Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FvQRKqliPvLsAWm23tNetGaSftM.roa
File: FvQRKqliPvLsAWm23tNetGaSftM.roa (raw, json)
Hash identifier: 6ROBN2FiaEJdJA0Q/gxpkEoSO6ZrUlermkCB2ci0E50=
Subject key identifier: 16:F4:11:2A:A9:62:3E:F2:EC:01:69:B6:DE:D3:5E:B4:66:92:7E:D3
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0DF8
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FvQRKqliPvLsAWm23tNetGaSftM.roa
Signing time: Thu 28 Mar 2024 05:22:26 +0000
ROA not before: Thu 28 Mar 2024 05:22:26 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3576 (0xdf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Mar 28 05:22:26 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=16F4112AA9623EF2EC0169B6DED35EB466927ED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:0b:e5:85:02:93:7c:29:d0:1c:c8:4c:88:
3d:ca:fe:8f:cc:ce:d7:7b:f1:ff:de:15:3f:66:40:
11:c4:e0:f8:bb:b3:64:0c:41:99:99:26:93:15:f0:
0d:88:f2:63:6b:66:00:36:e0:9a:f7:7e:4f:96:cf:
0e:90:c8:74:7c:a7:6a:31:06:8f:8d:4d:3a:cc:6e:
5d:3e:01:b8:3c:72:0f:ae:16:2e:ff:70:60:3a:7d:
4b:45:d1:13:a8:5e:0b:57:40:0a:e1:46:40:27:37:
a5:f5:69:e5:a0:ec:0c:90:8d:a5:c9:b2:8f:ab:62:
34:c3:fe:22:dc:7a:5d:0f:d7:16:52:2f:73:5d:f4:
98:07:2e:14:cf:9e:00:fa:d6:a8:b1:3f:ef:11:4d:
25:55:71:0e:5f:c4:6c:b7:f8:86:53:1c:7b:e4:15:
17:3a:6e:48:20:5f:2a:ea:24:39:88:f5:c5:9c:4c:
6e:cf:d0:3d:59:45:97:66:59:7c:68:c8:cc:ff:b5:
b3:a2:2a:7d:b2:b3:72:50:a3:ad:00:43:56:f6:55:
e3:4b:49:40:69:e3:a5:05:6f:12:85:6b:81:03:bb:
6e:3b:39:c8:cb:44:d6:23:59:8d:17:3f:dd:54:92:
2a:3e:f2:72:66:f8:3d:81:a9:92:89:51:0a:be:cf:
a5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:11:2A:A9:62:3E:F2:EC:01:69:B6:DE:D3:5E:B4:66:92:7E:D3
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FvQRKqliPvLsAWm23tNetGaSftM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:b6:c7:70:0f:55:7c:8c:ae:3b:bf:10:ac:d1:6f:e9:aa:44:
7b:21:62:c7:87:9e:f4:09:19:6c:be:87:f5:bd:6e:35:9e:da:
df:4a:ab:6a:6d:85:48:d3:23:8f:14:32:de:73:9e:6f:c5:3e:
64:ae:29:45:71:39:cc:39:66:db:e0:68:98:51:96:67:6f:08:
3f:8d:0b:55:5c:ce:a2:4f:08:a2:06:79:44:cd:8a:26:02:9d:
cb:f5:ff:c0:98:23:68:c4:b5:32:ff:aa:d3:f0:4d:31:30:1e:
73:fe:ba:c4:ed:eb:ad:61:8b:34:7f:60:47:7c:0a:59:24:f9:
cf:6b:c2:67:94:ef:76:b2:d0:a1:77:58:fa:80:f5:a4:bf:14:
c6:33:9d:d1:3b:66:a8:49:50:89:27:e2:23:1a:d1:b4:65:9d:
2d:83:7a:dc:4c:ac:9c:53:e1:f0:a3:ee:25:34:f7:92:9f:2c:
7a:db:cf:10:f2:e6:48:14:20:b0:3a:1f:87:9f:7f:b9:cf:f2:
84:b2:fa:7d:b1:26:3d:94:7d:fb:b2:bd:3d:ae:69:08:65:8a:
0b:a3:cb:34:f0:35:43:4d:66:55:1a:a9:ee:3b:8f:4b:a3:d5:
69:ba:e5:7f:6c:e9:26:d8:6a:a9:02:cc:3d:d9:61:53:f7:7a:
48:d7:5e:8b
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICDfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDAzMjgw
NTIyMjZaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE2RjQxMTJBQTk2MjNF
RjJFQzAxNjlCNkRFRDM1RUI0NjY5MjdFRDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChTQvlhQKTfCnQHMhMiD3K/o/Mztd78f/eFT9mQBHE4Pi7s2QM
QZmZJpMV8A2I8mNrZgA24Jr3fk+Wzw6QyHR8p2oxBo+NTTrMbl0+Abg8cg+uFi7/
cGA6fUtF0ROoXgtXQArhRkAnN6X1aeWg7AyQjaXJso+rYjTD/iLcel0P1xZSL3Nd
9JgHLhTPngD61qixP+8RTSVVcQ5fxGy3+IZTHHvkFRc6bkggXyrqJDmI9cWcTG7P
0D1ZRZdmWXxoyMz/tbOiKn2ys3JQo60AQ1b2VeNLSUBp46UFbxKFa4EDu247OcjL
RNYjWY0XP91Ukio+8nJm+D2BqZKJUQq+z6XnAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFvQRKqliPvLsAWm23tNetGaSftMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0Z2UVJLcWxpUHZMc0FX
bTIzdE5ldEdhU2Z0TS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAY7bHcA9VfIyuO78QrNFv6apEeyFix4ee
9AkZbL6H9b1uNZ7a30qram2FSNMjjxQy3nOeb8U+ZK4pRXE5zDlm2+BomFGWZ28I
P40LVVzOok8IogZ5RM2KJgKdy/X/wJgjaMS1Mv+q0/BNMTAec/66xO3rrWGLNH9g
R3wKWST5z2vCZ5TvdrLQoXdY+oD1pL8UxjOd0TtmqElQiSfiIxrRtGWdLYN63Eys
nFPh8KPuJTT3kp8setvPEPLmSBQgsDofh59/uc/yhLL6fbEmPZR9+7K9Pa5pCGWK
C6PLNPA1Q01mVRqp7juPS6PVabrlf2zpJthqqQLMPdlhU/d6SNdeiw==
-----END CERTIFICATE-----
Generated at Thu Mar 28 10:37:31 2024 by rpki-client on console-fra.rpki-client.org