Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/ARsPkVqN6zDbK3yZDnLO2AwDIwA.roa
File: ARsPkVqN6zDbK3yZDnLO2AwDIwA.roa (raw, json)
Hash identifier: hbODl4LBbPCh8Cc1O8mS34oGNW29oMPdfWFW9qUZwKk=
Subject key identifier: 01:1B:0F:91:5A:8D:EB:30:DB:2B:7C:99:0E:72:CE:D8:0C:03:23:00
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0E5E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ARsPkVqN6zDbK3yZDnLO2AwDIwA.roa
Signing time: Fri 29 Mar 2024 06:52:29 +0000
ROA not before: Fri 29 Mar 2024 06:52:29 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3678 (0xe5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 29 06:52:29 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=011B0F915A8DEB30DB2B7C990E72CED80C032300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:89:da:39:c2:bd:f9:16:ae:27:5f:20:30:
e8:ef:1d:e5:64:23:b5:52:19:d4:ed:53:d4:95:bd:
9b:94:bc:d1:b2:b9:fd:2d:6d:5b:51:3c:50:4d:46:
c4:43:c2:9b:c5:44:51:bd:9d:b4:3e:50:29:d3:46:
c3:9b:58:0d:65:d2:45:38:df:f6:75:e5:81:ce:a4:
35:81:3f:1b:13:93:a1:57:6e:c2:ca:95:25:ff:60:
93:f0:0e:d8:77:0e:58:82:e6:f6:e8:90:06:e1:b7:
8d:a6:16:39:d4:1c:16:f7:e9:27:de:33:fa:3e:dd:
1e:45:c0:92:6a:44:92:e4:fc:c2:7e:27:17:45:7e:
06:95:5a:c8:4d:f0:f1:44:29:c5:e5:2d:d1:60:69:
8f:cf:f1:9e:6d:84:d6:c5:8b:04:c5:eb:f7:e7:8f:
b8:73:38:01:f1:0e:32:b5:de:b7:82:96:33:6f:0b:
56:e7:b8:da:c3:0c:d1:6e:55:69:65:3b:00:bf:8b:
3a:f0:37:74:1c:00:92:2c:df:31:78:53:89:e3:f1:
d6:9e:39:2b:5e:89:c2:c1:79:ad:5f:b6:a0:09:68:
d7:c4:9e:7f:78:f5:8f:ae:0f:22:56:a6:63:db:e3:
01:56:cc:9d:a8:49:7b:df:03:b0:d3:ec:ff:75:48:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1B:0F:91:5A:8D:EB:30:DB:2B:7C:99:0E:72:CE:D8:0C:03:23:00
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/ARsPkVqN6zDbK3yZDnLO2AwDIwA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:ad:30:a4:5f:6a:a7:50:b0:e9:0b:c6:58:b0:ad:47:01:73:
4d:c0:34:19:aa:be:f3:92:bb:3a:22:c2:a5:c6:f2:ce:0c:10:
d7:5f:20:16:03:31:08:cd:bf:81:c0:8f:8b:0d:18:7a:b1:cf:
a0:25:c9:74:d0:34:a8:3e:68:46:30:bc:46:24:37:ea:46:6e:
d8:ff:f7:26:a4:20:d7:69:57:32:db:7b:d5:77:48:8a:6c:9e:
29:c3:b0:ee:c6:db:48:99:e3:11:6a:46:89:ed:bb:95:ca:e2:
c1:7f:b5:7a:1c:86:e6:eb:04:74:d2:b2:31:9f:7d:97:56:86:
26:d0:f9:f4:88:8c:b2:82:8b:39:44:e2:29:7c:5d:9d:26:2c:
75:53:06:16:02:7b:78:10:f6:04:64:e0:60:98:90:5a:88:b8:
44:03:24:d4:74:b0:01:0e:f3:2b:b7:dd:2f:98:0e:d1:19:6c:
b1:77:f8:89:23:a5:b6:f2:a3:76:ba:1c:7a:cc:93:e4:e1:0c:
cd:9e:aa:c3:8d:2b:5b:26:29:09:24:24:14:5e:b0:98:c3:dc:
3d:fe:0b:ce:9a:f9:e5:e4:c9:62:4f:63:91:05:c1:d4:c4:b2:
64:2f:f2:34:a3:44:c8:3e:ac:a5:52:9a:f0:c0:99:5a:00:0e:
80:80:31:ab
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDl4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjkw
NjUyMjlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDAxMUIwRjkxNUE4REVC
MzBEQjJCN0M5OTBFNzJDRUQ4MEMwMzIzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9JInaOcK9+RauJ18gMOjvHeVkI7VSGdTtU9SVvZuUvNGyuf0t
bVtRPFBNRsRDwpvFRFG9nbQ+UCnTRsObWA1l0kU43/Z15YHOpDWBPxsTk6FXbsLK
lSX/YJPwDth3DliC5vbokAbht42mFjnUHBb36SfeM/o+3R5FwJJqRJLk/MJ+JxdF
fgaVWshN8PFEKcXlLdFgaY/P8Z5thNbFiwTF6/fnj7hzOAHxDjK13reCljNvC1bn
uNrDDNFuVWllOwC/izrwN3QcAJIs3zF4U4nj8daeOSteicLBea1ftqAJaNfEnn94
9Y+uDyJWpmPb4wFWzJ2oSXvfA7DT7P91SNiVAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUARsPkVqN6zDbK3yZDnLO2AwDIwAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0FSc1BrVnFONnpEYksz
eVpEbkxPMkF3REl3QS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAjq0wpF9qp1Cw6QvGWLCtRwFzTcA0Gaq+
85K7OiLCpcbyzgwQ118gFgMxCM2/gcCPiw0YerHPoCXJdNA0qD5oRjC8RiQ36kZu
2P/3JqQg12lXMtt71XdIimyeKcOw7sbbSJnjEWpGie27lcriwX+1ehyG5usEdNKy
MZ99l1aGJtD59IiMsoKLOUTiKXxdnSYsdVMGFgJ7eBD2BGTgYJiQWoi4RAMk1HSw
AQ7zK7fdL5gO0RlssXf4iSOltvKjdrocesyT5OEMzZ6qw40rWyYpCSQkFF6wmMPc
Pf4Lzpr55eTJYk9jkQXB1MSyZC/yNKNEyD6spVKa8MCZWgAOgIAxqw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:08 2025 by rpki-client