Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/k2n2D7N5teGyv7BP84tHTJJSrmw.roa
File: k2n2D7N5teGyv7BP84tHTJJSrmw.roa (raw, json)
Hash identifier: vNGXxmv8SoTsDEL/cP4mhCBaErU7RGBd19nXJoRnUeE=
Subject key identifier: 93:69:F6:0F:B3:79:B5:E1:B2:BF:B0:4F:F3:8B:47:4C:92:52:AE:6C
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 1C68
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k2n2D7N5teGyv7BP84tHTJJSrmw.roa
Signing time: Sun 05 May 2024 17:24:20 +0000
ROA not before: Sun 05 May 2024 17:24:20 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7272 (0x1c68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: May 5 17:24:20 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=9369F60FB379B5E1B2BFB04FF38B474C9252AE6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e3:aa:c6:a4:ef:0f:8b:f3:37:b3:69:ab:09:
42:bf:83:d8:62:a8:98:9b:6d:5a:2c:90:39:b9:1e:
c8:96:d3:58:b8:f4:56:7a:2d:f2:14:c8:31:58:7c:
ba:44:e5:ec:e0:95:47:45:4f:73:2b:4a:9c:fa:6f:
71:86:19:06:6b:9c:52:fc:bd:12:d3:e9:80:dd:3a:
f0:8f:23:9d:4e:9f:af:dc:cf:a5:7b:6e:20:9a:00:
c7:00:53:50:57:ef:93:45:1a:30:19:18:c0:07:45:
e0:4b:a7:3f:7e:6c:16:ee:2c:af:11:17:d3:93:11:
ff:d3:62:62:f7:b4:18:1d:ee:d7:95:41:19:db:50:
7f:da:bd:73:eb:43:55:6b:7f:b1:4a:f8:dc:8f:dd:
46:ab:c3:27:ff:12:d8:75:23:bd:f5:3c:c4:ca:d6:
8f:b9:ed:e9:ac:22:7e:c5:29:63:5f:43:71:c1:29:
1f:d8:d7:ac:e2:e8:ef:ca:2f:c4:4b:21:ee:e6:39:
8d:7a:5d:49:45:06:94:b5:70:66:7d:bb:d3:11:42:
97:61:61:50:b1:45:8b:7f:54:2b:6b:a1:47:f5:e0:
10:c1:4c:fe:87:d5:38:ad:8d:eb:58:05:79:7c:5c:
cf:8d:31:83:4c:fd:f4:21:45:bb:10:01:1c:c8:dd:
6c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:69:F6:0F:B3:79:B5:E1:B2:BF:B0:4F:F3:8B:47:4C:92:52:AE:6C
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/k2n2D7N5teGyv7BP84tHTJJSrmw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
15:b0:32:18:66:05:5c:98:24:6f:64:a5:4b:0e:eb:56:34:68:
8d:df:d9:d9:73:bd:11:55:b6:a2:0e:43:ea:fe:41:b9:a2:81:
ce:69:7e:c5:f2:71:a0:fc:86:f8:8b:e5:52:dc:7d:c1:a0:9e:
5a:b4:25:ba:f1:31:05:3c:a1:c9:33:7b:44:65:df:f6:a4:20:
c0:0e:27:35:27:87:72:50:fa:01:8e:a4:f8:07:c7:0a:2f:9b:
a9:9c:0e:18:5e:37:a0:03:02:4c:5e:02:c3:8b:f2:46:4c:47:
03:dd:85:5b:d6:34:c8:7d:22:bd:3c:49:d8:6c:59:b2:0d:8d:
9b:d2:b9:24:9b:ac:31:0b:f5:6f:99:ef:3d:04:58:68:04:69:
64:4b:dd:fe:a9:97:20:3b:9d:9e:4d:54:b6:fc:26:db:b5:1c:
3e:dd:da:34:3f:fc:86:75:6b:29:3b:25:cc:04:19:c9:a1:df:
80:e7:be:17:52:19:34:0c:c5:75:e7:41:77:09:49:cf:f6:45:
c5:6c:13:f5:44:0a:36:94:5c:a4:74:af:1d:0b:d9:ff:18:a0:
65:37:87:8d:7f:ef:e6:93:de:95:9c:67:80:05:a5:2f:88:56:
c8:37:78:6e:e5:20:de:a0:0a:9c:7e:de:0f:9a:97:cd:ee:63:
fa:22:ab:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:40:40 2025 by rpki-client