Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/wuiy3z_4UBnNS2ir6z_XyNqJJPo.roa
File:                     wuiy3z_4UBnNS2ir6z_XyNqJJPo.roa (raw, json)
Hash identifier:          g9rutMGbr65LKrFQG4CaA9adVfd2hZHZr1bDrIuZus0=
Subject key identifier:   C2:E8:B2:DF:3F:F8:50:19:CD:4B:68:AB:EB:3F:D7:C8:DA:89:24:FA
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       1BF4
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wuiy3z_4UBnNS2ir6z_XyNqJJPo.roa
Signing time:             Fri 13 Jun 2025 08:39:51 +0000
ROA not before:           Fri 13 Jun 2025 08:39:51 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        125.169.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7156 (0x1bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun 13 08:39:51 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=C2E8B2DF3FF85019CD4B68ABEB3FD7C8DA8924FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:de:44:b6:98:7b:89:37:4a:6e:0e:ed:da:
                    0b:44:c6:0c:96:61:1c:25:69:4a:7a:23:bb:17:61:
                    a0:62:70:6e:c2:ec:05:79:3f:81:36:5d:26:9b:71:
                    3e:bd:8f:db:a0:92:7d:57:a5:b0:58:83:9b:3c:e4:
                    cd:80:99:ab:f5:35:7e:0d:90:e1:3a:62:4a:f9:04:
                    6f:f8:1f:2b:9e:79:3a:89:69:ec:27:d6:cf:7a:a2:
                    14:78:36:39:2d:39:44:44:02:8c:5d:f1:b1:14:f0:
                    f8:36:cb:2f:29:cb:eb:4f:0f:8c:dc:66:bc:02:cc:
                    41:9c:07:c3:4d:d1:2a:04:5d:12:a9:bc:b5:9b:1d:
                    d0:d6:ce:22:35:9c:41:44:ed:19:45:0f:15:b6:f4:
                    42:f2:ed:36:d7:fa:c3:03:16:e5:9f:ce:2e:55:03:
                    2f:0a:d2:7f:91:0c:2b:e0:02:5b:67:af:60:31:a2:
                    cb:00:e6:15:36:9b:e6:8e:94:e1:56:1e:4d:69:7f:
                    bf:8d:80:89:5f:d6:57:e9:b1:b2:d6:e2:0e:ab:be:
                    09:f6:56:ae:a5:f4:3d:f7:b0:62:d2:e0:fb:94:fa:
                    8e:64:18:04:46:ad:0c:d7:bd:d4:08:92:ee:2d:e2:
                    5f:3e:e5:d7:10:9e:b0:4f:ad:6c:1e:3a:ea:c1:d3:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E8:B2:DF:3F:F8:50:19:CD:4B:68:AB:EB:3F:D7:C8:DA:89:24:FA
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/wuiy3z_4UBnNS2ir6z_XyNqJJPo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.169.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         03:bd:fa:3e:bc:ce:50:af:6f:67:88:dc:44:23:ee:50:0c:74:
         56:16:be:1a:78:01:85:3b:9f:fa:c0:5d:be:1c:03:d2:25:87:
         2d:be:a5:1b:53:f3:f3:f6:c4:19:cd:1a:2a:c0:1e:68:f0:e6:
         27:71:4e:fb:01:ba:28:d8:2d:a7:2d:56:7f:3b:76:59:7a:59:
         c2:d6:8f:7d:8b:06:af:be:a3:2c:a7:28:11:ae:8e:c2:44:2c:
         1a:78:e5:6e:6b:d1:fc:72:23:50:41:f3:65:01:19:86:53:61:
         57:34:45:c0:2b:e8:90:01:44:1a:43:46:b2:61:7b:1d:73:96:
         ed:7d:96:31:20:ab:e2:b4:2b:52:d8:2c:4c:7b:4f:53:d6:fb:
         60:d8:00:12:79:a1:a8:0f:1f:f6:5f:75:68:d4:2d:64:5a:b3:
         35:22:b2:46:0c:04:09:93:97:68:62:10:7f:43:62:12:23:ce:
         a2:d1:6e:8b:20:43:87:eb:30:e7:a7:d3:06:da:1c:bb:52:22:
         d9:ca:02:c7:86:b5:64:15:31:bb:1a:0a:ab:75:54:0b:22:48:
         88:ab:0d:94:4b:6a:c3:ea:bc:1a:35:f0:bb:08:d4:ac:5a:95:
         16:0d:bb:77:b6:80:69:bd:60:47:ad:0e:ec:fa:4c:1a:33:d4:
         39:99:e7:63
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICG/QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkUy
NjZEQzNFQUQ4MEVCMjVENDk4NThBNjREQzFFRjFDOEExQjk0MjAeFw0yNTA2MTMw
ODM5NTFaFw0yNjA0MDkwNjMzMjFaMDMxMTAvBgNVBAMTKEMyRThCMkRGM0ZGODUw
MTlDRDRCNjhBQkVCM0ZEN0M4REE4OTI0RkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoxN5Etph7iTdKbg7t2gtExgyWYRwlaUp6I7sXYaBicG7C7AV5
P4E2XSabcT69j9ugkn1XpbBYg5s85M2Amav1NX4NkOE6Ykr5BG/4HyueeTqJaewn
1s96ohR4NjktOUREAoxd8bEU8Pg2yy8py+tPD4zcZrwCzEGcB8NN0SoEXRKpvLWb
HdDWziI1nEFE7RlFDxW29ELy7TbX+sMDFuWfzi5VAy8K0n+RDCvgAltnr2AxossA
5hU2m+aOlOFWHk1pf7+NgIlf1lfpsbLW4g6rvgn2Vq6l9D33sGLS4PuU+o5kGARG
rQzXvdQIku4t4l8+5dcQnrBPrWweOurB07O1AgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUwuiy3z/4UBnNS2ir6z/XyNqJJPowHwYDVR0jBBgwFoAULiZtw+rYDrJdSYWK
ZNwe8cihuUIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg
TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNzYv
TGladHctcllEckpkU1lXS1pOd2U4Y2lodVVJLmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC9MaVp0dy1yWURySmRTWVdLWk53ZThjaWh1VUkuY2VyMA4GA1UdDwEB/wQE
AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC83Ni93dWl5M3pfNFVCbk5TMmly
NnpfWHlOcUpKUG8ucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu
Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA
fakwDQYJKoZIhvcNAQELBQADggEBAAO9+j68zlCvb2eI3EQj7lAMdFYWvhp4AYU7
n/rAXb4cA9Ilhy2+pRtT8/P2xBnNGirAHmjw5idxTvsBuijYLactVn87dll6WcLW
j32LBq++oyynKBGujsJELBp45W5r0fxyI1BB82UBGYZTYVc0RcAr6JABRBpDRrJh
ex1zlu19ljEgq+K0K1LYLEx7T1PW+2DYABJ5oagPH/ZfdWjULWRaszUiskYMBAmT
l2hiEH9DYhIjzqLRbosgQ4frMOen0wbaHLtSItnKAseGtWQVMbsaCqt1VAsiSIir
DZRLasPqvBo18LsI1KxalRYNu3e2gGm9YEetDuz6TBoz1DmZ52M=
-----END CERTIFICATE-----
Generated at Sun Jun 22 05:08:27 2025 by rpki-client