Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7DyJEIYBajaiDc59LmqVk1eV9bE.roa
File: 7DyJEIYBajaiDc59LmqVk1eV9bE.roa (raw, json)
Hash identifier: /texrgPSLt/jcFHSoALzHevVFzceMY0nRKLiMJZ1t94=
Subject key identifier: EC:3C:89:10:86:01:6A:36:A2:0D:CE:7D:2E:6A:95:93:57:95:F5:B1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C26
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7DyJEIYBajaiDc59LmqVk1eV9bE.roa
Signing time: Sun 05 May 2024 00:54:25 +0000
ROA not before: Sun 05 May 2024 00:54:25 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7206 (0x1c26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 00:54:25 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EC3C891086016A36A20DCE7D2E6A95935795F5B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:af:fe:23:09:53:26:ba:1f:b3:91:7c:c0:
64:f8:65:75:00:7b:7e:24:96:53:42:18:20:65:6f:
1b:c2:03:16:95:10:37:b6:d5:63:ca:81:b2:55:64:
93:54:69:cc:a0:30:47:d0:4b:38:4f:66:c6:0d:ff:
f9:dc:e4:f8:0d:2b:c3:cf:3f:97:08:b9:a1:2f:ef:
9b:88:e4:ce:e6:b8:9d:0f:6b:b0:20:ab:c8:20:c5:
52:44:ee:5e:7d:32:6f:c6:53:1e:a6:f5:a8:37:e8:
43:62:86:68:0a:20:28:59:38:52:ad:52:b6:4c:cf:
8e:8e:93:06:9e:e8:cc:c6:50:7d:e4:0b:80:12:e1:
87:bf:46:95:e5:c8:0a:84:af:40:31:d5:be:59:5a:
68:61:31:de:ba:8f:4a:38:0f:71:d9:ca:08:fa:84:
08:49:a3:90:bb:1e:31:88:b8:37:95:9f:8f:b1:75:
2f:57:32:b6:6f:57:8a:9e:9b:0c:5f:1b:12:a3:21:
1f:85:69:8f:dc:d6:23:e4:da:9e:15:62:52:e3:f3:
82:fe:d1:8f:ed:dc:fc:77:4d:a3:10:be:a0:5b:55:
66:fc:34:7a:b6:b7:16:a3:fd:42:ab:c3:76:24:11:
82:b2:7e:a3:86:38:43:82:99:e9:80:fa:a5:ce:ea:
87:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:89:10:86:01:6A:36:A2:0D:CE:7D:2E:6A:95:93:57:95:F5:B1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7DyJEIYBajaiDc59LmqVk1eV9bE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:4b:34:c3:ef:ba:b5:3e:20:1b:c0:55:ec:12:8f:dd:37:96:
96:55:7e:90:d8:49:d9:2f:53:95:59:b0:8f:a7:28:4f:b1:99:
aa:de:38:1d:c1:eb:6b:db:06:ec:10:cc:7e:f8:87:37:ac:a9:
b6:0b:cc:2d:85:9e:f8:e0:39:a4:6a:1d:f1:70:53:76:96:ab:
87:54:b7:e5:c5:5e:76:e2:5c:09:07:f4:bc:60:28:e6:5f:9a:
60:6e:12:ee:54:28:49:0d:78:bf:52:d6:88:d5:b4:7b:db:05:
43:a5:ce:7c:65:68:d7:79:be:80:55:24:9a:da:b0:36:5c:02:
d1:e4:bb:ae:f5:17:c0:c1:72:14:58:33:3e:40:2c:a0:5b:b7:
be:ed:e2:df:31:34:b8:ff:af:cf:ae:99:93:a4:33:23:d1:a2:
51:87:e5:a5:4a:91:4c:55:47:ee:df:6c:77:62:cc:90:c1:6c:
8e:25:0e:f6:e9:c8:59:b8:5a:f1:47:68:5a:c5:02:2f:93:32:
28:36:cc:a8:70:95:03:32:11:1f:37:5e:17:b5:56:6e:b2:f8:
2c:bb:5b:89:c8:31:33:fa:2d:8d:bf:28:2b:2c:aa:7b:95:2f:
ef:c0:1b:30:f5:21:0e:da:68:2e:2c:2b:3d:f0:49:d2:b1:c4:
06:09:fc:42
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICHCYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA1MDUw
MDU0MjVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEVDM0M4OTEwODYwMTZB
MzZBMjBEQ0U3RDJFNkE5NTkzNTc5NUY1QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+XK/+IwlTJrofs5F8wGT4ZXUAe34kllNCGCBlbxvCAxaVEDe2
1WPKgbJVZJNUacygMEfQSzhPZsYN//nc5PgNK8PPP5cIuaEv75uI5M7muJ0Pa7Ag
q8ggxVJE7l59Mm/GUx6m9ag36ENihmgKIChZOFKtUrZMz46Okwae6MzGUH3kC4AS
4Ye/RpXlyAqEr0Ax1b5ZWmhhMd66j0o4D3HZygj6hAhJo5C7HjGIuDeVn4+xdS9X
MrZvV4qemwxfGxKjIR+FaY/c1iPk2p4VYlLj84L+0Y/t3Px3TaMQvqBbVWb8NHq2
txaj/UKrw3YkEYKyfqOGOEOCmemA+qXO6oetAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU7DyJEIYBajaiDc59LmqVk1eV9bEwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzdEeUpFSVlCYWphaURj
NTlMbXFWazFlVjliRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAI0s0w++6tT4gG8BV7BKP3TeWllV+kNhJ
2S9TlVmwj6coT7GZqt44HcHra9sG7BDMfviHN6yptgvMLYWe+OA5pGod8XBTdpar
h1S35cVeduJcCQf0vGAo5l+aYG4S7lQoSQ14v1LWiNW0e9sFQ6XOfGVo13m+gFUk
mtqwNlwC0eS7rvUXwMFyFFgzPkAsoFu3vu3i3zE0uP+vz66Zk6QzI9GiUYflpUqR
TFVH7t9sd2LMkMFsjiUO9unIWbha8UdoWsUCL5MyKDbMqHCVAzIRHzdeF7VWbrL4
LLtbicgxM/otjb8oKyyqe5Uv78AbMPUhDtpoLiwrPfBJ0rHEBgn8Qg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:42 2025 by rpki-client