Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/D0Fenxg0lNZ0GUUKcfUpT3Rq3aA.roa
File: D0Fenxg0lNZ0GUUKcfUpT3Rq3aA.roa (raw, json)
Hash identifier: eAJqskAsp+DF7loGTfxQlgF0o5TZ0wATvT6BO1D4l+E=
Subject key identifier: 0F:41:5E:9F:18:34:94:D6:74:19:45:0A:71:F5:29:4F:74:6A:DD:A0
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0EB4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/D0Fenxg0lNZ0GUUKcfUpT3Rq3aA.roa
Signing time: Sat 30 Mar 2024 04:22:31 +0000
ROA not before: Sat 30 Mar 2024 04:22:31 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3764 (0xeb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 30 04:22:31 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=0F415E9F183494D67419450A71F5294F746ADDA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:03:9b:25:63:b6:62:da:4d:c4:a4:26:b5:
aa:28:b3:e4:38:08:f2:2d:ce:98:bf:1b:b4:c9:9d:
dd:0e:5e:bc:69:96:34:e8:a2:82:e9:70:7e:5d:ba:
24:7f:92:b6:0e:52:61:3b:64:d4:ff:9a:dd:cf:44:
5d:80:5c:6e:bf:7e:ef:99:f5:e0:a2:00:c2:86:cb:
4c:6e:57:7c:02:62:5f:de:be:3f:1b:9d:2e:a5:bc:
74:47:02:c7:ae:ef:13:6d:55:47:1d:dc:3e:08:61:
3c:47:d5:d7:1d:8f:a2:44:60:07:b2:d6:fd:b6:96:
05:66:b0:e9:eb:bc:20:7f:53:a9:51:22:6b:30:85:
90:63:2b:c3:92:ca:ad:f2:07:d8:40:ab:f4:b1:59:
f5:08:ff:97:65:79:7c:5f:5e:6a:83:9e:a5:87:a1:
b4:f5:28:af:b9:1b:72:33:60:11:a5:74:83:5a:57:
ee:fc:3d:1b:37:f1:cb:bf:32:1e:e1:fe:3b:d7:b8:
3f:e3:36:ed:78:cf:29:1d:95:91:d2:4e:7b:b5:2a:
ae:3a:10:e0:5a:3e:f9:af:9e:31:4c:4c:8b:2a:c1:
d5:f9:4f:e3:c7:1d:aa:d7:b7:b7:c5:89:61:6b:b9:
21:0f:7a:8a:ad:23:9d:62:bf:c8:36:48:e1:65:2b:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:41:5E:9F:18:34:94:D6:74:19:45:0A:71:F5:29:4F:74:6A:DD:A0
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/D0Fenxg0lNZ0GUUKcfUpT3Rq3aA.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:65:f3:42:71:b4:43:34:18:97:3f:27:40:93:64:55:5b:c7:
34:90:9a:bf:e9:e9:ec:43:22:15:31:c2:bd:e6:7d:ea:0c:87:
03:e2:16:58:9a:6c:de:50:67:bc:f6:aa:70:35:7a:c1:d3:32:
ac:dc:8b:ad:51:bf:a0:39:93:42:73:d7:45:fc:d4:2a:04:42:
2f:c9:5c:4e:cc:93:36:9c:39:c5:b4:45:6f:54:f6:d6:77:7b:
15:b8:60:fe:b8:83:b8:18:83:01:8b:cf:5e:bb:12:1c:bd:1a:
0f:52:4d:f6:ee:7c:40:67:07:c9:0f:90:24:60:78:e0:56:a0:
b3:82:6c:6e:ab:07:ea:b0:ed:cb:0a:bc:21:82:a0:d7:f6:f2:
a5:7e:35:63:f3:1a:9c:24:92:b0:ef:87:6b:e8:57:31:77:7c:
19:09:4b:a9:e2:59:88:19:51:4e:13:d8:21:9a:b7:0f:1d:fc:
d0:0f:91:db:a9:df:1c:16:a9:84:db:72:12:fd:74:15:fd:cc:
0c:ca:b9:8e:14:f3:f4:49:5d:94:70:e9:a7:14:f8:f7:c7:70:
b1:73:18:77:1e:30:ea:89:9b:73:c1:44:80:ad:b6:89:ff:7a:
af:58:61:d6:4c:53:2b:2b:7e:7e:10:76:96:36:59:e7:01:74:
31:5c:41:e8
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMzAw
NDIyMzFaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDBGNDE1RTlGMTgzNDk0
RDY3NDE5NDUwQTcxRjUyOTRGNzQ2QUREQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhiAObJWO2YtpNxKQmtaoos+Q4CPItzpi/G7TJnd0OXrxpljTo
ooLpcH5duiR/krYOUmE7ZNT/mt3PRF2AXG6/fu+Z9eCiAMKGy0xuV3wCYl/evj8b
nS6lvHRHAseu7xNtVUcd3D4IYTxH1dcdj6JEYAey1v22lgVmsOnrvCB/U6lRImsw
hZBjK8OSyq3yB9hAq/SxWfUI/5dleXxfXmqDnqWHobT1KK+5G3IzYBGldINaV+78
PRs38cu/Mh7h/jvXuD/jNu14zykdlZHSTnu1Kq46EOBaPvmvnjFMTIsqwdX5T+PH
HarXt7fFiWFruSEPeoqtI51iv8g2SOFlK+2BAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUD0Fenxg0lNZ0GUUKcfUpT3Rq3aAwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0QwRmVueGcwbE5aMEdV
VUtjZlVwVDNScTNhQS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAsWXzQnG0QzQYlz8nQJNkVVvHNJCav+np
7EMiFTHCveZ96gyHA+IWWJps3lBnvPaqcDV6wdMyrNyLrVG/oDmTQnPXRfzUKgRC
L8lcTsyTNpw5xbRFb1T21nd7Fbhg/riDuBiDAYvPXrsSHL0aD1JN9u58QGcHyQ+Q
JGB44Fags4JsbqsH6rDtywq8IYKg1/bypX41Y/ManCSSsO+Ha+hXMXd8GQlLqeJZ
iBlRThPYIZq3Dx380A+R26nfHBaphNtyEv10Ff3MDMq5jhTz9EldlHDppxT498dw
sXMYdx4w6ombc8FEgK22if96r1hh1kxTKyt+fhB2ljZZ5wF0MVxB6A==
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:26 2025 by rpki-client