Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/qsZW_u3IcoWg_mXdVEKVCdjCMhE.roa
File: qsZW_u3IcoWg_mXdVEKVCdjCMhE.roa (raw, json)
Hash identifier: 3jcFT1o4g/hdv267myaq3vYQF4liFHUrOIEuX3uRTsw=
Subject key identifier: AA:C6:56:FE:ED:C8:72:85:A0:FE:65:DD:54:42:95:09:D8:C2:32:11
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 15A6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qsZW_u3IcoWg_mXdVEKVCdjCMhE.roa
Signing time: Wed 17 Apr 2024 16:53:23 +0000
ROA not before: Wed 17 Apr 2024 16:53:23 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 55995
IP address blocks: 112.75.0.0/16 maxlen: 24
112.75.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5542 (0x15a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 17 16:53:23 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=AAC656FEEDC87285A0FE65DD54429509D8C23211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:a4:bb:a9:18:27:29:80:da:47:5e:1f:58:
c8:d4:23:ae:d4:6e:00:19:b1:e1:8a:00:da:ba:5f:
db:b8:4a:10:2a:3e:63:9a:77:32:18:76:e7:cf:1d:
5d:b8:2c:bd:77:0f:6a:8e:85:5a:a1:1e:0f:80:19:
77:bf:25:fe:a6:d9:89:89:29:e5:aa:71:77:6d:62:
d6:6c:b3:d3:ea:9a:37:2c:33:6f:c9:e9:43:47:ec:
9f:4f:8a:05:63:e3:35:70:83:8e:cb:6e:53:44:ff:
c5:21:a1:ca:3b:c6:2d:ec:d8:e7:d7:a7:12:25:10:
c4:a7:dd:6b:3d:35:a3:77:f4:36:71:42:53:c6:60:
dd:37:2a:f7:29:9d:d0:06:4a:38:69:a0:5d:59:36:
c7:d3:a6:05:af:06:7c:a7:ed:e6:cf:eb:4c:ca:5e:
28:cd:76:65:ab:7e:e3:b9:00:9c:ad:4c:aa:87:6b:
12:fc:05:37:a1:db:26:ea:72:24:f7:78:3f:5f:cc:
09:ae:cc:5a:60:e8:3f:93:44:4c:5f:bf:2c:f6:df:
06:64:c1:ec:76:cb:1b:65:38:7b:56:a2:18:0a:c9:
5b:94:c7:52:38:7f:42:d1:da:9a:f4:95:df:7e:51:
f2:f4:d1:8b:a0:db:05:76:17:cf:b5:8a:f2:e5:01:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:56:FE:ED:C8:72:85:A0:FE:65:DD:54:42:95:09:D8:C2:32:11
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/qsZW_u3IcoWg_mXdVEKVCdjCMhE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6c:f6:9c:e7:5b:cb:a1:91:59:dc:65:b8:ef:27:71:27:80:21:
d6:40:67:3a:3c:9a:e4:ec:fb:f0:a4:d3:0d:6c:de:ee:c6:9b:
3e:d0:b7:77:ca:07:da:da:6f:bc:be:b7:10:a4:35:2d:56:1b:
87:ab:b8:8b:78:f5:58:28:67:01:47:9d:3b:11:9b:cd:eb:8e:
8f:0e:93:ba:54:b1:3c:36:d8:87:47:2f:96:9e:3e:2a:f2:d9:
8e:7b:df:cc:68:66:fa:bb:c5:db:6b:16:1b:78:61:4e:e4:ca:
db:f7:50:b6:4a:1c:9b:92:4d:5d:5d:3c:ae:e6:e3:dd:ec:28:
51:48:c1:14:5f:c3:03:a8:b2:dd:f2:85:3c:92:34:c0:76:76:
61:62:4e:ba:da:83:64:86:6d:0b:a4:f7:28:af:95:d7:bc:28:
e0:58:f8:66:11:9a:ad:84:2a:a0:ed:61:24:a1:51:cd:da:a7:
c5:b8:0e:6e:59:63:f9:7a:a2:aa:23:f7:95:0e:69:4d:c6:3a:
18:d3:2b:f3:a4:46:a4:a3:cf:bf:83:fa:cd:47:2e:9d:dc:17:
a3:b8:8a:9a:a2:db:15:6f:ad:45:07:b6:89:10:49:76:a9:54:
7b:0c:f2:d2:e1:40:22:8a:dc:ff:98:25:3b:1a:b5:c6:2c:9e:
ff:4b:75:70
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICFaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MTcx
NjUzMjNaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKEFBQzY1NkZFRURDODcy
ODVBMEZFNjVERDU0NDI5NTA5RDhDMjMyMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCog6S7qRgnKYDaR14fWMjUI67UbgAZseGKANq6X9u4ShAqPmOa
dzIYdufPHV24LL13D2qOhVqhHg+AGXe/Jf6m2YmJKeWqcXdtYtZss9PqmjcsM2/J
6UNH7J9PigVj4zVwg47LblNE/8Uhoco7xi3s2OfXpxIlEMSn3Ws9NaN39DZxQlPG
YN03KvcpndAGSjhpoF1ZNsfTpgWvBnyn7ebP60zKXijNdmWrfuO5AJytTKqHaxL8
BTeh2ybqciT3eD9fzAmuzFpg6D+TRExfvyz23wZkwex2yxtlOHtWohgKyVuUx1I4
f0LR2pr0ld9+UfL00Yug2wV2F8+1ivLlAau9AgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUqsZW/u3IcoWg/mXdVEKVCdjCMhEwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3FzWldfdTNJY29XZ19t
WGRWRUtWQ2RqQ01oRS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEAbPac51vLoZFZ3GW47ydxJ4Ah1kBnOjya
5Oz78KTTDWze7sabPtC3d8oH2tpvvL63EKQ1LVYbh6u4i3j1WChnAUedOxGbzeuO
jw6TulSxPDbYh0cvlp4+KvLZjnvfzGhm+rvF22sWG3hhTuTK2/dQtkocm5JNXV08
rubj3ewoUUjBFF/DA6iy3fKFPJI0wHZ2YWJOutqDZIZtC6T3KK+V17wo4Fj4ZhGa
rYQqoO1hJKFRzdqnxbgObllj+XqiqiP3lQ5pTcY6GNMr86RGpKPPv4P6zUcundwX
o7iKmqLbFW+tRQe2iRBJdqlUewzy0uFAIorc/5glOxq1xiye/0t1cA==
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:41 2025 by rpki-client