Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vuI_R4WDE6aB8FcP54E6MXHc8lE.roa
File:                     vuI_R4WDE6aB8FcP54E6MXHc8lE.roa (raw, json)
Hash identifier:          V/WdtM/bWiXIINf1Hxzm7bZlIfdhnbA84/GBBF8lwU4=
Subject key identifier:   BE:E2:3F:47:85:83:13:A6:81:F0:57:0F:E7:81:3A:31:71:DC:F2:51
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       15D2
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vuI_R4WDE6aB8FcP54E6MXHc8lE.roa
Signing time:             Thu 18 Apr 2024 03:53:25 +0000
ROA not before:           Thu 18 Apr 2024 03:53:25 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5586 (0x15d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 18 03:53:25 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=BEE23F47858313A681F0570FE7813A3171DCF251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:1b:db:ef:0d:63:b5:74:83:a1:6f:75:bd:
                    a2:db:23:88:ac:6c:9c:51:95:fc:29:e9:33:d9:07:
                    46:c8:0b:3a:7e:0f:1f:f1:7d:aa:fd:6b:cb:5b:bc:
                    28:76:bf:00:16:20:84:0c:7e:ab:65:cb:00:91:7b:
                    02:fa:91:12:44:ff:b7:eb:5e:14:4f:5c:3d:7d:87:
                    46:c9:18:4e:1c:7d:2b:6d:c6:ef:59:d3:65:6f:f0:
                    79:13:b5:b3:a1:d0:8c:f0:45:b9:2f:6e:20:f4:5b:
                    23:a2:a1:6a:4a:8b:b6:b9:2d:e3:87:7d:22:6f:32:
                    a3:1c:df:bf:bb:2e:22:be:38:68:db:f1:7d:e0:74:
                    70:a5:5c:e5:7c:09:9c:be:28:6f:7e:44:39:97:1d:
                    9f:25:d5:34:2f:ab:bb:d0:97:27:5c:30:32:04:a8:
                    46:58:9b:66:5d:4b:23:80:91:66:d0:78:e4:61:40:
                    2f:0d:80:bc:aa:04:ab:41:56:13:27:f4:58:3f:7f:
                    d8:77:0f:5c:ca:93:ed:11:f7:2f:6b:da:cf:bf:33:
                    1c:4d:21:c7:01:99:7d:86:03:91:43:5a:17:8a:e0:
                    39:91:61:db:cb:2f:75:53:95:48:84:20:5e:8c:12:
                    5a:a1:95:6c:22:be:5d:35:bb:7d:7c:a3:71:29:31:
                    9e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E2:3F:47:85:83:13:A6:81:F0:57:0F:E7:81:3A:31:71:DC:F2:51
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vuI_R4WDE6aB8FcP54E6MXHc8lE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:d6:85:2a:cb:88:4a:79:97:b7:82:59:5f:46:54:07:09:
         47:23:90:e4:93:ac:a6:d6:19:38:40:1f:c5:b0:72:1a:9d:4c:
         85:8b:54:f4:42:20:0c:fc:36:46:1a:8f:59:9a:1d:df:97:e2:
         4d:1f:52:37:e2:b3:cd:44:3b:da:5c:72:f2:ad:b3:f5:83:d0:
         de:1b:b3:60:c8:e9:06:a8:ec:eb:b5:6e:d3:d6:f1:ad:30:82:
         0d:b6:84:fa:87:ca:42:6a:5c:5e:4f:3e:fd:b8:62:26:d2:3f:
         a5:b6:4a:eb:1e:3b:2d:87:40:13:7d:dd:86:5c:f8:e3:11:6c:
         d2:76:01:94:fe:69:e1:fc:52:35:ea:f4:39:d9:5a:5f:a3:bf:
         27:a7:ed:6e:17:fd:84:43:be:af:53:e4:7e:51:c3:d5:3e:fa:
         3f:78:a1:29:7d:d6:75:1f:6f:6d:20:68:a1:ac:6d:6b:b0:74:
         4b:e0:1a:f0:27:9a:0e:7e:3c:5e:a5:b9:bd:90:04:88:d3:24:
         a6:76:57:0c:d0:c9:18:a8:9d:ff:69:bb:ca:58:b4:da:38:a2:
         5f:f5:90:d3:38:ca:79:e3:6b:0e:51:3a:34:ff:27:2c:92:22:
         f8:ac:5d:a0:0b:29:95:a8:79:35:5b:bf:f2:aa:4f:04:07:b4:
         31:80:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:36:03 2025 by rpki-client