Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/r4Tsfe_GS_wXDUQpp77DR0XUx2s.roa
File: r4Tsfe_GS_wXDUQpp77DR0XUx2s.roa (raw, json)
Hash identifier: p9gTffFv8PxJaxK3dXVr+drIdRokkkkQ1K0lDh/Aeo0=
Subject key identifier: AF:84:EC:7D:EF:C6:4B:FC:17:0D:44:29:A7:BE:C3:47:45:D4:C7:6B
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14EC
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/r4Tsfe_GS_wXDUQpp77DR0XUx2s.roa
Signing time: Mon 15 Apr 2024 18:23:19 +0000
ROA not before: Mon 15 Apr 2024 18:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5356 (0x14ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 18:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AF84EC7DEFC64BFC170D4429A7BEC34745D4C76B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:42:4f:01:fd:85:56:bb:e0:c0:5d:34:d1:
93:6b:df:61:a7:fd:a4:7e:59:39:b4:d2:47:ce:97:
05:de:02:eb:98:9d:48:db:86:ce:ca:fa:3f:1e:69:
4b:c2:3b:4b:58:4b:e8:2c:5f:7d:76:3b:0c:9e:c8:
4e:9c:80:34:1d:fe:5c:e7:a8:88:02:d6:cc:46:cf:
f9:f0:e1:c6:74:43:50:87:5f:28:bd:4e:16:76:fa:
dd:37:04:23:c1:f8:27:bf:34:0a:b2:72:2e:23:70:
d7:a0:ec:36:ba:ad:ed:98:af:62:8b:c3:48:a7:13:
12:df:65:fd:79:79:40:5f:d2:f8:3e:6c:85:d3:42:
5f:94:95:11:13:03:12:37:ca:62:5e:93:97:90:b0:
08:bb:8f:f5:a4:f0:f8:bc:84:fa:bc:03:81:07:ea:
06:33:cd:df:83:58:cb:0f:a7:16:95:32:67:b5:ba:
b4:d3:d0:b5:6c:bc:c6:f2:6b:66:39:64:87:13:92:
79:21:9e:6d:6b:4f:b8:30:02:1d:6c:5d:c9:97:93:
89:f3:3d:56:ec:ca:08:9f:ff:cc:fc:2e:68:22:69:
ce:90:22:56:58:c1:53:7c:a7:32:c9:a6:91:10:b4:
e6:b9:c2:74:fd:ac:56:e7:b3:83:4f:f7:60:fc:34:
e9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:EC:7D:EF:C6:4B:FC:17:0D:44:29:A7:BE:C3:47:45:D4:C7:6B
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/r4Tsfe_GS_wXDUQpp77DR0XUx2s.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:40:7e:15:2a:08:f1:d5:ec:6b:4e:c2:0a:1b:d0:2d:53:43:
3a:ff:3a:1c:3e:fb:85:e8:e6:db:6c:d4:ee:61:58:0b:54:4e:
23:d1:8a:35:87:cc:0a:39:de:36:a5:c9:ab:d2:18:b0:d4:17:
5c:6d:33:e9:00:e8:6c:b4:7d:d1:2a:76:e4:23:bf:e3:60:08:
e0:b3:28:d0:23:ba:1d:54:13:08:96:f9:09:24:85:49:44:46:
83:0f:6b:9e:0c:87:a0:aa:e0:f2:df:fe:f3:2e:1c:0e:56:82:
36:3e:2c:ff:17:99:63:62:1d:b6:33:2f:0a:f7:2e:19:fb:c0:
6e:b1:ab:b0:be:f9:87:1d:2e:3e:4c:a9:58:b4:c0:25:5d:87:
d5:97:99:ca:4a:a2:f0:d8:be:e8:fe:6f:ee:06:5c:f7:9b:23:
91:41:be:0a:ef:9a:e4:a3:5e:8a:fe:a6:ae:32:c8:c1:00:d7:
9d:af:6a:1b:9e:bc:52:c2:5c:34:46:d7:8f:99:45:04:f3:52:
b4:a6:51:44:4c:53:88:e1:28:ea:ea:44:83:7c:cf:3a:35:3e:
d2:95:3a:c5:ab:1f:b5:d4:a9:3d:cd:6b:f3:cc:a2:38:d6:d6:
40:e2:c1:d3:da:96:65:b7:9c:00:9d:5f:73:b2:bc:b8:16:69:
98:19:2e:b9
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFOwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTUx
ODIzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFGODRFQzdERUZDNjRC
RkMxNzBENDQyOUE3QkVDMzQ3NDVENEM3NkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHB0JPAf2FVrvgwF000ZNr32Gn/aR+WTm00kfOlwXeAuuYnUjb
hs7K+j8eaUvCO0tYS+gsX312OwyeyE6cgDQd/lznqIgC1sxGz/nw4cZ0Q1CHXyi9
ThZ2+t03BCPB+Ce/NAqyci4jcNeg7Da6re2Yr2KLw0inExLfZf15eUBf0vg+bIXT
Ql+UlRETAxI3ymJek5eQsAi7j/Wk8Pi8hPq8A4EH6gYzzd+DWMsPpxaVMme1urTT
0LVsvMbya2Y5ZIcTknkhnm1rT7gwAh1sXcmXk4nzPVbsygif/8z8Lmgiac6QIlZY
wVN8pzLJppEQtOa5wnT9rFbns4NP92D8NOn3AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUr4Tsfe/GS/wXDUQpp77DR0XUx2swHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3I0VHNmZV9HU193WERV
UXBwNzdEUjBYVXgycy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAUkB+FSoI8dXsa07CChvQLVNDOv86HD77
hejm22zU7mFYC1ROI9GKNYfMCjneNqXJq9IYsNQXXG0z6QDobLR90Sp25CO/42AI
4LMo0CO6HVQTCJb5CSSFSURGgw9rngyHoKrg8t/+8y4cDlaCNj4s/xeZY2IdtjMv
CvcuGfvAbrGrsL75hx0uPkypWLTAJV2H1ZeZykqi8Ni+6P5v7gZc95sjkUG+Cu+a
5KNeiv6mrjLIwQDXna9qG568UsJcNEbXj5lFBPNStKZRRExTiOEo6upEg3zPOjU+
0pU6xasftdSpPc1r88yiONbWQOLB09qWZbecAJ1fc7K8uBZpmBkuuQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:43:49 2025 by rpki-client