Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/0QKHmLBs7af8AZiKNa-_eIDyUWw.roa
File: 0QKHmLBs7af8AZiKNa-_eIDyUWw.roa (raw, json)
Hash identifier: BxgIDq+BKFe45Ecwp6Y9PbhbEKGON8/mDF1JOwplqrE=
Subject key identifier: D1:02:87:98:B0:6C:ED:A7:FC:01:98:8A:35:AF:BF:78:80:F2:51:6C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 182A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0QKHmLBs7af8AZiKNa-_eIDyUWw.roa
Signing time: Wed 24 Apr 2024 09:53:42 +0000
ROA not before: Wed 24 Apr 2024 09:53:42 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6186 (0x182a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 24 09:53:42 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=D1028798B06CEDA7FC01988A35AFBF7880F2516C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:01:0b:01:cb:08:6a:24:0a:c9:d6:fc:77:a0:
2c:54:ff:17:7d:36:a0:27:b7:de:ed:9f:24:ca:35:
7f:65:74:04:4f:67:9a:8b:88:10:25:d1:54:ae:8c:
e7:8c:b1:fc:d3:0a:81:d0:97:0f:ae:ba:d0:35:f1:
2b:50:40:5a:d2:08:2a:92:70:d4:78:2a:23:95:7f:
4c:4f:1e:d1:01:03:c8:83:bd:3d:27:01:a2:d3:e2:
b7:b4:f0:4f:12:a1:06:fe:cb:5f:bd:e7:40:25:0a:
d3:0a:d9:bc:cc:19:bc:65:1b:61:35:18:0c:22:5f:
6e:73:a2:0d:73:c4:06:0c:17:e4:84:3f:d6:82:6b:
31:7a:43:9b:e9:ed:c7:88:2c:ab:e2:9e:e5:a6:36:
a5:ca:fc:df:5e:16:7e:88:8a:a3:6d:0a:9f:59:c2:
0b:5f:1c:e8:1d:5a:59:97:b7:29:00:44:3f:74:a6:
d9:bb:42:eb:a5:32:0f:1c:8e:06:4a:2b:81:88:48:
95:9d:e8:c5:0d:ba:92:27:42:01:b0:0a:d8:14:bf:
50:51:b2:76:4d:2e:36:b1:81:9a:05:0b:fa:0c:cd:
06:2b:a6:34:84:49:b4:7b:f3:47:b4:76:bb:8a:2b:
53:73:7a:4d:4b:e7:32:23:b6:b1:48:84:79:63:20:
cd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:87:98:B0:6C:ED:A7:FC:01:98:8A:35:AF:BF:78:80:F2:51:6C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/0QKHmLBs7af8AZiKNa-_eIDyUWw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:87:3a:f7:f5:fe:bf:1b:4a:b6:9f:f4:3e:57:39:13:1f:f8:
b0:97:d5:10:1f:17:28:d0:73:02:33:eb:0f:9f:ca:63:b8:48:
a8:e1:25:b4:bc:8c:0d:cb:53:cc:14:7d:54:11:76:b4:28:72:
8b:61:0d:d8:17:96:d4:e9:55:19:45:1b:d6:b4:df:08:67:9a:
2b:ee:73:e4:ec:cd:4e:b1:79:6b:e1:3a:50:07:27:57:e3:11:
06:7d:cc:85:ea:0c:35:a2:6a:d6:e3:35:03:22:b4:12:74:90:
94:85:9a:24:06:bc:7a:3d:40:93:aa:80:6b:16:8d:01:9a:48:
ce:16:0f:38:9d:d7:98:5e:3d:10:44:0e:2d:b9:a5:ef:84:bf:
89:68:5b:83:ef:4f:e3:d4:7e:83:25:de:ad:05:9b:1b:3d:d1:
53:62:28:5e:55:14:2f:91:33:1a:ee:1e:35:8f:f6:ec:db:a9:
bf:4c:09:cb:46:6b:63:bc:3f:e6:2e:12:65:f5:d0:4f:7f:35:
03:9e:e4:de:45:07:a4:a6:14:01:82:c8:f1:c7:23:60:00:f7:
9f:82:90:db:3a:7c:8f:e7:fd:b5:11:54:05:d7:2e:a3:45:d0:
53:0c:ae:d3:0c:3a:0e:89:2e:ae:c6:52:6a:4b:96:90:c9:f7:
ce:3b:3e:43
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGCowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MjQw
OTUzNDJaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEQxMDI4Nzk4QjA2Q0VE
QTdGQzAxOTg4QTM1QUZCRjc4ODBGMjUxNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDcAQsBywhqJArJ1vx3oCxU/xd9NqAnt97tnyTKNX9ldARPZ5qL
iBAl0VSujOeMsfzTCoHQlw+uutA18StQQFrSCCqScNR4KiOVf0xPHtEBA8iDvT0n
AaLT4re08E8SoQb+y1+950AlCtMK2bzMGbxlG2E1GAwiX25zog1zxAYMF+SEP9aC
azF6Q5vp7ceILKvinuWmNqXK/N9eFn6IiqNtCp9ZwgtfHOgdWlmXtykARD90ptm7
QuulMg8cjgZKK4GISJWd6MUNupInQgGwCtgUv1BRsnZNLjaxgZoFC/oMzQYrpjSE
SbR780e0druKK1Nzek1L5zIjtrFIhHljIM3RAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQU0QKHmLBs7af8AZiKNa+/eIDyUWwwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzLzBRS0htTEJzN2FmOEFa
aUtOYS1fZUlEeVVXdy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAdYc69/X+vxtKtp/0Plc5Ex/4sJfVEB8X
KNBzAjPrD5/KY7hIqOEltLyMDctTzBR9VBF2tChyi2EN2BeW1OlVGUUb1rTfCGea
K+5z5OzNTrF5a+E6UAcnV+MRBn3MheoMNaJq1uM1AyK0EnSQlIWaJAa8ej1Ak6qA
axaNAZpIzhYPOJ3XmF49EEQOLbml74S/iWhbg+9P49R+gyXerQWbGz3RU2IoXlUU
L5EzGu4eNY/27Nupv0wJy0ZrY7w/5i4SZfXQT381A57k3kUHpKYUAYLI8ccjYAD3
n4KQ2zp8j+f9tRFUBdcuo0XQUwyu0ww6DokursZSakuWkMn3zjs+Qw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:18 2025 by rpki-client