Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/80MXRH92O2ccbkpUNUS86QSHsig.roa
File:                     80MXRH92O2ccbkpUNUS86QSHsig.roa (raw, json)
Hash identifier:          Lj/7rUr7tWb2J25md3fpCtE7gCq9WonhXjswMVHrpi8=
Subject key identifier:   F3:43:17:44:7F:76:3B:67:1C:6E:4A:54:35:44:BC:E9:04:87:B2:28
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       06BD
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/80MXRH92O2ccbkpUNUS86QSHsig.roa
Signing time:             Fri 16 May 2025 01:38:09 +0000
ROA not before:           Fri 16 May 2025 01:38:09 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 16 01:38:09 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=F34317447F763B671C6E4A543544BCE90487B228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:02:38:1a:66:31:66:5d:50:bc:7d:09:45:bd:
                    52:30:3c:c7:b7:9f:dd:ca:15:21:cf:62:a6:16:2e:
                    d4:fc:d6:ab:0c:81:af:ce:3f:d8:30:a5:bc:16:6a:
                    d9:aa:86:4a:c6:cb:aa:5f:12:84:fd:32:67:44:df:
                    12:18:d4:9f:fe:91:5e:48:da:59:85:32:10:e9:dd:
                    87:8e:cf:59:ba:5f:f7:27:52:b6:8b:4e:60:bd:0d:
                    fc:f3:57:3c:24:21:80:6a:17:2b:72:24:0b:e4:3e:
                    b4:21:d6:81:1a:05:91:cf:dd:60:d7:98:31:09:a4:
                    8b:a7:ad:6d:ba:4f:58:7b:26:ac:2e:4f:4f:c7:8f:
                    87:ed:87:f5:0d:47:2a:4e:c4:4b:50:c3:7e:1c:49:
                    08:d4:c5:bb:bc:7b:8a:a8:91:43:29:31:e1:34:fa:
                    2f:15:17:59:ca:4f:a7:53:37:9f:e5:69:a9:64:ad:
                    7d:6d:b7:7c:cc:93:b8:d7:ea:23:fb:64:e0:4c:c0:
                    43:20:63:c0:32:e0:5f:0e:d8:25:a0:d7:9e:a1:b3:
                    bf:21:c2:e3:fb:44:28:d6:fb:b0:41:da:2f:49:88:
                    7d:39:af:da:95:e4:e0:14:d9:a7:75:5e:64:11:93:
                    dd:ff:61:65:21:09:4f:fb:d3:66:2a:1b:f1:a4:66:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:17:44:7F:76:3B:67:1C:6E:4A:54:35:44:BC:E9:04:87:B2:28
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/80MXRH92O2ccbkpUNUS86QSHsig.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:df:f6:42:85:a1:3f:51:8e:73:48:ff:0e:a5:a4:49:86:7a:
         27:e4:5a:1b:dd:58:1c:80:83:d7:34:28:ed:20:5c:02:8d:69:
         4b:87:b5:68:b8:41:b5:dd:2f:1c:93:cf:b7:a5:72:1d:1e:9a:
         8d:6d:68:47:8c:c7:a5:cb:96:6c:c6:1a:7b:00:64:70:81:5d:
         1d:9d:ab:ff:a5:d5:ce:fb:14:7c:bc:9e:4d:37:1c:94:a1:12:
         b8:66:ab:23:e2:74:d3:09:a4:dc:96:ee:10:da:ee:31:3a:91:
         52:cb:5c:2b:13:91:e9:e0:cc:a6:89:e3:d0:4c:53:a2:0b:98:
         32:04:6b:5c:29:68:c6:c0:ba:f5:56:c1:1b:33:4c:a8:fc:bb:
         78:90:f8:f5:72:47:fb:e3:81:b6:52:69:6c:78:a8:7c:ea:3e:
         6e:91:16:33:ab:5f:1e:7b:f3:f6:58:32:1c:6a:08:c7:2c:40:
         a9:0d:d9:12:c3:cb:56:a3:57:69:8c:e6:e1:68:0e:28:9a:d8:
         70:c5:7f:c4:0f:25:c3:70:eb:c0:c8:3c:a3:49:72:f0:12:df:
         06:6f:62:98:06:59:dd:15:20:31:31:5d:5e:14:e2:74:d8:af:
         c0:28:6d:bb:c4:b5:ed:68:6c:b6:9e:b0:b0:5a:51:91:1f:9c:
         2c:d7:54:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:49:14 2025 by rpki-client