Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/cTYS28J4w_UltoVI0Dd0iQOx8rM.roa
File: cTYS28J4w_UltoVI0Dd0iQOx8rM.roa (raw, json)
Hash identifier: MXdpIJkhgNfN/EFRt2RlG1IYscQuFhbYhLnr+F5lUNg=
Subject key identifier: 71:36:12:DB:C2:78:C3:F5:25:B6:85:48:D0:37:74:89:03:B1:F2:B3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 11C4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cTYS28J4w_UltoVI0Dd0iQOx8rM.roa
Signing time: Sun 07 Apr 2024 08:22:55 +0000
ROA not before: Sun 07 Apr 2024 08:22:55 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4548 (0x11c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 7 08:22:55 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=713612DBC278C3F525B68548D037748903B1F2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:61:e3:0e:09:4f:87:8e:c6:6d:c6:0b:d1:
fb:21:5d:b7:66:e0:1b:25:19:dd:da:cb:ec:73:6a:
1c:3b:ad:f6:7b:9c:a1:48:54:35:65:f5:3e:17:73:
d5:fa:16:8c:d8:10:ac:69:ec:ad:71:6e:92:59:67:
8c:f0:bc:76:0d:b7:ff:84:a8:7d:c1:6d:c9:5c:e5:
ed:b7:40:78:9c:1f:32:51:91:89:43:2e:ac:ba:16:
3f:ce:88:3f:32:97:3b:15:f2:7d:0a:0c:54:ce:99:
cf:60:70:99:b6:2f:c2:63:93:46:2d:db:49:78:15:
7d:1c:a1:1f:e1:7f:57:81:5e:15:c2:49:f9:ce:e9:
4f:54:d8:f5:79:70:3e:72:b8:f5:77:51:a2:cd:24:
25:ed:a7:d4:74:37:e4:7d:f2:d5:16:91:4c:a6:51:
a0:64:44:8e:b8:2f:6a:35:3b:c2:78:2b:d1:2b:45:
d3:83:ec:59:b7:00:2a:b0:48:ef:a2:d4:32:b7:cc:
8b:e3:c7:79:b7:b3:75:ab:97:7d:f2:0d:67:82:4a:
b7:9e:b9:02:65:a0:c9:c1:f3:06:9c:a2:e8:86:91:
40:64:8a:78:b9:c3:13:78:7e:4c:8f:8c:4c:c1:91:
d2:ea:4d:6b:65:1e:94:71:69:14:bc:89:3e:d2:42:
14:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:36:12:DB:C2:78:C3:F5:25:B6:85:48:D0:37:74:89:03:B1:F2:B3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/cTYS28J4w_UltoVI0Dd0iQOx8rM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8a:81:91:72:28:fd:66:54:a5:79:21:1b:58:a3:1e:c8:44:ff:
43:bd:cd:00:51:d7:b7:ab:3e:00:76:fd:7e:14:fa:16:3b:4b:
2e:15:aa:8a:fc:2f:4b:7e:ae:56:ae:1f:9b:4f:27:34:87:54:
2c:05:5d:b9:47:19:f1:d9:fa:18:4d:23:3c:a6:b2:a2:87:fe:
aa:9e:29:21:71:a6:ba:c5:8f:e4:94:9b:82:40:f2:b9:8c:bd:
69:19:90:7c:62:1e:bf:2c:22:e0:0a:d4:0a:5c:c4:5c:f2:6f:
f6:9a:6d:6f:ae:fd:bf:9e:8a:9c:ed:29:7a:ec:21:a8:8e:d7:
9e:f5:fa:8a:ad:1c:3c:44:fe:86:93:7e:16:0d:a9:84:1f:0e:
7a:4d:71:d5:9a:37:0f:3b:75:f0:2d:85:d3:50:4a:09:4e:49:
df:8b:6a:e8:bc:a7:69:09:b3:93:fe:aa:c0:79:d9:f0:ea:cd:
73:64:7e:d3:a5:8a:19:2b:23:51:94:c7:df:be:52:30:d9:94:
d8:b4:0e:88:e2:75:b0:77:06:e0:6e:bf:82:d7:bc:94:9e:28:
74:f1:d2:f1:66:e6:9e:29:eb:0e:ac:6e:d0:d2:66:49:c5:b0:
5d:38:98:4c:6a:9c:a8:1c:35:5c:37:c6:18:1f:5d:78:a8:2b:
da:e4:19:77
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEcQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDcw
ODIyNTVaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDcxMzYxMkRCQzI3OEMz
RjUyNUI2ODU0OEQwMzc3NDg5MDNCMUYyQjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaAWHjDglPh47GbcYL0fshXbdm4BslGd3ay+xzahw7rfZ7nKFI
VDVl9T4Xc9X6FozYEKxp7K1xbpJZZ4zwvHYNt/+EqH3Bbclc5e23QHicHzJRkYlD
Lqy6Fj/OiD8ylzsV8n0KDFTOmc9gcJm2L8Jjk0Yt20l4FX0coR/hf1eBXhXCSfnO
6U9U2PV5cD5yuPV3UaLNJCXtp9R0N+R98tUWkUymUaBkRI64L2o1O8J4K9ErRdOD
7Fm3ACqwSO+i1DK3zIvjx3m3s3Wrl33yDWeCSreeuQJloMnB8wacouiGkUBkini5
wxN4fkyPjEzBkdLqTWtlHpRxaRS8iT7SQhSnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUcTYS28J4w/UltoVI0Dd0iQOx8rMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2NUWVMyOEo0d19VbHRv
VkkwRGQwaVFPeDhyTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAioGRcij9ZlSleSEbWKMeyET/Q73NAFHX
t6s+AHb9fhT6FjtLLhWqivwvS36uVq4fm08nNIdULAVduUcZ8dn6GE0jPKayoof+
qp4pIXGmusWP5JSbgkDyuYy9aRmQfGIevywi4ArUClzEXPJv9pptb679v56KnO0p
euwhqI7XnvX6iq0cPET+hpN+Fg2phB8Oek1x1Zo3Dzt18C2F01BKCU5J34tq6Lyn
aQmzk/6qwHnZ8OrNc2R+06WKGSsjUZTH375SMNmU2LQOiOJ1sHcG4G6/gte8lJ4o
dPHS8WbmninrDqxu0NJmScWwXTiYTGqcqBw1XDfGGB9deKgr2uQZdw==
-----END CERTIFICATE-----
Generated at Sat Jun 21 00:47:14 2025 by rpki-client