Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/a27e4mcUGSJi7TxmeXxex6egcMk.roa
File:                     a27e4mcUGSJi7TxmeXxex6egcMk.roa (raw, json)
Hash identifier:          SDvJy2+Xc5ESdIKdguphZfhaFYPFwP3CUgFFjZcLAUc=
Subject key identifier:   6B:6E:DE:E2:67:14:19:22:62:ED:3C:66:79:7C:5E:C7:A7:A0:70:C9
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       123E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a27e4mcUGSJi7TxmeXxex6egcMk.roa
Signing time:             Sat 31 May 2025 09:39:06 +0000
ROA not before:           Sat 31 May 2025 09:39:06 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4670 (0x123e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 31 09:39:06 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=6B6EDEE26714192262ED3C66797C5EC7A7A070C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:aa:06:3d:1a:ea:ba:7a:03:e2:19:8f:e0:
                    70:59:85:ef:07:a8:f5:0a:e8:d3:b6:d0:b9:47:4d:
                    94:61:5f:10:10:29:7a:47:4d:7a:5e:09:64:a7:12:
                    c6:76:1b:e2:fa:62:ab:21:4c:96:fc:20:0f:5f:60:
                    23:d5:0c:8c:b6:a1:64:0d:fc:4b:9d:86:0a:f6:58:
                    3d:ab:29:07:5b:58:c4:88:1d:8c:9a:cc:73:3c:88:
                    d3:5e:c2:36:a4:d9:16:30:91:5c:1f:70:9b:07:5c:
                    6f:2a:34:3b:80:9a:63:5c:53:2c:8f:6f:13:86:f4:
                    0c:24:0d:45:4c:be:d8:f7:08:6a:9b:ee:7f:92:92:
                    74:84:2a:08:e7:c8:15:f6:de:5e:81:71:b2:06:70:
                    cc:36:92:63:17:74:95:ee:83:8d:c4:a4:2a:9c:4b:
                    03:5a:0f:1a:36:5a:cd:db:9c:b3:73:c2:b4:d2:00:
                    02:fd:d2:08:d5:af:ea:5a:6f:26:97:8e:76:41:48:
                    fc:2e:98:71:b9:aa:48:98:69:17:a2:47:51:36:37:
                    b4:e2:1a:fc:ff:52:8c:02:c5:c4:2d:e5:7b:60:2a:
                    6c:a6:db:5b:9b:0e:05:6a:dc:4f:f0:81:8b:ff:cc:
                    1b:6e:8b:93:a5:88:a7:8e:68:58:8d:9a:13:8a:ff:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:6E:DE:E2:67:14:19:22:62:ED:3C:66:79:7C:5E:C7:A7:A0:70:C9
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/a27e4mcUGSJi7TxmeXxex6egcMk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:cc:92:6c:62:09:0c:3e:b2:18:be:ae:e3:04:b1:e4:92:
         ac:74:55:e2:b8:a3:f4:3c:de:1d:8c:78:68:7a:78:9e:ee:8b:
         28:f9:bd:66:2a:c8:ef:c2:46:48:1a:e7:f8:3d:b4:74:4b:79:
         39:7a:b9:31:72:ab:fb:cf:47:8f:c6:af:96:86:b0:e0:6c:c0:
         2d:61:7e:e5:20:62:44:6e:ad:2c:7d:f3:b2:77:19:22:cc:70:
         3d:43:09:68:33:fb:e1:fb:03:a4:a9:f4:ca:c7:a9:67:ce:b9:
         57:1e:89:48:3c:33:2a:ca:4a:7e:ac:36:8d:c9:ca:69:a4:22:
         03:8b:b7:be:dc:50:a8:d1:65:57:a0:78:8a:0f:93:53:77:aa:
         e1:b1:65:4d:bf:ac:08:95:15:5a:c0:45:e2:1d:42:8b:e9:2c:
         33:9a:a8:9a:6a:7c:0e:43:ab:ce:bc:3f:6b:05:b4:a8:f0:e5:
         3d:67:10:cc:a6:56:4c:60:d1:28:cf:88:79:07:58:fe:bf:56:
         21:06:2a:c3:cb:d9:82:d1:9e:c9:c6:9a:b3:c7:80:9d:bf:c2:
         f8:65:1d:25:8b:97:6b:07:f5:cb:a8:aa:cc:3b:24:3f:52:5b:
         45:11:fa:2d:c3:a5:27:ba:1e:1d:a6:ab:47:1d:a4:d8:91:11:
         20:a5:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:35:07 2025 by rpki-client