Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/W6DwGJ27m3asDL3rdzUoeERCNWs.roa
File:                     W6DwGJ27m3asDL3rdzUoeERCNWs.roa (raw, json)
Hash identifier:          1tBWpc4KD2E3moe8yeLVXJoRk8uFQN8Tqv0MkJOZrN8=
Subject key identifier:   5B:A0:F0:18:9D:BB:9B:76:AC:0C:BD:EB:77:35:28:78:44:42:35:6B
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       144A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/W6DwGJ27m3asDL3rdzUoeERCNWs.roa
Signing time:             Sun 14 Apr 2024 01:53:15 +0000
ROA not before:           Sun 14 Apr 2024 01:53:15 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5194 (0x144a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 14 01:53:15 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=5BA0F0189DBB9B76AC0CBDEB773528784442356B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:62:33:01:79:89:62:95:b0:0f:bb:9e:a0:
                    79:8a:cc:ce:73:d3:04:d0:f6:e0:46:5c:6e:00:f3:
                    95:69:dc:99:c9:02:9b:8f:a2:04:a5:c6:ce:19:3d:
                    8b:e2:b9:cc:ba:50:84:32:19:39:c7:26:1d:10:01:
                    c4:57:6c:5e:ee:dd:65:91:60:ee:87:a8:06:12:62:
                    81:3d:a8:dd:66:28:70:2c:dd:dd:b9:d3:99:71:e2:
                    0b:61:0a:89:4e:c6:86:c9:03:5c:37:82:47:cb:9e:
                    88:8c:3a:06:9f:5c:db:97:98:43:8a:a4:e6:7e:a2:
                    14:67:f3:16:29:53:f7:76:99:0d:6d:d1:02:fd:87:
                    65:af:c3:b1:7d:59:02:b3:6e:af:80:c2:f4:48:de:
                    b2:75:67:52:e1:a8:a4:7e:51:09:b8:2f:f6:37:ba:
                    b3:6e:9b:e4:a1:6f:6d:5a:d6:39:0a:bd:0f:c7:7d:
                    c9:23:6f:89:a6:1f:82:88:e6:8a:fd:6c:75:a4:8c:
                    27:41:f8:f7:3c:9e:07:cc:ef:12:34:3f:57:eb:9a:
                    ca:05:49:b4:e9:79:d7:3f:f8:a1:68:98:f9:de:77:
                    10:be:c2:d7:ae:92:a9:7f:a7:eb:3e:d7:80:4a:c1:
                    59:d2:da:f1:6d:d5:53:b9:cd:a6:2a:ad:b3:0a:75:
                    1a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:A0:F0:18:9D:BB:9B:76:AC:0C:BD:EB:77:35:28:78:44:42:35:6B
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/W6DwGJ27m3asDL3rdzUoeERCNWs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:46:13:ed:8a:08:19:f5:32:37:85:d2:30:a5:4e:94:2a:c9:
         d8:2a:76:0b:8a:92:aa:ce:c9:bb:e1:aa:9e:97:aa:b2:b3:27:
         cb:af:f4:ff:ed:86:41:66:84:99:04:ed:95:59:12:34:18:bb:
         d1:5b:87:1d:a7:b6:7f:2f:3a:c9:0b:00:45:0d:f2:e7:53:b6:
         79:c9:de:2b:f2:78:5a:c8:a5:74:77:be:50:96:ff:8a:e1:c2:
         74:55:ec:55:fa:87:86:c6:e3:3b:94:93:dc:49:6a:a5:f3:ed:
         c9:67:88:2a:be:35:38:1d:c6:d3:c2:f1:af:a2:6a:5c:5e:68:
         3a:20:66:9b:08:94:22:c2:c2:f2:c8:27:9f:cf:f2:6b:ba:45:
         e5:53:e9:97:5e:a9:c0:59:b1:53:20:77:5e:10:c8:1e:3c:be:
         40:7e:3b:79:77:31:e9:f6:06:cc:08:ad:36:20:bc:1f:2b:98:
         24:49:b4:0b:47:bf:93:50:33:c8:91:e3:54:a2:10:f9:c2:54:
         fb:5a:d6:86:88:1e:43:40:e1:26:6e:01:fd:5a:db:47:dd:a1:
         8f:d9:b5:c5:d4:08:b4:6c:77:89:95:b4:c0:82:5b:d3:0e:ed:
         f2:85:05:de:fd:ae:27:b4:88:9a:74:99:4a:8e:db:ce:5e:ef:
         ea:68:df:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:12:31 2025 by rpki-client