Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/sHn1p_1unQlbaypgPtry3WiAhlY.roa
File:                     sHn1p_1unQlbaypgPtry3WiAhlY.roa (raw, json)
Hash identifier:          a0a0+wgGgUT5Y9KI1ommqMpUDYwthDD4D5p2U1CXlfA=
Subject key identifier:   B0:79:F5:A7:FD:6E:9D:09:5B:6B:2A:60:3E:DA:F2:DD:68:80:86:56
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1BA6
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sHn1p_1unQlbaypgPtry3WiAhlY.roa
Signing time:             Fri 03 May 2024 16:54:14 +0000
ROA not before:           Fri 03 May 2024 16:54:14 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7078 (0x1ba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  3 16:54:14 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=B079F5A7FD6E9D095B6B2A603EDAF2DD68808656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:cb:aa:93:bf:e1:bd:91:0f:ca:d1:9b:48:
                    f5:59:d5:65:22:f6:e1:bb:fe:96:1e:61:99:ff:74:
                    d5:ce:69:26:2e:6a:0a:39:b4:e4:42:35:81:a9:5c:
                    eb:cf:43:20:26:ff:68:ed:9e:3f:c0:b8:6b:3e:ea:
                    a0:53:82:d3:6b:16:20:7d:14:bf:29:18:41:16:2a:
                    64:ed:30:e9:06:32:69:49:1b:c8:53:72:43:26:60:
                    fb:70:a9:76:39:20:2f:db:3c:ac:9a:66:dd:10:5b:
                    65:64:af:10:0c:2b:9d:06:e6:39:f3:90:cf:59:a7:
                    0f:d3:a6:af:ce:22:5e:b7:7b:72:05:e1:52:ab:02:
                    a6:7f:c8:88:cb:33:78:81:94:f4:83:e4:a5:fc:b0:
                    68:3e:f0:a3:03:d3:f7:1b:8a:ff:06:ce:03:91:e1:
                    30:ab:e9:dc:ed:5f:c0:27:9a:dc:1e:4b:75:46:c1:
                    24:65:6b:07:0a:27:85:ed:c6:ea:93:20:d1:7a:35:
                    07:30:56:22:68:ac:8e:13:ff:00:8d:5f:3f:a2:c3:
                    4e:83:fe:1b:91:b1:14:37:0a:b3:02:ac:8f:12:a8:
                    ff:98:c7:fa:93:a2:3b:ba:43:9c:58:7b:b1:7e:92:
                    38:4e:b4:2e:8c:eb:3d:e5:86:00:f5:0e:24:fd:21:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:F5:A7:FD:6E:9D:09:5B:6B:2A:60:3E:DA:F2:DD:68:80:86:56
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/sHn1p_1unQlbaypgPtry3WiAhlY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d2:e0:6b:70:39:d5:17:88:2f:91:bf:54:34:b6:1e:f1:82:6a:
         79:45:27:00:16:17:b1:e9:df:5c:de:82:a8:f7:8f:a9:2b:04:
         89:85:08:a6:5a:db:c8:80:7b:50:03:46:2f:ce:4b:c1:af:7c:
         fa:36:ce:38:ff:1f:99:d7:6a:80:70:b7:35:82:1e:be:4d:88:
         12:99:8c:92:b3:72:1b:71:a3:c1:91:d0:37:eb:76:2c:c4:f1:
         97:0a:90:dd:88:0c:18:39:e1:15:77:93:92:df:14:97:93:ca:
         dc:fc:c3:0d:3d:39:44:7b:63:80:ef:ee:77:3c:45:f0:db:2d:
         c0:a7:93:e4:58:9d:6c:52:7b:d1:c7:76:32:78:3f:6c:7a:0e:
         b5:4a:db:44:aa:21:c2:d5:b4:3e:a1:37:c2:3a:44:90:df:b9:
         05:06:03:ae:33:a7:69:86:fc:61:5f:19:ba:f3:ae:41:b4:42:
         44:2c:38:b1:ed:51:6f:e0:27:1c:27:d8:04:ea:7e:e2:48:f1:
         53:d5:94:45:8c:12:5d:01:1a:56:d2:ba:a8:26:40:63:84:a7:
         10:16:f7:e9:53:67:6b:8d:fe:5b:a4:d2:71:19:a3:ce:6a:3f:
         bb:4d:3a:dc:c4:ff:39:0e:f2:a2:b3:70:2e:f1:26:22:13:88:
         2a:ef:3a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:00:04 2025 by rpki-client