Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FzWzj1KqCRCGZjJgwXfwJNocHbo.roa
File: FzWzj1KqCRCGZjJgwXfwJNocHbo.roa (raw, json)
Hash identifier: rw5BhEg41mSFdvLk6MOf6L7UKz6fk7XOtwRy5ntc0So=
Subject key identifier: 17:35:B3:8F:52:AA:09:10:86:66:32:60:C1:77:F0:24:DA:1C:1D:BA
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1A1A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FzWzj1KqCRCGZjJgwXfwJNocHbo.roa
Signing time: Mon 29 Apr 2024 13:54:47 +0000
ROA not before: Mon 29 Apr 2024 13:54:47 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6682 (0x1a1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 29 13:54:47 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=1735B38F52AA091086663260C177F024DA1C1DBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:77:08:4a:28:80:6a:cd:91:4b:9c:e6:72:29:
4f:38:05:7e:9e:8f:56:5e:0f:15:47:a8:c2:eb:8d:
14:bc:0a:ea:55:ba:95:cd:0c:95:66:5c:62:d8:f6:
f7:86:c6:e1:1c:ff:9c:08:3e:7a:c9:89:ba:ec:41:
0c:e5:29:5a:28:87:09:a7:d9:e6:00:28:4c:3a:25:
64:f5:f2:23:32:c4:d4:aa:bd:c4:bb:27:b2:59:b5:
1c:af:97:90:9f:15:08:c1:dc:dc:04:96:28:dd:96:
2a:19:c0:0d:f1:15:24:3e:8b:d5:7c:42:e7:f2:30:
8a:8d:e9:47:af:2c:e4:13:04:94:49:f8:65:cf:ac:
14:21:a0:c1:ba:6d:c6:e0:50:7b:28:89:c7:dc:59:
2d:d4:86:c3:80:78:bf:8c:96:69:83:f2:1c:c9:35:
4f:fd:15:b0:ae:e6:fc:1c:05:f1:fd:8f:3d:c9:c8:
34:bc:ec:ee:96:17:c2:da:0b:d5:02:32:b7:a0:9b:
b4:3d:fc:63:c4:ff:8e:ad:d4:e4:91:e4:f2:f3:97:
08:86:18:38:35:bb:ed:67:20:8d:08:14:4a:e1:bb:
4b:40:88:41:17:1a:66:b3:e8:6f:4f:89:a6:42:47:
da:6b:bb:df:ff:0b:2c:6e:00:ae:6a:cb:99:59:3e:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:B3:8F:52:AA:09:10:86:66:32:60:C1:77:F0:24:DA:1C:1D:BA
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FzWzj1KqCRCGZjJgwXfwJNocHbo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ca:fc:68:ef:14:a0:c5:ae:f1:7f:ea:72:dc:7f:c9:b8:62:b8:
85:7d:0c:55:01:eb:fe:b9:58:ce:8d:9c:05:01:ee:d7:6b:5e:
7e:c7:e7:36:05:9c:0c:e0:4d:8f:7f:61:3d:b8:a9:71:00:de:
94:08:e0:db:9f:db:a8:9e:4f:1d:bb:40:7d:de:de:2c:34:fa:
7a:5e:9c:8a:92:1e:a0:78:ee:3a:31:2f:80:06:ad:a4:58:69:
86:01:24:e4:ea:bd:00:45:33:15:d2:71:01:49:4f:5f:f1:c9:
3b:2d:7f:91:ff:f6:48:be:f7:a9:3f:70:30:52:35:61:e0:77:
c4:2c:d4:58:dd:36:e9:b3:63:84:15:f6:ac:54:38:c1:dd:cc:
f9:9e:fc:23:72:cd:cd:11:68:12:4d:2b:1e:71:cb:d6:0f:a6:
4d:ce:2a:f7:2b:c9:71:11:18:fc:74:28:dc:3b:42:2d:5f:f0:
54:ed:bf:1c:24:3c:64:42:a2:b0:79:26:8d:c9:1b:c9:2d:7a:
a5:0b:c0:53:10:7c:c5:bd:ba:91:8f:7d:28:5b:b6:1e:b1:21:
c6:5a:06:49:ab:01:aa:1a:da:9c:ec:df:f8:55:90:6f:0b:2c:
c2:cd:fd:3f:6d:56:c7:0b:f9:bb:18:58:ae:16:f6:f5:dc:fa:
9f:08:95:53
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICGhowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0Mjkx
MzU0NDdaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDE3MzVCMzhGNTJBQTA5
MTA4NjY2MzI2MEMxNzdGMDI0REExQzFEQkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDWdwhKKIBqzZFLnOZyKU84BX6ej1ZeDxVHqMLrjRS8CupVupXN
DJVmXGLY9veGxuEc/5wIPnrJibrsQQzlKVoohwmn2eYAKEw6JWT18iMyxNSqvcS7
J7JZtRyvl5CfFQjB3NwElijdlioZwA3xFSQ+i9V8QufyMIqN6UevLOQTBJRJ+GXP
rBQhoMG6bcbgUHsoicfcWS3UhsOAeL+MlmmD8hzJNU/9FbCu5vwcBfH9jz3JyDS8
7O6WF8LaC9UCMregm7Q9/GPE/46t1OSR5PLzlwiGGDg1u+1nII0IFErhu0tAiEEX
Gmaz6G9PiaZCR9pru9//CyxuAK5qy5lZPjudAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUFzWzj1KqCRCGZjJgwXfwJNocHbowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0Z6V3pqMUtxQ1JDR1pq
Smd3WGZ3Sk5vY0hiby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAyvxo7xSgxa7xf+py3H/JuGK4hX0MVQHr
/rlYzo2cBQHu12tefsfnNgWcDOBNj39hPbipcQDelAjg25/bqJ5PHbtAfd7eLDT6
el6cipIeoHjuOjEvgAatpFhphgEk5Oq9AEUzFdJxAUlPX/HJOy1/kf/2SL73qT9w
MFI1YeB3xCzUWN026bNjhBX2rFQ4wd3M+Z78I3LNzRFoEk0rHnHL1g+mTc4q9yvJ
cREY/HQo3DtCLV/wVO2/HCQ8ZEKisHkmjckbyS16pQvAUxB8xb26kY99KFu2HrEh
xloGSasBqhranOzf+FWQbwssws39P21Wxwv5uxhYrhb29dz6nwiVUw==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:40:38 2025 by rpki-client