Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/6wYo0D-PxiuaidFKRpXRCQIcjhg.roa
File:                     6wYo0D-PxiuaidFKRpXRCQIcjhg.roa (raw, json)
Hash identifier:          EXJap0HrTpJQtd7mQcMltb1UDmnXE7DUZzURR9pwOP4=
Subject key identifier:   EB:06:28:D0:3F:8F:C6:2B:9A:89:D1:4A:46:95:D1:09:02:1C:8E:18
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       0EC5
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6wYo0D-PxiuaidFKRpXRCQIcjhg.roa
Signing time:             Mon 26 May 2025 18:38:43 +0000
ROA not before:           Mon 26 May 2025 18:38:43 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3781 (0xec5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 26 18:38:43 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=EB0628D03F8FC62B9A89D14A4695D109021C8E18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:fe:e5:18:0b:2e:53:25:f2:50:35:6a:f7:
                    8d:f6:3a:8c:73:6b:cf:2c:71:b8:36:0c:97:5a:4b:
                    dc:75:92:8c:fc:6c:0f:c6:c5:95:60:61:e1:68:ae:
                    1a:47:63:01:d0:4e:df:aa:e6:49:b2:7c:2d:32:70:
                    67:d8:bf:48:59:07:c4:4c:a1:d4:b4:82:13:5e:c1:
                    bd:98:f0:57:e2:da:56:0f:df:ce:1e:dc:d4:9a:8b:
                    07:83:e3:52:0d:3f:23:d7:68:b3:8f:da:32:84:f4:
                    a2:bd:42:29:46:3d:8b:24:c8:aa:b0:b7:49:be:19:
                    6a:1e:df:2d:a3:7d:b7:1f:83:0f:43:9c:19:c0:fc:
                    13:2d:cb:87:f0:c1:9e:d6:86:6b:7a:cd:20:29:60:
                    0f:11:7a:d4:cd:7e:86:05:ed:55:e3:e1:3d:86:6b:
                    66:c2:92:2e:8d:37:43:b4:99:c2:bd:78:56:84:0b:
                    af:e5:52:d7:bd:00:fe:45:09:eb:7d:d0:2a:67:1f:
                    8b:4d:99:10:ab:f5:f5:32:87:c7:5b:04:3e:74:c1:
                    3e:9d:aa:0e:0e:4a:82:8a:f6:75:68:0c:bb:19:df:
                    5d:24:27:d0:67:a0:2e:5a:a0:16:32:3c:84:f8:5b:
                    d6:a1:72:f4:2e:2f:df:a2:5a:5f:d6:9d:30:4e:cb:
                    56:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:06:28:D0:3F:8F:C6:2B:9A:89:D1:4A:46:95:D1:09:02:1C:8E:18
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/6wYo0D-PxiuaidFKRpXRCQIcjhg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:94:c0:3d:43:c3:9b:dc:ee:b5:ba:14:e3:51:24:42:2a:e3:
         8b:8a:6b:a9:4e:e4:60:fd:f9:6c:42:33:6a:ee:07:c4:04:37:
         8b:36:ca:7e:05:ba:76:7d:fb:cb:6f:fd:8d:71:b4:7b:7e:ac:
         5b:be:ce:30:83:85:18:c5:f8:48:51:2d:87:41:03:c1:4d:a3:
         4d:44:0f:c9:da:e7:b3:3a:dd:1d:6b:65:2e:8f:5a:dc:44:da:
         cb:bc:53:ce:30:72:96:f5:1f:1b:99:8e:e6:b9:5b:8e:00:33:
         38:11:2a:93:12:90:e8:c8:5d:05:62:fb:d7:23:1a:c0:38:d7:
         01:92:55:41:dd:4c:e8:b2:6e:71:23:cb:f0:8c:75:1a:44:a1:
         c2:80:60:36:3d:25:7a:89:51:49:68:87:0b:c1:3b:1a:fa:eb:
         b7:6d:46:38:e3:a5:cb:54:e5:25:22:a2:f2:99:2f:7b:15:77:
         96:0b:bf:c6:52:ba:f9:ff:3e:62:40:80:5c:55:eb:4b:0a:b8:
         a0:0f:3e:4e:f1:2a:85:ae:db:84:01:1d:4f:5f:a3:a4:dc:ff:
         8d:d1:40:d1:3e:b2:98:45:9b:3f:1b:44:36:af:09:24:5b:c4:
         76:28:bf:0d:9f:63:bd:34:4d:1c:82:89:2f:1e:f5:34:68:91:
         c8:a6:dc:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:17:12 2025 by rpki-client