:2a:91:89:a1:08:4e:23:
57:96:35:63:7f:f7:2e:af:79:23:8a:1e:c4:ea:b3:d4:3c:c7:
16:7d:93:85:79:19:4d:c7:b9:70:a9:a7:9a:31:f2:7a:2e:68:
5e:c9:04:35:e3:a3:b7:7a:e6:2f:a2:6c:02:5f:00:7a:b9:7a:
65:55:71:01:48:19:8a:b4:32:15:76:8b:0b:eb:e3:1a:e4:3d:
b5:ab:7e:2f:24:45:01:9e:d5:6e:6d:93:a2:09:2b:bd:fd:09:
63:ec:1c:b1:db:9d:5a:5b:55:40:bd:a8:fe:66:6a:c9:2e:a4:
95:e0:b7:71
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHQYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDcw
ODU0MTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEZCNTBDOTc5NjhERTBE
QUY3NDkyRjE3Nzk4MEE2MjEyMkQyNjlDMTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0lXsyLUTmJA04HgYqfN+c2/FtghA7UPMgiR0A0tV8VUGGn3XR
/GbMYQRMpwE5QkUV2vPZVi/bZK/oe4gwjDwdTjfH8e+pHJmMOegMgsncl/jug5qO
jTGdW48RegsFDZttCKVjhSvDxqvZXP3ABe7/SVfO+9GSnhaiXDuveP9ZjhetvgzM
fGJNOpn/xVFhtqxirNCQH0PSX3HTC/B0ulu/G6Ti8qvXSRK1x86ukJmjMPqBxV8T
R/GopUIe4U+1CnxOUHQSsfJSiy+1dVE2oLotNk19mUiA1wPLCVavelLpjqTSDWEb
W2OEu7MlTJS6jLMuaQUxopYLv6BhNTV5CqtLAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU+1DJeWjeDa90kvF3mApiEi0mnBMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLy0xREplV2plRGE5MGt2
RjNtQXBpRWkwbW5CTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAlGyBrjh0in915yKIDS5A1rmI/+kBxlPM
5jR+lZ23tf/RTzexTMevbvueBHk32EAyQkE3EUB6KJ1pHbb2+1AI/LTjPvxarixn
bMrO7MZ5vA4cm+N6TEvQSyVnvfUcuURU4EJHK1nFr4eH1mvjOXtg3YkGPmrfIx6C
XG3psuocJdI90pWwgJXfSfYqkYmhCE4jV5Y1Y3/3Lq95I4oexOqz1DzHFn2ThXkZ
Tce5cKmnmjHyei5oXskENeOjt3rmL6JsAl8Aerl6ZVVxAUgZirQyFXaLC+vjGuQ9
tat+LyRFAZ7Vbm2Togkrvf0JY+wcsdudWltVQL2o/mZqyS6kleC3cQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:39:25 2025 by rpki-client