Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qc-pWj1IMMGF2ZH3jyB8QuhaUR0.roa
File: qc-pWj1IMMGF2ZH3jyB8QuhaUR0.roa (raw, json)
Hash identifier: MsOmPeWxboY6akcOXEoynqnbtNBLyLi7dU+MAfbwDXc=
Subject key identifier: A9:CF:A9:5A:3D:48:30:C1:85:D9:91:F7:8F:20:7C:42:E8:5A:51:1D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1248
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qc-pWj1IMMGF2ZH3jyB8QuhaUR0.roa
Signing time: Mon 08 Apr 2024 17:22:58 +0000
ROA not before: Mon 08 Apr 2024 17:22:58 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4680 (0x1248)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 8 17:22:58 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=A9CFA95A3D4830C185D991F78F207C42E85A511D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:9e:65:a4:66:a5:17:6d:2e:6c:a4:b4:26:
b2:c8:db:45:48:2e:d8:81:a2:cf:84:45:04:07:95:
2c:49:19:cd:f9:28:d9:a5:bd:cd:08:b8:f5:b1:d4:
bd:db:57:c2:f9:6e:91:60:cd:f9:79:73:02:91:b5:
1f:03:3e:0a:2c:1b:15:85:59:ff:36:1f:7a:ae:a1:
f3:20:43:cc:3a:13:84:50:78:d5:05:9e:16:ff:e4:
b8:5a:30:51:29:38:1d:a2:d0:07:3e:0c:b9:77:e5:
df:07:14:12:9f:c4:7a:4a:ac:67:bb:3d:f3:3b:d3:
a6:84:03:73:d0:b8:24:90:46:63:57:0d:dc:0a:db:
55:ce:2a:55:94:ca:7d:58:87:a7:26:36:9c:f5:da:
2f:79:be:75:a0:d9:83:59:90:6a:4b:3b:53:ba:41:
0f:6e:53:f0:46:43:98:d2:9e:5b:80:9b:07:da:81:
b6:df:a1:b2:8e:20:8a:1b:2b:96:94:7a:88:58:7b:
b4:5d:96:b3:59:24:21:e8:d0:4d:73:08:be:88:a3:
28:49:55:ae:9b:0c:9e:df:22:7c:24:27:e7:a4:a7:
6f:95:6f:32:06:14:6b:2c:80:9c:a3:10:be:75:83:
9a:9a:30:14:28:f8:db:a8:ff:87:00:87:96:7b:0e:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CF:A9:5A:3D:48:30:C1:85:D9:91:F7:8F:20:7C:42:E8:5A:51:1D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qc-pWj1IMMGF2ZH3jyB8QuhaUR0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:cc:33:3a:39:c5:50:5a:6c:4a:40:f0:52:dc:87:f5:e3:19:
fb:7d:b0:0d:f5:3e:78:5a:2c:ba:22:67:5a:2a:96:ac:10:86:
b3:ec:09:e7:6b:ff:b3:c2:69:ac:bc:f2:fb:42:1a:1e:3c:02:
6e:f2:d4:06:e2:86:7b:8e:23:06:61:d6:b8:14:00:94:16:a9:
7a:e0:95:9d:7c:82:5d:ef:f6:04:6c:77:27:2f:d1:1d:f7:af:
32:c7:cf:30:a2:42:ac:2f:7a:f3:48:9b:e4:67:23:ac:58:25:
cd:07:b0:96:c5:be:a2:d9:49:1d:eb:41:e4:4a:19:63:63:1a:
2e:42:ef:4b:1b:73:dd:10:7a:c1:23:c5:f4:04:fb:b4:05:a0:
e9:e9:05:35:07:9e:ff:36:da:ed:c4:6e:fc:25:0a:3d:08:41:
3a:a6:f1:9a:29:c2:d5:2d:66:c3:fc:10:d8:b4:0a:69:21:d2:
d2:13:6e:f4:75:22:69:48:57:a6:f6:e7:43:75:4d:f2:36:20:
3a:df:2f:9b:26:61:f8:0f:1a:6a:f5:90:3d:ad:89:5c:63:51:
e2:66:3a:43:60:e2:98:7c:18:95:94:7a:a2:a0:90:40:9c:d2:
b0:28:59:0e:4f:fb:77:9f:87:42:9d:3d:c5:73:62:29:e6:62:
f1:58:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:31:29 2025 by rpki-client