Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Fdd9tAW7c4tpXBrd81AMduBcR_0.roa
File: Fdd9tAW7c4tpXBrd81AMduBcR_0.roa (raw, json)
Hash identifier: UtlTllMfwSmEX7tB+ak91V2og6YGPp3mdiLeieq8T/4=
Subject key identifier: 15:D7:7D:B4:05:BB:73:8B:69:5C:1A:DD:F3:50:0C:76:E0:5C:47:FD
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 146E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fdd9tAW7c4tpXBrd81AMduBcR_0.roa
Signing time: Sun 14 Apr 2024 10:54:11 +0000
ROA not before: Sun 14 Apr 2024 10:54:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5230 (0x146e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 10:54:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=15D77DB405BB738B695C1ADDF3500C76E05C47FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ea:78:5c:51:3b:ff:91:29:88:eb:37:a4:28:
80:3a:e3:73:2c:44:af:3a:48:af:7f:31:e0:8c:4d:
91:75:e4:64:36:0b:8b:02:f3:6e:4c:ac:ca:18:32:
e8:7e:9e:8c:ff:ea:f7:07:d0:36:40:18:44:94:72:
f9:a2:b3:96:93:8e:a9:c7:56:57:6c:b5:da:ef:33:
85:f8:93:f2:a7:6f:de:1e:46:83:a0:a6:87:ce:54:
47:48:50:d8:2c:07:71:52:71:4b:74:a6:63:b4:42:
f6:ec:ed:f7:f1:8a:b4:79:be:22:95:a2:02:8d:02:
52:d3:de:ca:cb:48:e7:33:42:d5:5c:b3:f0:d3:af:
4d:69:83:cf:ff:4e:93:76:43:f7:b9:c1:94:91:dd:
e3:60:7d:c1:fc:f0:1c:c5:5f:95:80:47:ca:b6:15:
86:1f:b5:cf:a4:9b:4f:39:bb:fd:9e:98:e4:ba:c7:
29:be:e9:f7:2f:e1:90:a3:3f:ab:ed:05:c3:10:2a:
95:9a:ed:df:5a:fd:6e:60:8f:73:07:7a:85:6b:09:
b2:5e:ca:70:23:99:20:53:37:53:f4:4b:4e:93:e2:
e5:24:38:a2:b8:77:7f:72:69:0e:79:aa:c2:3a:8a:
08:ce:bb:91:c0:94:3e:a1:01:39:2b:ce:37:97:f7:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D7:7D:B4:05:BB:73:8B:69:5C:1A:DD:F3:50:0C:76:E0:5C:47:FD
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fdd9tAW7c4tpXBrd81AMduBcR_0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:2f:5f:c6:b1:33:f9:bb:ef:90:4d:34:fc:a8:68:c3:96:16:
87:f7:a4:ed:dc:1b:19:02:35:93:4d:e1:88:c9:a0:e5:47:91:
4f:c1:01:99:40:a6:95:5a:2f:62:9f:0b:61:ef:82:92:38:a5:
5b:c8:35:4e:7a:fe:8f:8a:46:48:96:63:c8:ed:da:1e:2a:7c:
ac:8f:58:ad:2d:d8:9a:a3:9a:9e:f4:eb:14:d8:06:cd:64:d7:
c6:cb:97:7c:1a:09:d1:88:c5:5c:39:5c:ed:a9:87:96:e6:10:
1f:74:2d:0a:e5:25:2a:0a:23:a8:aa:7a:b0:8f:b5:bd:3e:e1:
78:c5:25:59:85:62:5f:e6:da:ac:ab:4b:e1:d2:52:82:eb:ae:
c5:9c:6f:38:a4:fa:f0:72:43:f8:2e:42:09:55:04:9d:8f:05:
40:9f:06:36:84:fb:a9:48:36:07:06:a1:05:15:73:41:dd:5b:
04:09:f3:62:f0:19:00:a8:ab:ea:4a:6a:29:d8:0c:c8:90:ae:
73:49:83:bb:d4:c2:3c:a9:90:2d:25:dd:c7:50:e4:d3:85:cf:
b5:c9:5a:4b:74:f3:99:a3:b9:2c:68:f6:65:21:87:75:9c:fe:
28:78:11:b1:a4:e2:7a:c6:01:0c:80:8c:8e:3c:c4:4c:de:b3:
de:3f:93:60
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFG4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTQx
MDU0MTFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE1RDc3REI0MDVCQjcz
OEI2OTVDMUFEREYzNTAwQzc2RTA1QzQ3RkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDf6nhcUTv/kSmI6zekKIA643MsRK86SK9/MeCMTZF15GQ2C4sC
825MrMoYMuh+noz/6vcH0DZAGESUcvmis5aTjqnHVldstdrvM4X4k/Knb94eRoOg
pofOVEdIUNgsB3FScUt0pmO0Qvbs7ffxirR5viKVogKNAlLT3srLSOczQtVcs/DT
r01pg8//TpN2Q/e5wZSR3eNgfcH88BzFX5WAR8q2FYYftc+km085u/2emOS6xym+
6fcv4ZCjP6vtBcMQKpWa7d9a/W5gj3MHeoVrCbJeynAjmSBTN1P0S06T4uUkOKK4
d39yaQ55qsI6igjOu5HAlD6hATkrzjeX953NAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFdd9tAW7c4tpXBrd81AMduBcR/0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0ZkZDl0QVc3YzR0cFhC
cmQ4MUFNZHVCY1JfMC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAny9fxrEz+bvvkE00/Khow5YWh/ek7dwb
GQI1k03hiMmg5UeRT8EBmUCmlVovYp8LYe+CkjilW8g1Tnr+j4pGSJZjyO3aHip8
rI9YrS3YmqOanvTrFNgGzWTXxsuXfBoJ0YjFXDlc7amHluYQH3QtCuUlKgojqKp6
sI+1vT7heMUlWYViX+barKtL4dJSguuuxZxvOKT68HJD+C5CCVUEnY8FQJ8GNoT7
qUg2BwahBRVzQd1bBAnzYvAZAKir6kpqKdgMyJCuc0mDu9TCPKmQLSXdx1Dk04XP
tclaS3TzmaO5LGj2ZSGHdZz+KHgRsaTiesYBDICMjjzETN6z3j+TYA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:19:01 2025 by rpki-client