Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Usq3Fy9qE6Kr3fod5Wdy4hjORPg.roa
File: Usq3Fy9qE6Kr3fod5Wdy4hjORPg.roa (raw, json)
Hash identifier: ABeqRYPzfCsjYsDUxK0OuxEqvDx6ucjLlVuO87NzokM=
Subject key identifier: 52:CA:B7:17:2F:6A:13:A2:AB:DD:FA:1D:E5:67:72:E2:18:CE:44:F8
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1318
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Usq3Fy9qE6Kr3fod5Wdy4hjORPg.roa
Signing time: Wed 10 Apr 2024 21:23:11 +0000
ROA not before: Wed 10 Apr 2024 21:23:11 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4888 (0x1318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 10 21:23:11 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=52CAB7172F6A13A2ABDDFA1DE56772E218CE44F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a5:27:d6:42:36:28:1a:24:f7:13:fe:ff:78:
ed:1f:51:9e:3f:e0:58:bc:19:7b:74:76:8d:b5:ee:
d3:b9:02:f5:80:bc:25:80:08:65:c2:f3:4d:df:60:
70:75:60:58:cf:b9:1e:e3:b7:a1:8f:cc:ba:a3:77:
23:6b:0c:f5:fd:e5:29:d4:ac:01:37:dc:d0:b0:22:
41:67:d7:7d:27:26:d0:6a:e9:83:d1:36:68:2b:09:
eb:7e:9b:b8:2b:2a:87:66:11:69:94:01:17:04:03:
c4:35:4c:e3:5e:18:d2:36:d4:1c:f9:e4:63:2b:4a:
a2:a9:1d:e5:30:ba:dd:7c:21:08:64:aa:f2:58:0f:
99:8f:cc:68:a8:88:79:37:5d:78:a1:46:5b:b3:d4:
57:1f:1c:f9:23:35:35:1b:bc:09:e8:da:b0:5a:ed:
db:44:d2:14:f7:dd:ca:05:69:ea:c6:f3:bb:07:b6:
5e:13:27:33:96:bf:4f:d5:a6:c1:55:c5:0b:47:de:
a1:4b:80:ec:57:07:e9:c6:33:18:98:2d:00:96:f2:
2d:e9:3d:40:2f:f9:1b:16:6d:92:eb:11:4b:a0:65:
be:a4:64:ec:ab:ad:45:29:26:24:fe:a5:b4:27:f2:
83:2d:88:1e:3b:3f:bb:ad:de:27:61:04:7a:bf:bc:
8a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CA:B7:17:2F:6A:13:A2:AB:DD:FA:1D:E5:67:72:E2:18:CE:44:F8
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Usq3Fy9qE6Kr3fod5Wdy4hjORPg.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:02:a2:9c:eb:53:e2:07:3e:9a:52:b0:9d:5b:f5:38:99:a7:
48:5a:1c:a5:f4:5a:ff:78:ba:27:fc:b1:04:aa:55:50:51:57:
16:7d:54:a6:00:9e:34:65:71:23:ea:6a:73:1e:4a:ea:da:37:
1d:fb:8a:57:70:69:70:e7:75:ff:99:5c:54:2e:1d:d8:56:07:
c6:06:ba:e5:25:05:18:69:d3:8e:1f:d9:5a:d7:47:8c:45:28:
15:5f:ae:45:f6:a3:f6:59:f0:2b:1f:d2:b4:ae:8c:f3:16:17:
1a:3d:33:e9:04:05:57:33:9a:2d:c6:86:52:99:1d:7b:2c:b2:
07:7b:cd:a9:9e:c0:a5:f2:18:e6:13:2d:3f:d5:49:91:c5:6c:
04:2c:b4:b5:24:36:48:65:a5:cd:41:b2:5b:79:96:10:89:21:
f8:b2:f4:39:8f:c2:4e:54:75:f8:40:83:82:aa:2a:21:11:8d:
09:e8:ac:bf:17:6a:03:f5:1c:a9:5d:7f:aa:5b:9c:d4:bd:3e:
2b:88:e5:3e:5d:5a:86:e7:6c:29:31:ed:b9:46:aa:81:61:6a:
42:09:55:a4:bb:ee:68:76:f7:21:c2:16:19:9d:30:70:fa:8d:
89:37:bd:df:6c:72:e6:f0:5b:18:8e:85:3e:e1:77:0b:41:17:
fc:f2:e1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:24 2025 by rpki-client