Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ytyuie6RX0KxB-076bgYlTMEHUw.roa
File:                     ytyuie6RX0KxB-076bgYlTMEHUw.roa (raw, json)
Hash identifier:          si0VbPvOelcNCYyrjweKcWBRLbPPP0QMIwwXSkqkoM0=
Subject key identifier:   CA:DC:AE:89:EE:91:5F:42:B1:07:ED:3B:E9:B8:18:95:33:04:1D:4C
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       0E74
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ytyuie6RX0KxB-076bgYlTMEHUw.roa
Signing time:             Fri 29 Mar 2024 12:22:38 +0000
ROA not before:           Fri 29 Mar 2024 12:22:38 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3700 (0xe74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Mar 29 12:22:38 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=CADCAE89EE915F42B107ED3BE9B8189533041D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:93:52:63:3e:61:17:a4:12:40:df:7a:63:24:
                    c4:b0:e3:90:6a:bc:95:73:46:2a:6e:e3:fd:cf:12:
                    f8:75:e4:23:e5:7b:bf:98:70:b7:9b:bc:62:dd:11:
                    92:97:59:d3:19:6b:9b:bb:77:6e:3b:cc:ff:b1:c1:
                    c2:32:5e:aa:bf:7f:f6:01:39:b4:79:4b:4e:91:82:
                    fa:0b:73:36:c5:94:f6:02:fc:0a:40:90:89:b7:8f:
                    f9:1a:62:d1:b5:60:82:39:70:a5:66:5d:94:03:3b:
                    1e:e9:4a:95:93:b5:d5:b6:4a:f8:42:63:53:86:be:
                    2f:15:5a:19:38:f7:47:c9:7e:31:fe:ee:dd:17:eb:
                    02:77:6a:66:31:11:f0:76:63:a2:04:fc:b0:52:3f:
                    37:20:29:d3:ba:97:7e:ca:78:46:7c:8e:cb:ec:ac:
                    e9:7e:77:bd:e5:03:58:02:85:f1:8f:ac:b2:58:66:
                    4c:64:12:2e:a0:25:d2:67:06:13:e4:25:f3:02:13:
                    37:52:58:b7:db:aa:cc:54:9e:e4:6d:83:6b:20:d3:
                    8e:f7:d3:4f:cf:25:44:f7:51:98:1f:5b:1e:4d:b9:
                    54:f1:3f:6e:1f:16:05:57:91:dc:ee:73:4e:1f:c7:
                    34:a8:14:10:8d:7a:06:26:17:28:65:42:56:3f:fa:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:AE:89:EE:91:5F:42:B1:07:ED:3B:E9:B8:18:95:33:04:1D:4C
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ytyuie6RX0KxB-076bgYlTMEHUw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d7:3c:1c:cf:81:73:48:b7:51:c7:bc:19:eb:2c:70:65:00:e5:
         21:2d:7f:1d:00:c0:9e:fc:69:35:b6:43:1c:52:16:75:8f:62:
         2f:20:d3:c4:9d:9e:df:1a:8c:dd:e8:c5:54:be:a1:87:ed:af:
         4e:98:2e:47:b0:ea:8f:06:88:69:98:41:6c:6a:2b:f9:7e:65:
         12:62:df:37:4a:47:c2:b5:6a:f4:ea:ef:17:d3:00:f1:8d:d8:
         43:39:74:a9:a9:19:ac:99:f5:96:3b:af:4b:f7:28:81:c8:1c:
         7c:7e:5e:a1:6e:fe:f9:4e:78:04:ef:98:5f:02:e1:3c:0e:29:
         59:6d:18:9d:e5:75:81:e3:b1:94:e1:5b:0f:d2:d5:a3:97:b7:
         4d:b2:3d:dc:43:b1:8c:77:ed:e9:b3:70:3e:4a:93:ed:e3:e7:
         37:4a:07:30:0f:00:5c:27:d1:84:8a:d9:3d:0c:db:6f:cb:94:
         1d:cd:f3:db:62:82:17:da:55:fc:dc:9f:1d:53:f2:e5:7a:cb:
         bb:a8:50:d2:b7:78:f1:5a:0a:dc:e8:0b:9c:a4:75:ee:98:45:
         69:a1:6a:e7:39:a9:e8:04:fe:ff:fc:64:e6:d0:b3:e3:1d:06:
         fb:db:d2:2f:3d:8a:e9:14:b4:5b:f4:92:e0:6b:73:98:02:33:
         d0:ae:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:34:48 2025 by rpki-client