Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/u6Ak-r7u8luLfAvXH-20LWPkKnc.roa
File:                     u6Ak-r7u8luLfAvXH-20LWPkKnc.roa (raw, json)
Hash identifier:          TxLPFcmNBaJHMcJxiM8fkAKJG66sXfl9PccECAWbdoI=
Subject key identifier:   BB:A0:24:FA:BE:EE:F2:5B:8B:7C:0B:D7:1F:ED:B4:2D:63:E4:2A:77
Certificate issuer:       /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial:       19F1
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/u6Ak-r7u8luLfAvXH-20LWPkKnc.roa
Signing time:             Mon 26 Jan 2026 06:54:04 +0000
ROA not before:           Mon 26 Jan 2026 06:54:04 +0000
ROA not after:            Fri 23 Oct 2026 03:01:03 +0000
asID:                     59022
IP address blocks:        45.115.244.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6641 (0x19f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
        Validity
            Not Before: Jan 26 06:54:04 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=BBA024FABEEEF25B8B7C0BD71FEDB42D63E42A77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:93:93:3f:8f:36:d1:8c:ac:c7:a6:e8:fd:
                    44:0d:97:f0:7c:8a:8c:11:aa:86:f7:6e:ff:d0:79:
                    01:ef:9b:93:d4:01:a8:3c:ab:2a:2d:ba:05:6b:a0:
                    e5:fa:71:e7:40:ee:d1:05:ce:bf:dc:2f:f1:b9:32:
                    6e:e6:17:91:21:16:c6:2f:2b:8b:7c:ee:63:0c:b7:
                    46:64:ab:5c:ad:d0:41:b5:4e:b5:00:02:0f:68:e4:
                    db:3b:23:38:24:b3:fe:24:e9:8a:4a:ba:ec:f2:53:
                    39:de:fd:0e:5d:7a:0e:b6:14:2d:9d:be:25:87:10:
                    c4:97:57:6a:57:cd:77:5d:4d:48:35:93:84:eb:aa:
                    73:e0:6a:4b:69:49:75:d5:13:a0:06:30:00:15:fa:
                    09:ae:e6:28:f1:a0:70:59:44:7f:0c:3e:1f:51:fb:
                    f0:db:a6:8f:d1:c9:81:f4:99:9c:5e:bd:b9:c4:59:
                    df:e9:fa:b5:f5:08:c1:e5:0b:fd:50:5d:fe:1c:d8:
                    d2:77:b5:d1:39:4e:98:c4:7b:c1:f6:fd:f2:dd:a0:
                    41:25:fa:a8:6b:21:e4:b4:f3:02:cb:98:45:66:57:
                    a1:47:30:00:f4:a0:fe:2d:61:9e:11:99:33:9f:6f:
                    e8:95:cd:d4:f0:c7:9f:c4:c3:e4:42:f9:2e:0c:10:
                    3f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:24:FA:BE:EE:F2:5B:8B:7C:0B:D7:1F:ED:B4:2D:63:E4:2A:77
            X509v3 Authority Key Identifier:
                keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/u6Ak-r7u8luLfAvXH-20LWPkKnc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:b9:55:db:32:c3:b6:4f:5c:d7:32:6e:05:58:41:71:66:
         90:40:a7:52:99:e2:b2:e5:13:6f:62:28:30:5d:aa:2c:15:c2:
         39:60:1a:ba:99:29:73:3e:fb:b1:01:cc:66:78:b3:38:3d:a4:
         c1:5c:62:88:1b:8a:04:39:f2:37:13:5b:a7:c6:e6:ec:80:89:
         26:4f:b1:26:e9:8d:82:84:8f:fb:a4:bf:8f:e1:6b:44:13:72:
         37:07:73:d0:65:6b:64:a0:ca:21:f7:df:8b:94:64:4e:4c:04:
         24:78:25:c3:a1:0f:4b:52:64:cd:02:b0:e8:ed:01:ed:db:71:
         d3:ca:b2:dc:63:3d:2d:8a:2a:05:22:6d:b3:90:34:77:2b:3e:
         68:80:86:5c:55:8f:6c:1f:54:9b:f4:28:d2:e9:a6:e2:c5:ce:
         22:e6:09:24:d0:ef:23:6e:0a:c3:54:72:df:cb:03:87:5c:03:
         cd:92:9b:a9:61:e2:02:c2:7a:eb:66:26:24:0e:bf:14:d7:96:
         77:84:e8:a1:54:86:6e:4d:ab:5d:a6:49:12:90:0b:87:2e:45:
         12:24:46:cb:41:ea:5f:9d:0d:21:38:c0:9e:38:05:b7:5d:2f:
         dd:c9:05:7b:20:e9:12:2c:0c:ba:ef:5c:bb:86:92:0f:55:42:
         2b:78:5b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:14 2026 by rpki-client