Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/o4jAZ-nA0CYXqn2NfQb6HZ84b8E.roa
File: o4jAZ-nA0CYXqn2NfQb6HZ84b8E.roa (raw, json)
Hash identifier: M/ALizMeK+XizvB8tnnHVSIWHkvCcUkL5VzkkIavl5w=
Subject key identifier: A3:88:C0:67:E9:C0:D0:26:17:AA:7D:8D:7D:06:FA:1D:9F:38:6F:C1
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 163C
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o4jAZ-nA0CYXqn2NfQb6HZ84b8E.roa
Signing time: Fri 19 Apr 2024 06:23:27 +0000
ROA not before: Fri 19 Apr 2024 06:23:27 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5692 (0x163c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 06:23:27 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A388C067E9C0D02617AA7D8D7D06FA1D9F386FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:b8:c8:a2:d1:5c:ec:06:cc:22:ef:1e:2b:
e5:6f:fa:7f:2d:1b:34:69:24:7d:0c:51:a0:44:e9:
48:48:eb:37:f1:ab:48:99:39:59:68:7b:d1:68:7e:
4b:96:97:a0:25:68:e7:19:7c:83:1e:ee:7a:ff:8d:
9f:44:73:c1:68:32:f1:05:84:31:55:47:67:0a:08:
3b:69:6e:55:51:ba:e0:5d:d8:09:bb:27:b3:8a:01:
41:20:94:61:77:ac:80:ae:de:99:c3:b3:d1:0a:b6:
ba:4c:4a:3d:11:1f:1f:5d:b9:e0:27:d0:94:28:9c:
69:28:37:5c:83:68:2a:59:78:b7:c4:6a:19:43:c1:
4e:a3:4d:c7:24:f3:22:dd:00:94:6c:f0:ee:33:e8:
2d:ec:57:e8:36:3f:a4:bb:6f:b2:bb:df:1a:59:fa:
3d:35:f7:3c:ec:33:11:96:d0:43:92:c5:52:8d:5b:
f3:92:15:68:e6:28:3d:a3:ca:69:a0:5d:cc:27:0f:
1d:e6:fd:db:88:8b:f9:04:12:aa:98:a7:68:1b:24:
71:87:d2:ed:85:a4:86:e8:67:ee:22:0b:99:35:0c:
a9:68:f1:e3:c2:a7:ca:8c:4f:05:52:56:64:4f:dc:
53:c1:81:51:3a:19:4d:44:61:66:da:fe:6e:e0:8c:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:88:C0:67:E9:C0:D0:26:17:AA:7D:8D:7D:06:FA:1D:9F:38:6F:C1
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/o4jAZ-nA0CYXqn2NfQb6HZ84b8E.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
60:f6:29:a8:5b:dd:41:b0:14:7c:78:03:22:b8:d1:ec:8d:9a:
c7:97:6f:51:86:74:01:32:6c:79:0e:56:ce:c7:b0:eb:a8:8a:
8f:a7:04:9f:9d:30:40:b4:d2:c1:21:45:7a:61:ff:8e:91:ad:
28:58:78:fe:f3:90:65:25:19:f9:35:83:96:69:73:d2:ef:1f:
0a:8e:be:8f:8b:11:b9:53:a0:b9:be:9a:2f:bc:18:16:7a:1f:
8a:45:02:d1:42:c6:94:18:54:3a:69:fa:0a:d2:c2:e1:de:c6:
03:04:4a:24:ac:a4:9d:a3:3a:4f:86:4a:44:ea:e6:e8:13:22:
ab:9a:d1:d8:cb:8d:b2:5c:b4:b6:22:a1:a7:46:c0:4a:dd:fd:
b3:3a:66:e2:92:e7:f2:db:ef:4e:2d:09:cf:ae:71:07:92:ea:
94:4d:5b:29:a1:6c:1d:50:1c:48:94:78:48:f6:8c:f1:8e:ca:
70:81:72:54:e8:f8:21:53:5b:fe:0d:8f:8c:42:43:8e:6c:0c:
78:a6:57:f5:0b:b6:67:81:4b:56:a9:87:c9:0b:66:13:b7:e3:
9c:7a:1c:c1:a7:a0:32:a8:ef:86:77:cb:20:76:f3:9a:74:65:
7e:79:5c:60:79:02:e5:fb:70:ea:bc:a6:81:32:02:0e:53:dc:
01:14:29:09
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFjwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTkw
NjIzMjdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEEzODhDMDY3RTlDMEQw
MjYxN0FBN0Q4RDdEMDZGQTFEOUYzODZGQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCllbjIotFc7AbMIu8eK+Vv+n8tGzRpJH0MUaBE6UhI6zfxq0iZ
OVloe9FofkuWl6AlaOcZfIMe7nr/jZ9Ec8FoMvEFhDFVR2cKCDtpblVRuuBd2Am7
J7OKAUEglGF3rICu3pnDs9EKtrpMSj0RHx9dueAn0JQonGkoN1yDaCpZeLfEahlD
wU6jTcck8yLdAJRs8O4z6C3sV+g2P6S7b7K73xpZ+j019zzsMxGW0EOSxVKNW/OS
FWjmKD2jymmgXcwnDx3m/duIi/kEEqqYp2gbJHGH0u2FpIboZ+4iC5k1DKlo8ePC
p8qMTwVSVmRP3FPBgVE6GU1EYWba/m7gjFNFAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUo4jAZ+nA0CYXqn2NfQb6HZ84b8EwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL280akFaLW5BMENZWHFu
Mk5mUWI2SFo4NGI4RS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAYPYpqFvdQbAUfHgDIrjR7I2ax5dvUYZ0
ATJseQ5Wzsew66iKj6cEn50wQLTSwSFFemH/jpGtKFh4/vOQZSUZ+TWDlmlz0u8f
Co6+j4sRuVOgub6aL7wYFnofikUC0ULGlBhUOmn6CtLC4d7GAwRKJKyknaM6T4ZK
ROrm6BMiq5rR2MuNsly0tiKhp0bASt39szpm4pLn8tvvTi0Jz65xB5LqlE1bKaFs
HVAcSJR4SPaM8Y7KcIFyVOj4IVNb/g2PjEJDjmwMeKZX9Qu2Z4FLVqmHyQtmE7fj
nHocwaegMqjvhnfLIHbzmnRlfnlcYHkC5ftw6rymgTICDlPcARQpCQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:54 2025 by rpki-client