Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/4Gav6H2sHw2urkCeSmJm0soal64.roa
File: 4Gav6H2sHw2urkCeSmJm0soal64.roa (raw, json)
Hash identifier: b9zp3GhFIMM3kPcgp1AbpOcJmF43CESsoROsdBP5yHw=
Subject key identifier: E0:66:AF:E8:7D:AC:1F:0D:AE:AE:40:9E:4A:62:66:D2:CA:1A:97:AE
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 186C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4Gav6H2sHw2urkCeSmJm0soal64.roa
Signing time: Thu 25 Apr 2024 02:23:42 +0000
ROA not before: Thu 25 Apr 2024 02:23:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6252 (0x186c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 25 02:23:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=E066AFE87DAC1F0DAEAE409E4A6266D2CA1A97AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:08:f9:8c:88:37:d2:76:35:b3:48:e3:94:
ad:61:1d:d1:d7:87:ad:cd:67:58:94:0d:ea:c8:b1:
23:dc:6f:a5:be:9e:4f:30:dd:46:c9:0c:58:33:36:
63:b0:9a:da:aa:ab:59:7f:94:94:19:0e:4a:6b:5f:
39:c5:1b:3b:a5:fa:8c:1b:d6:40:59:9c:a8:7a:90:
71:a6:92:54:03:07:60:d0:45:bd:93:ab:1d:c3:ed:
89:34:b1:38:9a:d1:c2:17:1c:cc:ae:2e:2e:79:37:
51:47:29:91:41:ec:97:ac:09:20:4d:0d:29:30:15:
b7:50:b2:3c:69:63:c6:a4:d8:62:20:e1:78:21:75:
09:08:1d:9c:db:d1:89:6c:40:2a:4c:c0:01:bc:b9:
08:db:ea:ca:ec:9a:78:5b:6e:a8:13:5c:76:5f:74:
c2:9a:98:73:6f:e7:38:72:ff:0a:39:85:b2:95:be:
7d:e3:df:bd:1f:ae:d3:8e:77:9a:af:93:ae:1e:69:
50:c6:7c:22:05:b1:a1:c5:72:6e:17:4a:83:33:b6:
e9:8f:6f:14:b9:76:b9:64:80:78:8d:51:0b:e4:a9:
ad:b7:1b:ef:18:13:c4:da:bf:1c:ae:20:cf:c2:81:
38:22:25:cc:ec:b1:a5:b0:b7:64:f5:a3:97:dd:84:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:66:AF:E8:7D:AC:1F:0D:AE:AE:40:9E:4A:62:66:D2:CA:1A:97:AE
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/4Gav6H2sHw2urkCeSmJm0soal64.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c4:29:ed:de:ae:1d:f2:48:36:6a:54:27:e8:85:45:30:b7:3b:
a3:43:ea:c0:37:fa:23:01:8d:53:9b:10:99:f2:16:13:8c:3e:
5b:52:d5:e6:00:9a:6e:22:1d:51:f5:c7:8f:d2:08:f8:e3:41:
17:6b:3f:83:69:63:40:5a:ae:a4:bf:39:49:17:f0:03:c0:f7:
85:00:de:6c:b4:00:c0:24:57:0f:31:53:90:ae:7a:7e:01:37:
91:05:99:e3:61:37:f1:8c:c2:69:b7:f3:d6:8e:f7:f2:c1:b4:
4f:25:59:3f:5e:2e:58:ba:42:83:78:cc:da:4a:f2:11:de:a2:
0f:a1:d9:68:30:17:3a:2b:58:e1:e8:6d:5c:b6:af:42:b8:c0:
ef:ae:7f:3a:59:92:bc:67:36:22:0a:fe:b7:63:23:5b:08:ea:
e4:a9:51:f4:b0:38:22:ad:21:18:cf:a6:d9:67:b5:ee:16:90:
7d:44:62:5f:c9:d9:ba:d1:86:48:c7:a6:93:7f:d1:bb:c3:1e:
0b:a2:19:7f:33:b0:03:e6:a2:a4:82:d8:75:62:a5:c3:2c:7b:
f3:b9:31:a6:04:b6:97:39:ab:ea:7b:b7:e8:1e:00:9d:2f:81:
66:b3:bb:bb:47:17:8d:2d:66:34:7d:5e:32:ac:2f:39:f3:8f:
86:b0:ad:bc
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGGwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjUw
MjIzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEUwNjZBRkU4N0RBQzFG
MERBRUFFNDA5RTRBNjI2NkQyQ0ExQTk3QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpZAj5jIg30nY1s0jjlK1hHdHXh63NZ1iUDerIsSPcb6W+nk8w
3UbJDFgzNmOwmtqqq1l/lJQZDkprXznFGzul+owb1kBZnKh6kHGmklQDB2DQRb2T
qx3D7Yk0sTia0cIXHMyuLi55N1FHKZFB7JesCSBNDSkwFbdQsjxpY8ak2GIg4Xgh
dQkIHZzb0YlsQCpMwAG8uQjb6srsmnhbbqgTXHZfdMKamHNv5zhy/wo5hbKVvn3j
370frtOOd5qvk64eaVDGfCIFsaHFcm4XSoMztumPbxS5drlkgHiNUQvkqa23G+8Y
E8TavxyuIM/CgTgiJczssaWwt2T1o5fdhBGTAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU4Gav6H2sHw2urkCeSmJm0soal64wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzRHYXY2SDJzSHcydXJr
Q2VTbUptMHNvYWw2NC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAxCnt3q4d8kg2alQn6IVFMLc7o0PqwDf6
IwGNU5sQmfIWE4w+W1LV5gCabiIdUfXHj9II+ONBF2s/g2ljQFqupL85SRfwA8D3
hQDebLQAwCRXDzFTkK56fgE3kQWZ42E38YzCabfz1o738sG0TyVZP14uWLpCg3jM
2kryEd6iD6HZaDAXOitY4ehtXLavQrjA765/OlmSvGc2Igr+t2MjWwjq5KlR9LA4
Iq0hGM+m2We17haQfURiX8nZutGGSMemk3/Ru8MeC6IZfzOwA+aipILYdWKlwyx7
87kxpgS2lzmr6nu36B4AnS+BZrO7u0cXjS1mNH1eMqwvOfOPhrCtvA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:07:58 2025 by rpki-client