Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7533xmY4Jd8h0-YTlYuqftUI9m0.roa
File: 7533xmY4Jd8h0-YTlYuqftUI9m0.roa (raw, json)
Hash identifier: lW6dTjW14Xdg1QvVYsIcEXHBAyks3Z4OOaqy+nJtOFo=
Subject key identifier: EF:9D:F7:C6:66:38:25:DF:21:D3:E6:13:95:8B:AA:7E:D5:08:F6:6D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C2A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7533xmY4Jd8h0-YTlYuqftUI9m0.roa
Signing time: Sun 05 May 2024 01:54:51 +0000
ROA not before: Sun 05 May 2024 01:54:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7210 (0x1c2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 01:54:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EF9DF7C6663825DF21D3E613958BAA7ED508F66D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:f7:d9:18:2f:23:ef:d4:96:67:c7:39:8e:
1d:17:8a:2a:3f:84:1c:c8:81:18:23:78:fa:52:52:
d0:05:a7:0d:b9:5e:7e:a8:11:11:6e:58:aa:d5:22:
c4:b6:52:e1:5b:f2:3d:88:94:58:27:73:ef:a8:9a:
c5:d7:62:55:a3:d0:05:4b:16:57:2a:04:52:b4:3d:
f8:cb:28:8b:3d:c2:58:30:10:c4:48:a4:ff:15:33:
05:bc:84:7f:2b:72:be:49:17:54:98:ad:3e:8e:4e:
bc:73:b4:17:96:f4:a4:c9:a9:b6:67:3d:37:e6:3c:
a3:cd:3f:fc:55:f8:2f:0e:85:1d:4f:3c:20:63:76:
6d:b1:e6:fc:6a:f7:25:4b:44:99:09:7c:87:f0:91:
fe:62:f4:7d:bf:8b:e8:7e:50:34:be:7e:21:a6:b1:
86:7f:4a:70:1f:9e:52:4e:08:7e:80:47:de:e3:a3:
ac:91:6c:7c:2c:85:23:2d:70:20:8e:6a:b4:3e:66:
fe:34:68:4c:77:4d:13:4e:7a:07:ab:2c:a6:a1:9a:
26:4a:b6:bd:1c:5b:bf:fb:c1:9c:90:8a:ed:31:de:
52:34:f4:70:da:f8:d9:62:e9:74:c6:53:0b:2c:fb:
1c:d4:ae:55:39:9a:07:05:b2:af:05:ef:3b:f8:a9:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:F7:C6:66:38:25:DF:21:D3:E6:13:95:8B:AA:7E:D5:08:F6:6D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7533xmY4Jd8h0-YTlYuqftUI9m0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
31:eb:f4:e0:a2:77:49:ae:02:81:74:69:1b:27:de:5e:7c:43:
cf:f8:87:d4:b0:7b:4c:c4:e8:04:f7:01:05:21:52:0c:df:e5:
da:23:0e:2f:1e:de:62:cc:89:f7:0b:54:66:b2:63:0c:99:f5:
22:1a:23:66:ec:3e:df:2a:7c:04:2d:02:aa:ea:5e:95:2a:9c:
14:09:f8:93:b6:7f:57:d6:d3:fc:2b:69:61:2d:ba:6e:97:90:
d0:0e:a4:20:52:c8:5e:cf:e7:af:7f:07:0d:ee:62:ec:35:91:
b4:76:21:49:4a:61:6e:c7:93:49:65:6f:6d:71:a8:18:55:00:
5a:c4:cf:bd:a0:23:cb:21:b1:36:f5:6f:fe:30:bd:ab:f8:29:
7a:aa:cf:df:b1:c6:c8:a7:ab:19:de:33:52:6a:33:74:0e:e5:
e4:7c:63:1e:5d:a0:13:33:d6:20:71:e1:ba:e0:45:31:3d:cf:
cd:d8:f7:3a:41:de:2b:a7:ba:de:8a:7b:58:bb:ef:fc:bf:12:
42:9b:de:4b:2b:8f:b4:ec:2b:93:d4:cb:88:16:80:c1:1e:d8:
57:b5:20:e5:e7:10:b3:07:72:f6:22:ae:66:28:35:1d:75:52:
84:ef:54:18:c0:f9:b0:e3:08:87:93:2c:8a:11:db:07:b5:de:
b9:ba:e9:d9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUw
MTU0NTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVGOURGN0M2NjYzODI1
REYyMUQzRTYxMzk1OEJBQTdFRDUwOEY2NkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnaPfZGC8j79SWZ8c5jh0Xiio/hBzIgRgjePpSUtAFpw25Xn6o
ERFuWKrVIsS2UuFb8j2IlFgnc++omsXXYlWj0AVLFlcqBFK0PfjLKIs9wlgwEMRI
pP8VMwW8hH8rcr5JF1SYrT6OTrxztBeW9KTJqbZnPTfmPKPNP/xV+C8OhR1PPCBj
dm2x5vxq9yVLRJkJfIfwkf5i9H2/i+h+UDS+fiGmsYZ/SnAfnlJOCH6AR97jo6yR
bHwshSMtcCCOarQ+Zv40aEx3TRNOegerLKahmiZKtr0cW7/7wZyQiu0x3lI09HDa
+Nli6XTGUwss+xzUrlU5mgcFsq8F7zv4qfxlAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU7533xmY4Jd8h0+YTlYuqftUI9m0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzc1MzN4bVk0SmQ4aDAt
WVRsWXVxZnRVSTltMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAMev04KJ3Sa4CgXRpGyfeXnxDz/iH1LB7
TMToBPcBBSFSDN/l2iMOLx7eYsyJ9wtUZrJjDJn1IhojZuw+3yp8BC0CqupelSqc
FAn4k7Z/V9bT/CtpYS26bpeQ0A6kIFLIXs/nr38HDe5i7DWRtHYhSUphbseTSWVv
bXGoGFUAWsTPvaAjyyGxNvVv/jC9q/gpeqrP37HGyKerGd4zUmozdA7l5HxjHl2g
EzPWIHHhuuBFMT3Pzdj3OkHeK6e63op7WLvv/L8SQpveSyuPtOwrk9TLiBaAwR7Y
V7Ug5ecQswdy9iKuZig1HXVShO9UGMD5sOMIh5MsihHbB7Xeubrp2Q==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:18 2025 by rpki-client