Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzk-jAFZr-JWYCLE7x8R2Vc0B2w.roa
File: Fzk-jAFZr-JWYCLE7x8R2Vc0B2w.roa (raw, json)
Hash identifier: 5MbAXmqsm4KbW0UicUYYzqLNKH0fQZy/zO34mqI2WIE=
Subject key identifier: 17:39:3E:8C:01:59:AF:E2:56:60:22:C4:EF:1F:11:D9:57:34:07:6C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 02D6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzk-jAFZr-JWYCLE7x8R2Vc0B2w.roa
Signing time: Tue 18 Oct 2022 00:54:16 +0000
ROA not before: Tue 18 Oct 2022 00:54:16 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 7018
IP address blocks: 112.75.0.0/17 maxlen: 24
112.75.96.0/22 maxlen: 24
112.75.100.0/22 maxlen: 24
112.75.104.0/22 maxlen: 24
112.75.108.0/22 maxlen: 24
112.75.112.0/22 maxlen: 24
112.75.116.0/22 maxlen: 24
112.75.120.0/22 maxlen: 24
112.75.124.0/22 maxlen: 24
112.75.132.0/22 maxlen: 24
112.75.140.0/22 maxlen: 24
112.75.148.0/22 maxlen: 24
112.75.156.0/22 maxlen: 24
112.75.164.0/22 maxlen: 24
112.75.172.0/22 maxlen: 24
112.75.180.0/22 maxlen: 24
112.75.188.0/22 maxlen: 24
112.75.196.0/22 maxlen: 24
112.75.204.0/22 maxlen: 24
112.75.212.0/22 maxlen: 24
112.75.220.0/22 maxlen: 24
112.75.228.0/22 maxlen: 24
112.75.236.0/22 maxlen: 24
112.75.244.0/22 maxlen: 24
112.75.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 726 (0x2d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Oct 18 00:54:16 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=17393E8C0159AFE2566022C4EF1F11D95734076C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:3f:89:af:67:16:0e:db:69:2c:75:73:33:
ed:ff:3f:3d:c9:87:47:85:e4:1c:d4:29:84:3b:81:
29:bf:3a:69:95:1d:89:85:94:67:e2:c6:fe:a5:e3:
2f:d2:c8:a0:36:26:10:e9:f6:b5:e6:ca:55:b6:0e:
72:b6:92:d1:b9:02:25:7b:1f:2a:3c:a1:8c:51:cc:
f1:a1:0c:a4:1d:4b:cd:7c:71:93:34:53:01:f2:d8:
6f:cf:e2:ba:53:87:6d:ec:df:5e:35:db:e0:1b:bd:
e3:25:50:df:74:90:db:77:9c:b3:a7:3a:ad:00:f7:
bc:8b:69:db:3a:cb:38:4c:17:a6:5c:43:02:56:d5:
c6:97:10:ae:4b:c1:ae:59:7a:a9:0f:1c:03:eb:a5:
a5:55:b6:20:ae:78:fb:f5:5a:2f:03:a6:f3:fa:86:
f0:0e:9d:b1:d4:3e:76:b5:dc:5a:8d:7f:a7:c2:43:
60:f6:51:80:c6:30:2f:cb:4a:1d:4e:ad:c7:d0:2f:
4e:93:c3:9c:56:51:a9:e1:f6:3d:a8:3a:a1:a8:ed:
71:f2:51:fb:ec:44:a1:4f:2f:8b:2a:4e:ff:cb:38:
c6:c3:77:b5:b4:3f:00:09:93:ef:f5:a5:d1:5b:e9:
a6:e4:34:50:0a:f0:2b:f9:2b:33:9b:cc:5b:78:ce:
79:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:39:3E:8C:01:59:AF:E2:56:60:22:C4:EF:1F:11:D9:57:34:07:6C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Fzk-jAFZr-JWYCLE7x8R2Vc0B2w.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/17
112.75.132.0/22
112.75.140.0/22
112.75.148.0/22
112.75.156.0/22
112.75.164.0/22
112.75.172.0/22
112.75.180.0/22
112.75.188.0/22
112.75.196.0/22
112.75.204.0/22
112.75.212.0/22
112.75.220.0/22
112.75.228.0/22
112.75.236.0/22
112.75.244.0/22
112.75.252.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:91:b3:ff:10:51:66:82:a9:df:ac:57:76:29:3b:8e:d7:e8:
63:7e:eb:3f:f2:67:da:52:d9:29:9c:47:01:17:98:4c:16:ed:
7c:d7:cc:71:e5:bf:f9:31:86:15:f1:c3:d6:f4:95:58:9a:c1:
57:2b:bc:f3:0c:e8:94:54:6e:53:8d:1a:39:ae:a5:d2:ed:98:
69:49:50:77:0b:89:b9:43:80:5b:cc:ea:5a:cc:62:38:7f:fa:
da:f7:9c:d4:ee:5e:69:43:bd:fb:39:79:6a:7f:50:6a:93:56:
70:a0:1d:e0:63:96:4d:16:16:0b:ce:ea:22:ff:45:54:9e:b8:
ff:69:03:35:16:5c:3d:f6:26:ee:3f:c5:c5:97:fe:c8:1b:67:
a4:c8:2d:f3:35:3d:7c:b2:94:b9:09:3b:c9:bb:96:a0:06:bf:
c1:0c:15:0d:15:8f:fb:d2:d0:41:45:d9:2a:92:78:b5:50:1f:
62:51:2f:3c:cf:18:e2:2b:2e:b0:93:5f:ea:f0:e5:e8:82:ef:
5b:b3:64:79:f1:45:a1:3b:47:de:2a:46:ca:cc:d6:44:f0:79:
9a:b4:2a:e3:a6:cd:c7:f5:fd:da:8a:e9:30:54:2f:4c:19:aa:
80:b4:e3:bd:be:01:83:9c:74:30:4f:64:40:c9:63:da:fa:8f:
ff:45:c2:92
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgICAtYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yMjEwMTgw
MDU0MTZaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDE3MzkzRThDMDE1OUFG
RTI1NjYwMjJDNEVGMUYxMUQ5NTczNDA3NkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+2z+Jr2cWDttpLHVzM+3/Pz3Jh0eF5BzUKYQ7gSm/OmmVHYmF
lGfixv6l4y/SyKA2JhDp9rXmylW2DnK2ktG5AiV7Hyo8oYxRzPGhDKQdS818cZM0
UwHy2G/P4rpTh23s31412+AbveMlUN90kNt3nLOnOq0A97yLads6yzhMF6ZcQwJW
1caXEK5Lwa5ZeqkPHAPrpaVVtiCuePv1Wi8DpvP6hvAOnbHUPna13FqNf6fCQ2D2
UYDGMC/LSh1OrcfQL06Tw5xWUanh9j2oOqGo7XHyUfvsRKFPL4sqTv/LOMbDd7W0
PwAJk+/1pdFb6abkNFAK8Cv5KzObzFt4znnLAgMBAAGjggJRMIICTTAdBgNVHQ4E
FgQUFzk+jAFZr+JWYCLE7x8R2Vc0B2wwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL0Z6ay1qQUZaci1KV1lD
TEU3eDhSMlZjMEIydy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwfwYIKwYBBQUHAQcBAf8EcDBuMGwEAgABMGYD
BAdwSwADBAJwS4QDBAJwS4wDBAJwS5QDBAJwS5wDBAJwS6QDBAJwS6wDBAJwS7QD
BAJwS7wDBAJwS8QDBAJwS8wDBAJwS9QDBAJwS9wDBAJwS+QDBAJwS+wDBAJwS/QD
BAJwS/wwDQYJKoZIhvcNAQELBQADggEBALmRs/8QUWaCqd+sV3YpO47X6GN+6z/y
Z9pS2SmcRwEXmEwW7XzXzHHlv/kxhhXxw9b0lViawVcrvPMM6JRUblONGjmupdLt
mGlJUHcLiblDgFvM6lrMYjh/+tr3nNTuXmlDvfs5eWp/UGqTVnCgHeBjlk0WFgvO
6iL/RVSeuP9pAzUWXD32Ju4/xcWX/sgbZ6TILfM1PXyylLkJO8m7lqAGv8EMFQ0V
j/vS0EFF2SqSeLVQH2JRLzzPGOIrLrCTX+rw5eiC71uzZHnxRaE7R94qRsrM1kTw
eZq0KuOmzcf1/dqK6TBUL0wZqoC0472+AYOcdDBPZEDJY9r6j/9FwpI=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org