Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/YfQnIzv_Q10XyXmwDRzJELy4G5o.roa
File: YfQnIzv_Q10XyXmwDRzJELy4G5o.roa (raw, json)
Hash identifier: EeeMsfZnUJlzKNY9zq0a2Qvmxi2jfH/qFvPGZJ1Fils=
Subject key identifier: 61:F4:27:23:3B:FF:43:5D:17:C9:79:B0:0D:1C:C9:10:BC:B8:1B:9A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19F4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YfQnIzv_Q10XyXmwDRzJELy4G5o.roa
Signing time: Mon 29 Apr 2024 04:23:54 +0000
ROA not before: Mon 29 Apr 2024 04:23:54 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6644 (0x19f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 04:23:54 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=61F427233BFF435D17C979B00D1CC910BCB81B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f4:a3:41:0c:ad:17:f8:b1:99:d3:29:1e:89:
80:d3:15:e8:35:22:b7:c1:10:d5:1d:0b:d9:5a:4e:
b6:28:4c:9c:6c:72:43:3f:88:aa:c0:9e:81:8e:9d:
78:66:4f:75:13:bc:3e:9f:f7:33:f4:58:32:8e:8a:
dd:2e:08:d3:5c:d5:93:84:26:de:92:8e:19:3e:14:
5a:7c:ca:59:81:e2:2e:fc:91:df:f3:ab:d6:a8:da:
fa:35:7d:d8:c6:7c:99:22:c0:4b:6a:b9:e4:e5:b0:
68:95:4f:4a:f1:84:ff:10:4e:55:71:1b:c8:1f:d6:
1d:2a:7c:c7:53:1f:48:54:c8:44:98:a0:4e:f6:93:
91:3a:73:bd:9d:bd:a9:34:fc:0d:69:91:cf:c0:b9:
0c:2d:17:66:81:e7:06:70:d0:02:f5:a5:0f:ba:24:
bd:12:55:3f:de:db:70:3d:39:73:ba:ef:4a:72:cd:
0c:ad:58:3e:9b:25:e6:e7:90:12:12:1f:8f:44:65:
f5:f9:48:38:e4:75:c2:93:42:9f:8c:36:94:04:19:
19:dc:10:ed:e4:4b:51:74:b4:79:90:bb:f7:0d:97:
df:e9:12:a4:81:b8:4b:c9:f5:f8:3b:29:b5:6d:fe:
5c:f8:76:a9:54:5b:26:3b:43:1c:4a:36:4a:01:d4:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F4:27:23:3B:FF:43:5D:17:C9:79:B0:0D:1C:C9:10:BC:B8:1B:9A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/YfQnIzv_Q10XyXmwDRzJELy4G5o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:0e:97:de:24:e3:84:22:fe:8a:63:f2:ed:c1:c8:7b:4d:14:
b6:e5:6c:3a:b0:a8:82:32:53:56:57:1f:59:69:b2:2f:55:12:
6d:e3:3a:4f:e1:bb:68:d9:5b:e4:af:36:f7:b9:47:ea:e6:b1:
f8:7d:65:96:98:60:02:30:87:b3:4b:a8:8c:52:84:fc:d1:cb:
11:78:aa:83:83:3e:3e:7c:ff:9c:28:0b:90:ea:91:f3:af:35:
5f:a1:50:d6:5a:3e:b2:0e:25:28:eb:d9:08:1e:16:a9:52:b2:
cc:ef:ca:2f:c7:1d:46:4a:1a:93:2c:c0:0d:76:8a:02:66:58:
f1:59:78:a7:bc:0f:e0:47:d9:a0:59:5f:65:9f:aa:a9:71:2e:
1d:76:96:06:2c:4e:a9:fb:f7:13:7e:8f:e3:d0:1b:ae:12:c5:
4e:0c:ec:30:0d:9b:5b:7c:7d:6c:ba:f1:de:30:c1:2c:86:fc:
3b:37:92:e5:4a:56:c3:57:02:34:e0:01:d8:01:53:4f:8f:fe:
6a:f2:22:f1:22:0b:3a:d9:b6:e4:89:f4:7a:b9:ff:56:ef:67:
f4:da:97:42:2d:de:d4:50:f3:ce:51:4e:89:72:58:f5:2d:74:
31:0c:1f:76:44:4f:96:87:c1:5a:95:ed:30:71:cd:fa:a4:6a:
bc:07:0e:a2
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjkw
NDIzNTRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDYxRjQyNzIzM0JGRjQz
NUQxN0M5NzlCMDBEMUNDOTEwQkNCODFCOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn9KNBDK0X+LGZ0ykeiYDTFeg1IrfBENUdC9laTrYoTJxsckM/
iKrAnoGOnXhmT3UTvD6f9zP0WDKOit0uCNNc1ZOEJt6Sjhk+FFp8ylmB4i78kd/z
q9ao2vo1fdjGfJkiwEtqueTlsGiVT0rxhP8QTlVxG8gf1h0qfMdTH0hUyESYoE72
k5E6c72dvak0/A1pkc/AuQwtF2aB5wZw0AL1pQ+6JL0SVT/e23A9OXO670pyzQyt
WD6bJebnkBISH49EZfX5SDjkdcKTQp+MNpQEGRncEO3kS1F0tHmQu/cNl9/pEqSB
uEvJ9fg7KbVt/lz4dqlUWyY7QxxKNkoB1AZNAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUYfQnIzv/Q10XyXmwDRzJELy4G5owHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1lmUW5JenZfUTEwWHlY
bXdEUnpKRUx5NEc1by5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAQQ6X3iTjhCL+imPy7cHIe00UtuVsOrCo
gjJTVlcfWWmyL1USbeM6T+G7aNlb5K8297lH6uax+H1llphgAjCHs0uojFKE/NHL
EXiqg4M+Pnz/nCgLkOqR8681X6FQ1lo+sg4lKOvZCB4WqVKyzO/KL8cdRkoakyzA
DXaKAmZY8Vl4p7wP4EfZoFlfZZ+qqXEuHXaWBixOqfv3E36P49AbrhLFTgzsMA2b
W3x9bLrx3jDBLIb8OzeS5UpWw1cCNOAB2AFTT4/+avIi8SILOtm25In0ern/Vu9n
9NqXQi3e1FDzzlFOiXJY9S10MQwfdkRPlofBWpXtMHHN+qRqvAcOog==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:37:20 2025 by rpki-client