Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/aboQGbMBBZLaDRbHHLb5ETrhKz0.roa
File: aboQGbMBBZLaDRbHHLb5ETrhKz0.roa (raw, json)
Hash identifier: Wrx4oKTBNXpC2pEDmZEcs6onLz8xszKLWe3Bed7Swh0=
Subject key identifier: 69:BA:10:19:B3:01:05:92:DA:0D:16:C7:1C:B6:F9:11:3A:E1:2B:3D
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 14A0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aboQGbMBBZLaDRbHHLb5ETrhKz0.roa
Signing time: Sun 14 Apr 2024 23:23:19 +0000
ROA not before: Sun 14 Apr 2024 23:23:19 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5280 (0x14a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 14 23:23:19 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=69BA1019B3010592DA0D16C71CB6F9113AE12B3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:49:ec:08:1e:cc:2b:6e:2f:d3:ec:6d:88:30:
df:54:39:68:4f:ea:ca:c4:42:74:f8:11:d4:dc:75:
f6:97:6f:73:1b:04:e3:e7:67:af:fd:67:fc:9e:ef:
b0:84:f0:e0:f9:61:d6:88:16:ed:b8:e9:ce:dc:d1:
44:69:01:d3:3d:cc:8b:9a:a7:df:e0:18:57:e1:1a:
cf:51:90:a4:4d:29:4d:65:28:57:a7:91:75:83:0f:
cd:78:d4:76:f0:05:0d:a9:bf:98:15:83:4d:32:7a:
e0:28:e6:e2:c1:03:52:dc:22:3b:12:40:02:cc:76:
2d:f3:1a:0c:11:95:6f:df:80:4b:00:62:1d:7c:13:
14:58:94:64:e7:d0:89:91:d6:57:61:3c:c9:4b:fc:
22:d1:ea:34:d1:95:cf:50:cb:44:80:92:4c:f7:0c:
b0:d4:a6:8e:e2:35:dd:25:bb:b7:64:10:6d:57:49:
9a:a2:77:66:2d:3d:fa:ac:c2:6b:0a:a3:dc:3a:20:
c0:48:0c:55:06:bd:de:50:ab:70:df:25:4e:27:ab:
86:a0:c0:7c:4d:d9:fb:75:79:56:bc:ed:53:9f:b4:
67:7f:2c:a1:2c:4b:09:b2:57:0f:14:ee:ea:e0:60:
fc:f6:18:31:0e:9c:0a:0e:af:4f:65:74:05:cb:4e:
dd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:BA:10:19:B3:01:05:92:DA:0D:16:C7:1C:B6:F9:11:3A:E1:2B:3D
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/aboQGbMBBZLaDRbHHLb5ETrhKz0.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:c3:4c:84:b5:3d:27:f2:cc:d9:26:0c:52:92:e7:a5:03:ba:
24:47:91:99:e1:01:ef:e8:8a:6e:55:34:be:04:35:05:06:df:
82:de:1a:7b:3b:b3:b2:57:af:0c:36:17:b5:f0:50:72:ed:d3:
66:d9:e1:e2:b6:7b:85:6c:20:82:f5:8c:33:3f:3b:76:79:48:
85:9a:25:64:3e:8e:92:80:d7:2a:61:e3:eb:ee:a9:65:01:69:
d6:ed:c6:18:31:d6:ed:1f:53:29:b6:be:76:5c:93:51:4b:e8:
c4:0b:77:2d:7d:54:9b:f9:d3:91:c4:ee:dc:79:9b:fe:c5:77:
80:01:3a:f2:36:be:22:af:df:d2:7b:1e:7a:20:37:21:50:ab:
c6:88:03:24:97:f5:85:d5:e4:bb:b8:a9:ff:4d:87:c0:35:4f:
29:fb:2f:96:f9:f2:dc:b3:9c:8f:f8:20:5b:78:d9:9c:5e:16:
ff:88:80:a7:25:14:3e:20:2a:92:16:b5:4f:17:fb:5d:14:08:
75:49:a2:ad:6c:af:f3:d0:dd:40:dc:09:66:0a:c1:81:97:6b:
30:0d:33:6e:35:54:b3:c4:15:67:16:0e:19:3e:a9:17:77:6d:
df:00:2b:ae:23:3e:65:17:0b:ff:86:93:2d:4c:76:32:43:f2:
3e:67:1b:26
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFKAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTQy
MzIzMTlaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDY5QkExMDE5QjMwMTA1
OTJEQTBEMTZDNzFDQjZGOTExM0FFMTJCM0QwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1SewIHswrbi/T7G2IMN9UOWhP6srEQnT4EdTcdfaXb3MbBOPn
Z6/9Z/ye77CE8OD5YdaIFu246c7c0URpAdM9zIuap9/gGFfhGs9RkKRNKU1lKFen
kXWDD8141HbwBQ2pv5gVg00yeuAo5uLBA1LcIjsSQALMdi3zGgwRlW/fgEsAYh18
ExRYlGTn0ImR1ldhPMlL/CLR6jTRlc9Qy0SAkkz3DLDUpo7iNd0lu7dkEG1XSZqi
d2YtPfqswmsKo9w6IMBIDFUGvd5Qq3DfJU4nq4agwHxN2ft1eVa87VOftGd/LKEs
SwmyVw8U7urgYPz2GDEOnAoOr09ldAXLTt2NAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUaboQGbMBBZLaDRbHHLb5ETrhKz0wHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL2Fib1FHYk1CQlpMYURS
YkhITGI1RVRyaEt6MC5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEACsNMhLU9J/LM2SYMUpLnpQO6JEeRmeEB
7+iKblU0vgQ1BQbfgt4aezuzslevDDYXtfBQcu3TZtnh4rZ7hWwggvWMMz87dnlI
hZolZD6OkoDXKmHj6+6pZQFp1u3GGDHW7R9TKba+dlyTUUvoxAt3LX1Um/nTkcTu
3Hmb/sV3gAE68ja+Iq/f0nseeiA3IVCrxogDJJf1hdXku7ip/02HwDVPKfsvlvny
3LOcj/ggW3jZnF4W/4iApyUUPiAqkha1Txf7XRQIdUmirWyv89DdQNwJZgrBgZdr
MA0zbjVUs8QVZxYOGT6pF3dt3wArriM+ZRcL/4aTLUx2MkPyPmcbJg==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:39:23 2025 by rpki-client