Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7_mMZenhiX9N9p0gCVui-hqKVeo.roa
File: 7_mMZenhiX9N9p0gCVui-hqKVeo.roa (raw, json)
Hash identifier: D+ub90EDU3ArsGVJ2znMsah+wMTAuOlVqxQp6f3SF6I=
Subject key identifier: EF:F9:8C:65:E9:E1:89:7F:4D:F6:9D:20:09:5B:A2:FA:1A:8A:55:EA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14B0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7_mMZenhiX9N9p0gCVui-hqKVeo.roa
Signing time: Mon 15 Apr 2024 03:23:17 +0000
ROA not before: Mon 15 Apr 2024 03:23:17 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5296 (0x14b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 15 03:23:17 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=EFF98C65E9E1897F4DF69D20095BA2FA1A8A55EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:7a:b0:1b:06:49:f1:54:31:ed:d1:c0:59:
09:fe:e4:18:b3:19:93:df:70:95:a6:d4:b8:8a:d2:
4d:f4:70:0d:8d:08:b4:e9:25:d7:90:e7:8a:24:61:
af:cf:7b:0a:03:dc:58:e2:02:1d:43:2a:16:b1:6f:
bd:8c:0f:1a:e5:48:3b:a9:e9:55:8b:a8:9e:9b:b0:
c9:d0:9f:d9:64:52:86:8b:ee:97:36:67:a9:af:2e:
d9:57:5f:cc:07:48:e2:e7:eb:56:62:e7:cc:3d:cf:
1b:a7:8b:12:91:81:a9:ae:e0:d7:5e:b4:9f:ef:8e:
0f:df:5d:73:02:14:14:ac:b6:bd:24:9c:df:dc:f2:
6f:3f:b9:b6:a4:a6:6e:1c:36:ad:63:66:d2:d5:cb:
ff:94:88:0f:d8:c6:e2:33:ac:73:ff:c0:0c:a2:31:
48:5d:13:22:b4:79:7c:14:aa:12:b0:a3:a1:59:ed:
8b:fb:88:a4:a9:4a:ed:71:2d:19:23:4e:c2:fc:83:
a8:b1:0f:7c:02:0b:f1:c3:7f:64:73:9a:db:cb:42:
83:26:05:26:53:5f:2b:ed:84:ca:85:97:09:17:39:
41:57:6e:b8:e0:a0:b2:0a:ca:15:1a:0e:a3:ec:e9:
4e:7b:32:4e:2a:fe:ea:8d:ee:91:a8:b7:04:ae:b2:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:8C:65:E9:E1:89:7F:4D:F6:9D:20:09:5B:A2:FA:1A:8A:55:EA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7_mMZenhiX9N9p0gCVui-hqKVeo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ba:20:78:65:9e:27:b1:da:73:b9:73:e5:86:62:dd:be:a3:24:
62:6b:e4:44:c9:aa:13:7b:e5:4c:6a:b4:2b:74:b8:17:9a:3c:
23:b1:1c:c9:84:5a:bb:bf:b8:0e:ff:07:62:a1:7a:34:b3:cb:
38:9f:a2:7f:9c:d9:1e:2c:57:49:c2:67:d8:4d:35:ab:af:8d:
49:77:43:89:30:74:d6:65:da:1c:3a:b0:8c:b1:77:58:02:80:
f8:04:d4:c6:4f:02:07:b4:49:f2:3b:54:59:44:c5:7c:f1:a1:
2c:a4:fb:99:3d:f3:8d:9e:8e:50:c9:36:dd:35:e9:42:96:6d:
46:14:e2:70:97:d9:ad:6c:b1:5c:44:a3:ea:44:d6:67:c7:fa:
30:5f:c2:95:dd:b5:7c:04:71:47:c2:26:f0:16:bb:a6:3e:76:
c9:c9:28:00:a8:52:b6:c2:34:0d:ad:61:21:74:93:10:95:f9:
36:f9:57:c2:17:4a:4c:50:b6:08:85:45:d1:c2:ee:3e:8c:ac:
76:a7:89:dc:60:43:79:77:8d:ca:db:09:11:50:b3:5c:f0:c6:
50:11:0b:7e:57:56:cc:d2:b5:8c:23:5c:24:b6:55:00:3d:77:
da:1e:1e:0b:db:a7:b1:6f:22:b4:02:3d:bf:99:86:37:a3:ff:
a4:09:fa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:02:14 2025 by rpki-client