Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/m3-brOEKzRmRaN9QIsvJ4398VxI.roa
File: m3-brOEKzRmRaN9QIsvJ4398VxI.roa (raw, json)
Hash identifier: PUCOihOrg94xcJy81mYSxdOXD8QgUCkK1qQQashWo4g=
Subject key identifier: 9B:7F:9B:AC:E1:0A:CD:19:91:68:DF:50:22:CB:C9:E3:7F:7C:57:12
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F26
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m3-brOEKzRmRaN9QIsvJ4398VxI.roa
Signing time: Sun 31 Mar 2024 08:52:39 +0000
ROA not before: Sun 31 Mar 2024 08:52:39 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3878 (0xf26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 08:52:39 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9B7F9BACE10ACD199168DF5022CBC9E37F7C5712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:24:eb:34:c6:79:66:35:99:63:a0:4a:d9:9b:
9a:cc:e9:68:74:05:e5:80:1f:13:1d:e1:80:29:7e:
b0:92:01:0f:f1:53:aa:d3:28:db:4a:30:b3:50:3b:
f5:e1:cd:d7:09:b9:5d:1a:cf:c3:84:7c:38:1d:be:
4d:3f:8a:49:3f:b5:4f:7f:55:c9:f3:72:22:9a:13:
2b:5a:34:e3:f9:cb:f7:26:f7:38:09:92:ad:6b:07:
6f:9b:c0:65:7e:aa:03:b3:48:10:9e:af:c0:45:50:
b0:0c:e1:88:db:f4:09:da:97:7b:5b:f2:1c:25:2f:
2f:ab:bf:31:fb:e8:c4:79:b0:ba:d5:83:34:25:6c:
3d:3d:51:06:ab:12:3a:9b:b7:cf:bc:8f:17:15:3d:
a7:9c:5e:cf:29:5a:c5:83:9d:44:05:43:be:9c:c6:
62:54:93:86:e4:2f:69:5b:6a:22:39:96:8c:56:7f:
38:13:c5:0b:b0:31:b6:9e:c7:e8:4d:e2:25:fe:92:
02:2a:6f:dc:f7:a9:3f:24:26:c5:35:7a:4f:24:82:
e6:1c:59:d5:5b:52:e6:b6:f8:50:af:61:e1:d3:f1:
0c:ff:e4:bc:d3:4f:95:3e:b7:ae:a2:dd:58:20:4d:
ef:c2:45:a5:33:31:11:2c:e1:5d:5d:08:ed:8d:27:
12:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7F:9B:AC:E1:0A:CD:19:91:68:DF:50:22:CB:C9:E3:7F:7C:57:12
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/m3-brOEKzRmRaN9QIsvJ4398VxI.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:0c:78:de:b7:d1:fa:63:ee:6b:fd:d6:20:64:cb:c4:ad:e4:
16:a5:32:4e:1c:4a:8f:02:c1:1a:73:0d:5f:2e:6b:92:42:df:
dd:a0:2a:65:81:c9:d3:3f:6b:65:55:d6:0d:98:9c:31:bc:85:
5b:7e:1b:0d:1d:f4:c3:13:72:3d:58:bd:3f:85:a8:af:98:42:
58:a5:73:60:63:77:11:bf:ff:3c:c9:c6:fd:1a:8b:b3:ec:50:
86:08:9a:e5:04:77:36:32:6c:a0:f3:b0:d3:5e:ba:e9:c8:9d:
c8:d9:3e:83:26:61:7d:16:ee:78:3d:b4:fe:cf:97:56:ec:e1:
95:aa:31:81:ec:ac:dd:6a:d1:2b:57:9d:96:92:f5:9a:e7:bf:
eb:45:cb:d8:b4:10:ba:05:76:65:ce:83:5f:68:81:dd:01:b8:
77:32:53:67:56:19:d8:73:74:0c:9f:07:88:0a:2d:4b:25:57:
38:c2:7c:26:b1:31:da:cc:e2:21:09:ab:a3:f8:93:2c:2c:5e:
85:dc:3f:5e:e6:1c:28:e7:f2:6b:7c:3a:46:16:0f:f3:9e:91:
17:f5:e1:06:3a:92:50:89:91:69:94:3d:46:fc:4f:b4:5e:fa:
80:07:ca:72:85:e8:61:36:a6:c5:9d:22:56:94:f7:64:2e:11:
fa:14:83:20
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDyYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzEw
ODUyMzlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDlCN0Y5QkFDRTEwQUNE
MTk5MTY4REY1MDIyQ0JDOUUzN0Y3QzU3MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVJOs0xnlmNZljoErZm5rM6Wh0BeWAHxMd4YApfrCSAQ/xU6rT
KNtKMLNQO/XhzdcJuV0az8OEfDgdvk0/ikk/tU9/VcnzciKaEytaNOP5y/cm9zgJ
kq1rB2+bwGV+qgOzSBCer8BFULAM4Yjb9Anal3tb8hwlLy+rvzH76MR5sLrVgzQl
bD09UQarEjqbt8+8jxcVPaecXs8pWsWDnUQFQ76cxmJUk4bkL2lbaiI5loxWfzgT
xQuwMbaex+hN4iX+kgIqb9z3qT8kJsU1ek8kguYcWdVbUua2+FCvYeHT8Qz/5LzT
T5U+t66i3VggTe/CRaUzMREs4V1dCO2NJxLbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUm3+brOEKzRmRaN9QIsvJ4398VxIwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL20zLWJyT0VLelJtUmFO
OVFJc3ZKNDM5OFZ4SS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA1wx43rfR+mPua/3WIGTLxK3kFqUyThxK
jwLBGnMNXy5rkkLf3aAqZYHJ0z9rZVXWDZicMbyFW34bDR30wxNyPVi9P4Wor5hC
WKVzYGN3Eb//PMnG/RqLs+xQhgia5QR3NjJsoPOw01666cidyNk+gyZhfRbueD20
/s+XVuzhlaoxgeys3WrRK1edlpL1mue/60XL2LQQugV2Zc6DX2iB3QG4dzJTZ1YZ
2HN0DJ8HiAotSyVXOMJ8JrEx2sziIQmro/iTLCxehdw/XuYcKOfya3w6RhYP856R
F/XhBjqSUImRaZQ9RvxPtF76gAfKcoXoYTamxZ0iVpT3ZC4R+hSDIA==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:24:22 2025 by rpki-client