Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/prnxI3wpGjBi_P7ZvvPpb2iaHLg.roa
File: prnxI3wpGjBi_P7ZvvPpb2iaHLg.roa (raw, json)
Hash identifier: viF0KFt8VrHRvTWcx7XesbbjZ6ey+TWLa4WdtrJ8+kg=
Subject key identifier: A6:B9:F1:23:7C:29:1A:30:62:FC:FE:D9:BE:F3:E9:6F:68:9A:1C:B8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0F32
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/prnxI3wpGjBi_P7ZvvPpb2iaHLg.roa
Signing time: Sun 31 Mar 2024 11:52:41 +0000
ROA not before: Sun 31 Mar 2024 11:52:41 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3890 (0xf32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 31 11:52:41 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A6B9F1237C291A3062FCFED9BEF3E96F689A1CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:fe:fe:26:7c:66:8d:b4:6a:1c:08:94:b2:
b0:79:e1:c2:c8:ed:85:e9:ae:70:24:bd:e1:21:7d:
35:07:42:ef:2b:45:84:93:c1:dc:e1:2f:56:c5:9f:
3c:e5:7e:78:14:b1:87:b9:18:f8:fe:2d:18:09:c4:
7a:93:aa:28:43:9d:f1:33:8c:42:ac:31:11:f0:31:
12:24:85:85:5c:e8:60:dc:85:6d:86:7a:4d:65:80:
0b:0e:61:d2:27:00:a0:1a:74:f6:81:22:ce:85:4d:
e9:84:d2:47:b8:b4:39:0a:c4:25:c1:bd:38:cd:9d:
24:ba:cd:25:ee:f3:56:10:f1:4d:7c:6a:c7:1e:ca:
ed:36:0a:8b:5b:69:a1:aa:75:9f:60:c2:b2:19:49:
af:8d:5e:52:9f:0a:28:01:02:f8:09:de:ae:34:f5:
a3:4b:1b:fb:a3:c8:2b:07:99:95:6f:e3:49:ee:e9:
c5:9a:13:a7:1f:fb:7e:9f:1a:50:c6:88:d6:67:50:
0e:11:ab:58:4a:89:dd:75:9d:3a:1d:98:0f:41:47:
cb:8d:86:1d:e1:7f:f6:c5:1d:dd:a7:64:0b:89:73:
58:10:0b:4d:d9:f5:02:dc:cd:f6:79:cf:16:cd:69:
37:91:ab:0d:c4:9f:e0:80:1b:75:38:8f:48:d5:e2:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:F1:23:7C:29:1A:30:62:FC:FE:D9:BE:F3:E9:6F:68:9A:1C:B8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/prnxI3wpGjBi_P7ZvvPpb2iaHLg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:09:94:a4:c7:7a:8d:06:93:21:57:52:b9:50:d9:11:1c:c0:
d6:72:22:01:1a:fc:eb:69:33:c8:f0:2b:34:08:77:73:16:46:
ea:c6:ca:83:41:cb:cf:9a:5e:2a:7f:6a:41:b5:1b:d1:cd:b1:
ad:0b:5e:85:e2:c2:a1:77:f0:28:5b:b7:81:94:a8:e7:bb:90:
ae:06:fa:17:69:db:a8:c2:87:96:ae:db:f2:da:00:e8:20:97:
e3:1a:2c:df:15:81:cd:37:2a:ce:85:9b:c2:16:4b:33:db:ee:
a7:8b:cf:e8:60:0d:86:d3:be:8a:0b:fd:5b:6e:ce:63:3e:f9:
e8:23:8a:e8:5f:2c:18:0d:84:86:20:82:fc:9f:95:19:8a:84:
b8:8b:84:59:b0:5c:56:e3:2a:96:9c:d2:5a:f9:0f:df:71:8f:
d3:ca:b2:1b:d6:c0:c5:f1:34:a3:9c:80:ce:1a:dc:59:04:00:
fd:b0:fe:9f:3d:2a:89:37:4e:58:fb:5a:0d:0a:d4:bc:18:04:
7d:f8:ab:cf:55:19:82:16:ef:da:fd:ba:6c:9d:05:75:a0:a7:
7f:56:83:8c:72:ac:63:98:11:1b:63:35:72:37:88:42:17:10:
93:d2:1b:1d:36:f2:e3:5e:23:d9:54:3f:91:89:77:4b:ef:50:
44:95:d8:7b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzEx
MTUyNDFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEE2QjlGMTIzN0MyOTFB
MzA2MkZDRkVEOUJFRjNFOTZGNjg5QTFDQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9M/7+JnxmjbRqHAiUsrB54cLI7YXprnAkveEhfTUHQu8rRYST
wdzhL1bFnzzlfngUsYe5GPj+LRgJxHqTqihDnfEzjEKsMRHwMRIkhYVc6GDchW2G
ek1lgAsOYdInAKAadPaBIs6FTemE0ke4tDkKxCXBvTjNnSS6zSXu81YQ8U18asce
yu02CotbaaGqdZ9gwrIZSa+NXlKfCigBAvgJ3q409aNLG/ujyCsHmZVv40nu6cWa
E6cf+36fGlDGiNZnUA4Rq1hKid11nTodmA9BR8uNhh3hf/bFHd2nZAuJc1gQC03Z
9QLczfZ5zxbNaTeRqw3En+CAG3U4j0jV4oXbAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUprnxI3wpGjBi/P7ZvvPpb2iaHLgwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3BybnhJM3dwR2pCaV9Q
N1p2dlBwYjJpYUhMZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAQgmUpMd6jQaTIVdSuVDZERzA1nIiARr8
62kzyPArNAh3cxZG6sbKg0HLz5peKn9qQbUb0c2xrQteheLCoXfwKFu3gZSo57uQ
rgb6F2nbqMKHlq7b8toA6CCX4xos3xWBzTcqzoWbwhZLM9vup4vP6GANhtO+igv9
W27OYz756COK6F8sGA2EhiCC/J+VGYqEuIuEWbBcVuMqlpzSWvkP33GP08qyG9bA
xfE0o5yAzhrcWQQA/bD+nz0qiTdOWPtaDQrUvBgEffirz1UZghbv2v26bJ0FdaCn
f1aDjHKsY5gRG2M1cjeIQhcQk9IbHTby414j2VQ/kYl3S+9QRJXYew==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:17 2025 by rpki-client