Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/w5_1okoXORJ-DikkfY4HhHxM8o8.roa
File: w5_1okoXORJ-DikkfY4HhHxM8o8.roa (raw, json)
Hash identifier: jQWCSZ+Z0AVXkoXl5CDffC/Jnhuf1cWpa5fc5ctOpDw=
Subject key identifier: C3:9F:F5:A2:4A:17:39:12:7E:0E:29:24:7D:8E:07:84:7C:4C:F2:8F
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 19D8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/w5_1okoXORJ-DikkfY4HhHxM8o8.roa
Signing time: Sun 28 Apr 2024 21:23:56 +0000
ROA not before: Sun 28 Apr 2024 21:23:56 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6616 (0x19d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 28 21:23:56 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=C39FF5A24A1739127E0E29247D8E07847C4CF28F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:8c:66:cc:13:c3:04:0a:34:76:63:21:fe:
50:4d:4c:a4:c9:fd:40:cc:e6:7b:93:32:94:4c:ec:
18:9f:fc:a6:44:aa:4b:8c:1a:af:1e:eb:58:0f:63:
b4:74:39:e0:5c:ea:48:0e:87:95:19:ee:46:43:aa:
06:df:8e:f1:4e:3b:f8:3b:21:fa:99:67:fe:06:f7:
79:8b:37:07:16:d8:9a:27:6d:c3:51:fd:1a:f3:04:
39:a5:d0:18:e3:7d:35:61:aa:86:6d:ef:38:78:e0:
13:7a:6c:c2:0c:da:78:8f:94:19:a9:f7:08:4d:04:
b7:da:5f:d3:f2:04:55:6b:c3:c5:4d:2b:8f:92:b5:
9a:07:d8:96:81:47:9c:7b:96:1c:eb:54:d7:2f:91:
72:32:34:af:e6:7c:d7:4b:3c:ed:0b:1d:63:b2:6d:
46:bd:98:5a:6e:3f:35:c8:0b:7b:e1:50:06:a4:7d:
5f:8a:84:09:e4:6b:e2:05:72:43:18:5a:ff:26:4d:
81:97:e7:2f:85:b0:8d:c1:b4:e9:60:be:44:36:4e:
67:40:d4:ab:08:76:57:70:40:dd:8e:f1:8e:4f:e6:
70:af:5f:bc:93:3d:a9:cd:96:22:2a:72:3b:a2:ad:
9c:76:f5:e8:11:ce:d8:4a:4d:bd:1f:11:f3:62:6e:
42:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9F:F5:A2:4A:17:39:12:7E:0E:29:24:7D:8E:07:84:7C:4C:F2:8F
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/w5_1okoXORJ-DikkfY4HhHxM8o8.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
96:5d:40:62:9c:e7:0e:28:61:dc:ff:86:f2:0a:dd:28:4c:f0:
31:54:25:cc:e6:ea:40:92:a4:54:90:9c:a2:b1:94:3e:8e:3b:
2a:5c:f8:4c:76:18:80:70:72:4a:43:29:dc:c2:24:40:87:ff:
4d:93:94:79:42:c7:e3:04:1a:85:6a:fa:cf:4a:a3:4c:73:21:
1b:70:43:bf:ec:37:ce:76:d1:8d:94:6f:6c:92:83:e9:9c:cb:
86:3d:fe:f8:73:f3:73:99:73:4e:8f:56:83:11:1d:80:cc:f7:
08:76:33:bf:3c:7f:32:9b:70:fe:8d:7e:c3:1f:71:fd:7a:b0:
18:c6:fc:dc:28:af:2b:79:ca:65:e6:71:19:0f:82:95:d3:5a:
18:f6:e3:7b:e3:e3:32:fe:21:85:b7:60:af:d7:81:38:4a:01:
86:64:35:15:49:40:50:e0:01:00:ee:97:89:3c:22:52:9b:24:
c6:8d:d1:b1:69:06:75:0b:18:5e:e1:63:52:71:ab:d7:78:da:
fa:46:97:10:3a:4d:88:1f:1a:ac:d3:ec:20:b3:e5:33:11:65:
ed:f5:28:c8:49:fb:5d:63:55:06:73:d8:00:74:4a:71:84:4b:
c3:d8:d3:34:f7:f8:30:51:d3:8a:33:b9:c7:66:b7:5c:68:69:
cb:b6:b6:19
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGdgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjgy
MTIzNTZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEMzOUZGNUEyNEExNzM5
MTI3RTBFMjkyNDdEOEUwNzg0N0M0Q0YyOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQpIxmzBPDBAo0dmMh/lBNTKTJ/UDM5nuTMpRM7Bif/KZEqkuM
Gq8e61gPY7R0OeBc6kgOh5UZ7kZDqgbfjvFOO/g7IfqZZ/4G93mLNwcW2JonbcNR
/RrzBDml0BjjfTVhqoZt7zh44BN6bMIM2niPlBmp9whNBLfaX9PyBFVrw8VNK4+S
tZoH2JaBR5x7lhzrVNcvkXIyNK/mfNdLPO0LHWOybUa9mFpuPzXIC3vhUAakfV+K
hAnka+IFckMYWv8mTYGX5y+FsI3BtOlgvkQ2TmdA1KsIdldwQN2O8Y5P5nCvX7yT
PanNliIqcjuirZx29egRzthKTb0fEfNibkKJAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUw5/1okoXORJ+DikkfY4HhHxM8o8wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3c1XzFva29YT1JKLURp
a2tmWTRIaEh4TThvOC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAll1AYpznDihh3P+G8grdKEzwMVQlzObq
QJKkVJCcorGUPo47Klz4THYYgHBySkMp3MIkQIf/TZOUeULH4wQahWr6z0qjTHMh
G3BDv+w3znbRjZRvbJKD6ZzLhj3++HPzc5lzTo9WgxEdgMz3CHYzvzx/Mptw/o1+
wx9x/XqwGMb83CivK3nKZeZxGQ+CldNaGPbje+PjMv4hhbdgr9eBOEoBhmQ1FUlA
UOABAO6XiTwiUpskxo3RsWkGdQsYXuFjUnGr13ja+kaXEDpNiB8arNPsILPlMxFl
7fUoyEn7XWNVBnPYAHRKcYRLw9jTNPf4MFHTijO5x2a3XGhpy7a2GQ==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:19 2025 by rpki-client