Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/zC0AZXdR9ihhk7tt7n70wNHhpJM.roa
File: zC0AZXdR9ihhk7tt7n70wNHhpJM.roa (raw, json)
Hash identifier: XOuDsnmooMee8n751KXOJrm6HsnyWaPujyfsD1t3SSw=
Subject key identifier: CC:2D:00:65:77:51:F6:28:61:93:BB:6D:EE:7E:F4:C0:D1:E1:A4:93
Certificate issuer: /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial: 02D4
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zC0AZXdR9ihhk7tt7n70wNHhpJM.roa
Signing time: Tue 18 Oct 2022 00:52:36 +0000
ROA not before: Tue 18 Oct 2022 00:52:36 +0000
ROA not after: Mon 28 Aug 2023 04:15:34 +0000
asID: 996
IP address blocks: 112.75.48.0/22 maxlen: 24
112.75.52.0/22 maxlen: 24
112.75.56.0/22 maxlen: 24
112.75.60.0/22 maxlen: 24
112.75.64.0/22 maxlen: 24
112.75.68.0/22 maxlen: 24
112.75.72.0/22 maxlen: 24
112.75.76.0/22 maxlen: 24
112.75.128.0/22 maxlen: 24
112.75.136.0/22 maxlen: 24
112.75.144.0/22 maxlen: 24
112.75.152.0/22 maxlen: 24
112.75.160.0/22 maxlen: 24
112.75.168.0/22 maxlen: 24
112.75.176.0/22 maxlen: 24
112.75.184.0/22 maxlen: 24
112.75.192.0/22 maxlen: 24
112.75.200.0/22 maxlen: 24
112.75.208.0/22 maxlen: 24
112.75.216.0/22 maxlen: 24
112.75.224.0/22 maxlen: 24
112.75.232.0/22 maxlen: 24
112.75.240.0/22 maxlen: 24
112.75.248.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 724 (0x2d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Validity
Not Before: Oct 18 00:52:36 2022 GMT
Not After : Aug 28 04:15:34 2023 GMT
Subject: CN=CC2D00657751F6286193BB6DEE7EF4C0D1E1A493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:87:28:d9:96:87:00:bb:71:a2:69:ff:be:8e:
93:c5:1c:74:b4:43:c6:cd:99:ad:13:92:f1:0e:26:
45:42:6b:80:53:a3:75:47:1e:0c:d9:8f:ef:a8:9b:
b3:b7:02:84:5a:b4:bd:17:5c:d7:ce:2f:e7:85:4d:
d6:4a:b3:50:36:43:f7:0f:81:0a:0f:e7:96:3e:5d:
cc:42:85:74:a6:7d:ca:4c:3c:3c:fe:47:14:83:1a:
38:cb:12:1a:6d:27:c7:1b:d3:c4:90:d0:7b:ec:39:
a2:cc:e6:19:de:b9:4c:b9:a6:b0:76:5c:f6:c7:30:
72:6c:6e:a7:6f:50:24:2d:ad:3a:11:c4:08:61:81:
98:85:a7:95:ce:bd:46:4a:2d:06:87:3a:bb:b4:6e:
63:f1:c7:01:d6:f5:a2:28:a0:bf:18:ea:56:00:48:
4f:88:70:de:20:c5:b5:2a:1b:74:64:cd:aa:4a:7b:
7d:f9:6b:bf:05:8c:c0:89:e3:64:c3:08:15:52:3b:
29:3a:27:b0:d4:f6:9b:a9:e0:67:b5:0d:03:03:0d:
d3:e5:7e:6a:a3:3f:1f:f4:80:ad:aa:bc:3f:00:51:
cf:aa:f9:45:da:48:3e:5c:1e:52:71:2a:d2:f0:e5:
22:f1:0c:7a:00:58:90:e1:84:72:73:fb:10:e5:d6:
44:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:00:65:77:51:F6:28:61:93:BB:6D:EE:7E:F4:C0:D1:E1:A4:93
X509v3 Authority Key Identifier:
keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/zC0AZXdR9ihhk7tt7n70wNHhpJM.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
112.75.48.0-112.75.79.255
112.75.128.0/22
112.75.136.0/22
112.75.144.0/22
112.75.152.0/22
112.75.160.0/22
112.75.168.0/22
112.75.176.0/22
112.75.184.0/22
112.75.192.0/22
112.75.200.0/22
112.75.208.0/22
112.75.216.0/22
112.75.224.0/22
112.75.232.0/22
112.75.240.0/22
112.75.248.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:eb:9c:67:2a:12:34:b3:97:fb:ae:5a:81:9a:8b:17:33:7d:
bf:73:63:1c:4c:b4:2b:f2:e4:c8:25:58:12:c1:d5:9e:ea:12:
c5:a5:3f:90:0c:4d:2e:b8:5f:97:72:c2:4c:af:11:24:ca:96:
54:69:5d:ea:e6:ff:da:2f:8e:9e:6c:5c:24:c3:1c:eb:bc:d3:
b3:34:00:8e:75:50:c9:92:8f:74:8d:8c:7a:af:cd:df:92:95:
61:2e:8b:df:ef:b5:15:32:30:56:04:c7:a6:10:9a:05:89:f0:
5c:e1:b8:97:f8:44:8e:c3:d3:2b:33:58:92:af:52:1b:c5:fc:
ef:b3:10:98:ce:97:72:7c:61:b2:44:a2:71:68:c4:f0:27:2a:
89:e6:0d:fa:ce:01:61:a8:46:9b:fd:1c:80:2d:46:70:04:2b:
b1:7a:0f:12:2a:cd:40:b0:f6:5e:1e:b5:a6:64:06:eb:69:5d:
a9:aa:63:f9:0b:ec:66:5b:7a:8f:41:fb:04:05:f8:d3:a0:a5:
ec:c4:9b:dd:85:18:7b:f1:c4:f0:a5:78:ee:f2:b9:9b:d3:a4:
d1:7a:7a:67:ab:31:26:51:41:61:cc:e5:c7:d8:50:a3:2c:60:
fd:47:2d:ea:2b:9b:75:70:db:d2:b6:e3:28:35:3b:36:20:32:
df:49:fa:1f
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yMjEwMTgw
MDUyMzZaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKENDMkQwMDY1Nzc1MUY2
Mjg2MTkzQkI2REVFN0VGNEMwRDFFMUE0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0hyjZlocAu3Giaf++jpPFHHS0Q8bNma0TkvEOJkVCa4BTo3VH
HgzZj++om7O3AoRatL0XXNfOL+eFTdZKs1A2Q/cPgQoP55Y+XcxChXSmfcpMPDz+
RxSDGjjLEhptJ8cb08SQ0HvsOaLM5hneuUy5prB2XPbHMHJsbqdvUCQtrToRxAhh
gZiFp5XOvUZKLQaHOru0bmPxxwHW9aIooL8Y6lYASE+IcN4gxbUqG3RkzapKe335
a78FjMCJ42TDCBVSOyk6J7DU9pup4Ge1DQMDDdPlfmqjPx/0gK2qvD8AUc+q+UXa
SD5cHlJxKtLw5SLxDHoAWJDhhHJz+xDl1kTfAgMBAAGjggJaMIICVjAdBgNVHQ4E
FgQUzC0AZXdR9ihhk7tt7n70wNHhpJMwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL3pDMEFaWGRSOWloaGs3
dHQ3bjcwd05IaHBKTS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwgYcGCCsGAQUFBwEHAQH/BHgwdjB0BAIAATBu
MAwDBARwSzADBARwS0ADBAJwS4ADBAJwS4gDBAJwS5ADBAJwS5gDBAJwS6ADBAJw
S6gDBAJwS7ADBAJwS7gDBAJwS8ADBAJwS8gDBAJwS9ADBAJwS9gDBAJwS+ADBAJw
S+gDBAJwS/ADBAJwS/gwDQYJKoZIhvcNAQELBQADggEBAHvrnGcqEjSzl/uuWoGa
ixczfb9zYxxMtCvy5MglWBLB1Z7qEsWlP5AMTS64X5dywkyvESTKllRpXerm/9ov
jp5sXCTDHOu807M0AI51UMmSj3SNjHqvzd+SlWEui9/vtRUyMFYEx6YQmgWJ8Fzh
uJf4RI7D0yszWJKvUhvF/O+zEJjOl3J8YbJEonFoxPAnKonmDfrOAWGoRpv9HIAt
RnAEK7F6DxIqzUCw9l4etaZkButpXamqY/kL7GZbeo9B+wQF+NOgpezEm92FGHvx
xPCleO7yuZvTpNF6emerMSZRQWHM5cfYUKMsYP1HLeorm3Vw29K24yg1OzYgMt9J
+h8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:18 2023 by rpki-client on console-ams.rpki-client.org