Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa
File:                     J_h6IP62vVvib6_bpcHqGmc9gB0.roa (raw, json)
Hash identifier:          AAi0CdtNJatToNyb4dGxz7EYQVGmPml1Eq97pePytts=
Subject key identifier:   27:F8:7A:20:FE:B6:BD:5B:E2:6F:AF:DB:A5:C1:EA:1A:67:3D:80:1D
Certificate issuer:       /CN=B08B918D2D45B6371ACB9770743553D1BF224708
Certificate serial:       1CAD
Authority key identifier: B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa
Signing time:             Thu 02 Jan 2025 13:58:19 +0000
ROA not before:           Thu 02 Jan 2025 13:58:19 +0000
ROA not after:            Sat 27 Sep 2025 02:40:14 +0000
asID:                     137718
IP address blocks:        180.184.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7341 (0x1cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B08B918D2D45B6371ACB9770743553D1BF224708
        Validity
            Not Before: Jan  2 13:58:19 2025 GMT
            Not After : Sep 27 02:40:14 2025 GMT
        Subject: CN=27F87A20FEB6BD5BE26FAFDBA5C1EA1A673D801D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:1a:46:0d:6e:bb:b7:1e:9b:65:01:3c:77:
                    6d:86:56:9e:17:1a:4c:52:45:f5:41:0e:b0:af:bd:
                    bb:12:62:18:02:78:47:37:9e:e9:05:9b:52:f2:60:
                    77:7f:ce:1a:bc:8d:3e:3d:a1:a9:14:b7:85:b8:16:
                    2d:91:33:dd:dc:b2:a9:6c:dd:25:39:9a:e9:4d:22:
                    32:f9:63:79:1f:48:4f:1c:b4:e7:6d:36:e3:06:40:
                    8a:64:4f:b1:00:f9:dd:c2:0e:8f:12:84:ff:ff:38:
                    aa:c5:6d:9a:28:a5:4d:db:ab:f6:af:4d:93:1b:09:
                    f7:5d:e0:38:4d:3f:fe:3d:db:9d:3b:f0:b0:ff:9a:
                    09:d3:fa:30:68:cb:95:1c:18:81:1c:a9:b1:76:a3:
                    03:ee:d9:9a:da:79:b1:2b:68:0f:70:84:ec:39:af:
                    97:91:d0:ec:52:39:e0:c5:46:a4:3a:dc:53:52:a7:
                    68:f8:12:d9:d1:76:9c:8a:0a:87:e5:cf:1e:59:68:
                    cd:a1:a0:ff:07:49:ad:af:3d:10:5a:42:e6:5d:68:
                    91:5b:20:65:33:35:a6:57:64:a3:1a:0e:cb:26:e4:
                    7d:3d:d1:06:4f:5f:c8:69:04:10:80:d9:a8:12:2c:
                    d6:0f:d7:25:36:fd:03:ee:b4:c9:31:94:92:e9:1b:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F8:7A:20:FE:B6:BD:5B:E2:6F:AF:DB:A5:C1:EA:1A:67:3D:80:1D
            X509v3 Authority Key Identifier:
                keyid:B0:8B:91:8D:2D:45:B6:37:1A:CB:97:70:74:35:53:D1:BF:22:47:08

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/sIuRjS1Ftjcay5dwdDVT0b8iRwg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/sIuRjS1Ftjcay5dwdDVT0b8iRwg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3044/J_h6IP62vVvib6_bpcHqGmc9gB0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.184.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:4e:76:1b:6d:7f:35:a9:83:7e:67:aa:01:17:2d:6f:d7:6a:
         32:b6:92:9b:f5:98:cd:46:db:af:8a:84:77:03:ab:5c:b9:3a:
         62:ed:f0:9b:13:29:c4:d7:b2:a0:19:d3:d1:6b:e0:93:31:c6:
         fb:20:ea:c6:b5:b6:9d:0f:58:86:a0:11:26:d8:06:21:9f:b7:
         3a:d7:e4:9a:de:a6:cb:4f:cd:52:7c:23:87:54:18:cd:46:33:
         cb:2e:6b:4c:d3:5e:50:18:29:75:55:b5:2b:2d:a1:ec:97:eb:
         37:07:78:3d:c9:3f:31:f4:64:18:27:db:e1:67:b1:aa:c0:07:
         07:8c:bf:15:2f:b3:be:56:00:fd:da:41:ba:12:8a:ad:f7:9b:
         b0:c5:12:5e:78:fe:49:9a:73:ce:fb:c5:7e:ea:19:35:28:cf:
         ca:d5:1c:89:91:f2:27:d4:b0:12:9d:13:42:0b:f4:10:87:81:
         a2:61:b1:a9:69:c5:cb:85:d2:70:7a:ba:76:7a:43:13:10:32:
         86:de:32:33:a5:c0:3c:b7:ec:81:a6:22:51:6a:36:4a:0e:a3:
         81:c5:f0:90:11:36:b2:18:80:47:cf:42:fc:46:9a:e6:5f:f1:
         ac:46:08:16:de:27:bd:c0:82:6c:ea:cf:78:85:83:93:bf:2b:
         d3:b9:50:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:35:34 2025 by rpki-client