Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
File:                     NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa (raw, json)
Hash identifier:          e+m4e4I9crI0rPD+IWKnxpMY/JydOXyK2JvvXwOuvN8=
Subject key identifier:   35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB
Certificate issuer:       /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
Certificate serial:       164E
Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
Signing time:             Mon 08 Sep 2025 09:24:01 +0000
ROA not before:           Mon 08 Sep 2025 09:24:01 +0000
ROA not after:            Mon 03 Aug 2026 08:44:40 +0000
asID:                     13335
IP address blocks:        45.250.152.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5710 (0x164e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094
        Validity
            Not Before: Sep  8 09:24:01 2025 GMT
            Not After : Aug  3 08:44:40 2026 GMT
        Subject: CN=3540213A9F6B11D6C26F0701A9167506A62302DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:19:cb:52:f7:92:e0:82:9a:a6:5e:3f:27:a5:
                    01:51:ab:2e:3c:db:2b:7b:d3:f3:45:55:b0:56:d7:
                    80:f7:3e:a9:51:b8:5a:b7:d1:aa:6c:9d:e7:90:2b:
                    c8:2b:0e:3c:c2:2d:bd:ef:cb:bf:71:19:72:3f:cd:
                    0b:01:7f:54:6c:c5:c6:99:bf:68:83:40:19:ee:15:
                    04:a5:a6:d1:a4:fb:44:77:67:b6:e3:a3:0d:f9:14:
                    56:08:1c:3d:9f:bb:1a:a6:47:6f:08:7a:53:22:cc:
                    7f:de:89:49:fc:d4:f4:e3:59:ed:ca:83:62:c3:03:
                    4a:73:4e:8d:4a:d5:98:a1:a2:d5:ac:3b:75:19:11:
                    66:bd:e8:74:d0:93:f0:10:c1:2d:80:c0:38:d8:f9:
                    aa:85:0f:c5:eb:1f:9f:82:15:e8:52:c7:38:f8:cb:
                    7a:d7:57:15:64:51:dc:87:73:6b:ae:f2:e2:98:1b:
                    0b:04:63:b2:d1:3e:18:94:79:ff:13:7e:8b:52:4a:
                    72:a0:36:0d:47:a6:f3:ab:3b:6a:34:e9:c7:d0:f8:
                    f5:fd:63:07:e2:bb:e4:8c:7d:21:3c:e8:59:40:20:
                    07:67:6f:cb:a0:6a:dd:b4:56:ba:d8:30:9b:97:0f:
                    f6:37:35:54:5a:59:e2:9c:4f:c9:20:61:c1:cf:10:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:40:21:3A:9F:6B:11:D6:C2:6F:07:01:A9:16:75:06:A6:23:02:DB
            X509v3 Authority Key Identifier:
                keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/NUAhOp9rEdbCbwcBqRZ1BqYjAts.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:64:85:1e:c5:88:c1:92:e2:cd:84:ee:04:76:0a:18:c1:df:
         39:1d:58:ef:97:eb:e7:1b:3e:01:59:f2:51:b1:cb:96:db:8f:
         1a:3d:86:23:b3:e5:9b:02:75:c5:9a:24:8a:82:aa:b8:8d:1b:
         18:d1:c5:cd:d4:f1:49:c9:1f:a7:74:eb:5c:07:4b:69:d6:01:
         2d:98:2f:92:02:8d:7b:71:81:d0:79:e2:cb:ba:d4:2c:90:19:
         cc:ea:f6:5f:d3:34:ea:8b:36:97:cc:0a:7f:03:e9:5e:b9:b9:
         19:84:4e:32:bb:d9:4f:4b:23:e9:5d:38:77:2a:35:7d:64:da:
         2f:38:78:49:4a:02:16:aa:4f:10:7e:0c:a4:03:87:45:4b:6f:
         76:7b:ff:15:6f:bf:ea:40:98:5a:5f:2f:4f:20:e8:e0:54:46:
         d4:fc:d6:3b:9a:e8:3b:f5:83:bd:4d:3f:80:d6:96:ff:b2:8e:
         33:eb:57:ba:14:ba:8f:67:fa:f9:0f:50:2f:bb:8b:f7:93:df:
         8e:82:00:73:f2:ce:c5:d2:11:a2:36:9c:fa:b8:41:85:ad:2f:
         7c:bd:82:de:cf:de:7a:76:2f:72:09:07:a7:68:0e:99:97:64:
         77:11:db:85:b2:26:61:01:0f:22:23:e2:a3:63:2a:17:19:68:
         2a:26:57:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:10:11 2025 by rpki-client