Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7xj5EiBUeY232apAwHgs1ZeLqhE.roa
File: 7xj5EiBUeY232apAwHgs1ZeLqhE.roa (raw, json)
Hash identifier: 09T8Th6DKGUh2gYSy9l+Lum1DrH2uNfI7bZGObAvG+k=
Subject key identifier: EF:18:F9:12:20:54:79:8D:B7:D9:AA:40:C0:78:2C:D5:97:8B:AA:11
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0697
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7xj5EiBUeY232apAwHgs1ZeLqhE.roa
Signing time: Wed 19 Apr 2023 01:37:56 +0000
ROA not before: Wed 19 Apr 2023 01:37:56 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 996
IP address blocks: 112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1687 (0x697)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 19 01:37:56 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=EF18F9122054798DB7D9AA40C0782CD5978BAA11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:f5:71:9a:a7:ff:94:b8:70:9f:70:ca:e2:
fc:c0:c1:3a:cd:ce:35:0a:79:30:80:6f:c5:35:72:
af:72:63:de:3e:b9:bc:c5:66:48:46:47:bc:d1:80:
58:30:57:c2:77:bd:90:5d:28:6a:11:c7:31:02:8e:
19:26:83:d9:7d:d5:c4:55:89:db:3a:0e:7c:90:00:
a8:a6:26:f1:e9:68:a9:32:38:05:78:24:5f:ad:5a:
f0:b7:9c:47:37:82:15:ee:17:fa:d7:f9:07:a2:18:
b6:b9:75:2e:56:d1:3f:60:85:8f:c7:79:4b:c6:52:
64:18:84:f8:9f:1a:6e:db:15:f6:d4:ff:a6:72:f9:
06:f4:5d:53:7c:ce:10:08:ec:55:0d:8c:19:5a:9d:
c1:43:67:e1:58:59:7a:df:31:71:8a:68:cc:81:7d:
1e:12:80:8e:0b:9d:c0:74:2d:c5:10:df:0a:f4:61:
1e:06:da:f1:d8:8f:1f:42:cc:1e:83:44:a1:68:34:
ad:08:2a:b8:3a:8f:11:ac:30:f8:6d:90:96:ad:34:
db:f4:42:a5:55:72:a8:fa:90:ae:97:28:c5:50:7d:
b5:3a:90:4f:5e:e0:18:06:da:05:29:2e:fe:8d:a9:
42:e9:44:5d:ab:2f:b4:6c:21:44:15:72:82:79:77:
24:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:18:F9:12:20:54:79:8D:B7:D9:AA:40:C0:78:2C:D5:97:8B:AA:11
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7xj5EiBUeY232apAwHgs1ZeLqhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
95:f2:bb:9f:a8:a7:cb:2b:89:7b:3f:1a:0d:f1:aa:fd:a6:16:
cf:da:b1:e2:f1:bc:de:51:9b:c8:13:da:bf:15:3c:9e:61:98:
2a:6f:9c:03:b4:a6:da:e8:f8:15:26:de:bd:24:e4:34:9c:29:
37:88:ed:dc:5b:6d:ad:a6:85:fc:19:ea:3e:f3:d9:ee:22:6f:
43:d7:06:ee:2a:24:31:20:0e:f5:c7:f8:c2:18:cd:e9:3c:4e:
b7:fa:ec:2d:ae:4c:79:2d:55:c5:34:60:02:29:3a:e6:0e:1b:
0b:75:52:b1:58:e1:92:31:0b:e3:3a:25:f9:9e:c9:82:1c:05:
70:3f:69:60:8b:39:1e:6c:d8:f6:3c:d2:19:15:3c:4c:32:99:
55:1d:f0:8a:ad:aa:38:42:8e:38:ad:23:80:84:73:ba:15:ee:
dd:6c:59:ff:74:f5:57:eb:2e:7e:fb:ab:22:94:b5:e2:8b:dd:
08:9a:8a:b1:78:76:ea:11:ce:33:48:93:a0:18:9d:25:bd:52:
f7:1c:ad:e4:97:8f:84:52:66:53:6f:2f:1c:67:43:de:79:4a:
75:c6:71:00:a6:ed:ab:7f:46:1d:ea:a2:39:48:5f:6b:85:70:
2f:d0:5f:55:5a:bd:98:01:e4:3d:c5:22:9a:fb:8e:37:72:79:
47:62:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org