Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/uVsqdoJM2JWZXiQupHPXg_I-0Fo.roa
File: uVsqdoJM2JWZXiQupHPXg_I-0Fo.roa (raw, json)
Hash identifier: dG2OQkX+Lau45AjMG9n8YDRR+ngpjVmbcKStwT8API0=
Subject key identifier: B9:5B:2A:76:82:4C:D8:95:99:5E:24:2E:A4:73:D7:83:F2:3E:D0:5A
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 0643
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uVsqdoJM2JWZXiQupHPXg_I-0Fo.roa
Signing time: Thu 13 Apr 2023 04:43:10 +0000
ROA not before: Thu 13 Apr 2023 04:43:10 +0000
ROA not after: Wed 27 Mar 2024 01:13:10 +0000
asID: 996
IP address blocks: 112.75.0.0/22 maxlen: 24
112.75.8.0/22 maxlen: 24
112.75.16.0/22 maxlen: 24
112.75.24.0/22 maxlen: 24
112.75.32.0/22 maxlen: 24
112.75.40.0/22 maxlen: 24
112.75.48.0/22 maxlen: 24
112.75.52.0/22 maxlen: 24
112.75.56.0/22 maxlen: 24
112.75.60.0/22 maxlen: 24
112.75.64.0/22 maxlen: 24
112.75.68.0/22 maxlen: 24
112.75.72.0/22 maxlen: 24
112.75.76.0/22 maxlen: 24
112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1603 (0x643)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Apr 13 04:43:10 2023 GMT
Not After : Mar 27 01:13:10 2024 GMT
Subject: CN=B95B2A76824CD895995E242EA473D783F23ED05A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f0:39:ed:99:b7:d0:88:25:fe:b0:ac:14:02:
06:76:78:2c:b3:09:a0:cb:8e:ff:9a:5c:ee:91:88:
15:5d:34:76:ec:95:23:17:5b:7a:bd:01:2c:6f:67:
e0:38:29:b7:5a:5c:6a:02:7a:44:16:8c:51:51:87:
08:a6:56:8e:fc:e9:36:81:c4:ce:78:25:8a:65:82:
ea:fc:60:c9:8d:63:58:69:23:42:ab:be:9d:ad:82:
de:a2:40:8e:64:ae:ac:46:66:3d:6f:4f:4c:47:8a:
23:5e:ab:a1:fd:f3:f3:b6:e7:66:1e:c6:41:48:36:
d2:af:4c:98:6f:e0:4d:2e:a8:1e:da:8a:f8:86:80:
da:e0:98:1f:9a:29:c3:10:32:ed:f4:1a:05:b3:da:
d8:d8:f9:ee:f1:5c:05:85:f2:03:ae:20:17:f8:c5:
70:2e:8a:cc:08:63:00:b0:c3:b1:a4:04:82:1b:05:
ca:68:15:ed:54:73:04:ff:ed:51:13:dd:fe:9a:c7:
5f:51:b8:4e:ba:e7:de:8b:b6:31:72:fc:55:c8:b3:
55:91:9f:d4:c1:4a:6f:3c:4f:11:db:f8:15:f5:40:
f4:7c:95:f4:5b:ce:8a:a4:c1:82:9b:9a:a1:89:fe:
1b:bb:5d:d0:5d:ec:bc:6a:83:78:94:29:9e:24:53:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:5B:2A:76:82:4C:D8:95:99:5E:24:2E:A4:73:D7:83:F2:3E:D0:5A
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/uVsqdoJM2JWZXiQupHPXg_I-0Fo.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.0.0/22
112.75.8.0/22
112.75.16.0/22
112.75.24.0/22
112.75.32.0/22
112.75.40.0/22
112.75.48.0-112.75.79.255
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
56:c4:62:7c:a3:67:a6:87:5b:7e:75:a1:5d:7c:a2:8b:2f:85:
ff:e9:87:99:00:3e:d4:b1:02:cc:76:58:a2:29:21:2d:22:7e:
47:07:9f:30:18:1c:5f:63:21:e1:72:8f:0a:a4:66:44:5a:4a:
8e:3f:b5:c1:41:18:2a:ad:8b:ae:d2:05:b8:83:83:06:0a:67:
38:fc:36:2e:52:d1:77:d7:e6:ac:14:07:66:4c:0d:48:ee:3e:
b2:ec:e4:ce:a3:8d:d1:e2:22:d0:5e:03:a8:ac:cb:d7:7d:34:
e5:c7:d2:60:5c:23:88:9a:75:2c:c7:ec:f1:ac:f0:d0:a2:1e:
58:e5:03:3d:9f:de:ff:41:00:e9:32:bf:5d:0d:37:c3:ae:6c:
cf:fa:18:43:14:a5:51:31:ee:4d:b3:7a:37:c2:d6:00:05:ef:
38:01:d7:38:ee:44:72:cf:11:57:87:74:1b:ef:82:d2:1f:2b:
af:91:0b:38:81:cc:ad:be:e4:41:1b:4b:1d:5d:3f:ec:2b:cf:
dd:a9:68:dd:d1:13:3c:44:be:fd:9a:a1:df:db:14:d0:66:0b:
ba:d1:38:0e:18:07:d3:64:c0:b1:db:53:08:64:10:f1:7b:eb:
31:bc:3b:6b:1e:37:15:78:59:71:2c:de:b3:2d:18:97:ca:91:
a6:5e:74:20
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgICBkMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yMzA0MTMw
NDQzMTBaFw0yNDAzMjcwMTEzMTBaMDMxMTAvBgNVBAMTKEI5NUIyQTc2ODI0Q0Q4
OTU5OTVFMjQyRUE0NzNENzgzRjIzRUQwNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr8DntmbfQiCX+sKwUAgZ2eCyzCaDLjv+aXO6RiBVdNHbslSMX
W3q9ASxvZ+A4KbdaXGoCekQWjFFRhwimVo786TaBxM54JYplgur8YMmNY1hpI0Kr
vp2tgt6iQI5krqxGZj1vT0xHiiNeq6H98/O252YexkFINtKvTJhv4E0uqB7aiviG
gNrgmB+aKcMQMu30GgWz2tjY+e7xXAWF8gOuIBf4xXAuiswIYwCww7GkBIIbBcpo
Fe1UcwT/7VET3f6ax19RuE66596LtjFy/FXIs1WRn9TBSm88TxHb+BX1QPR8lfRb
zoqkwYKbmqGJ/hu7XdBd7Lxqg3iUKZ4kU0DRAgMBAAGjggJ8MIICeDAdBgNVHQ4E
FgQUuVsqdoJM2JWZXiQupHPXg/I+0FowHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3VWc3Fkb0pNMkpXWlhp
UXVwSFBYZ19JLTBGby5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwgakGCCsGAQUFBwEHAQH/BIGZMIGWMIGTBAIA
ATCBjAMEAnBLAAMEAnBLCAMEAnBLEAMEAnBLGAMEAnBLIAMEAnBLKDAMAwQEcEsw
AwQEcEtAAwQCcEuAAwQCcEuIAwQCcEuQAwQCcEuYAwQCcEugAwQCcEuoAwQCcEuw
AwQCcEu4AwQCcEvIAwQCcEvQAwQCcEvYAwQCcEvgAwQCcEvoAwQCcEvwAwQCcEv4
MA0GCSqGSIb3DQEBCwUAA4IBAQBWxGJ8o2emh1t+daFdfKKLL4X/6YeZAD7UsQLM
dliiKSEtIn5HB58wGBxfYyHhco8KpGZEWkqOP7XBQRgqrYuu0gW4g4MGCmc4/DYu
UtF31+asFAdmTA1I7j6y7OTOo43R4iLQXgOorMvXfTTlx9JgXCOImnUsx+zxrPDQ
oh5Y5QM9n97/QQDpMr9dDTfDrmzP+hhDFKVRMe5Ns3o3wtYABe84Adc47kRyzxFX
h3Qb74LSHyuvkQs4gcytvuRBG0sdXT/sK8/dqWjd0RM8RL79mqHf2xTQZgu60TgO
GAfTZMCx21MIZBDxe+sxvDtrHjcVeFlxLN6zLRiXypGmXnQg
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org