Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9mWDlcZWOMZFFwARnWMA3a6WE.roa
File:                     9j9mWDlcZWOMZFFwARnWMA3a6WE.roa (raw, json)
Hash identifier:          d1K8Gv7v0aCq7RIUgbNzB2fKqBIQVrYtCi9szoAJp34=
Subject key identifier:   F6:3F:66:58:39:5C:65:63:8C:64:51:70:01:19:D6:30:0D:DA:E9:61
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       2251
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9mWDlcZWOMZFFwARnWMA3a6WE.roa
Signing time:             Sun 22 Jun 2025 07:41:50 +0000
ROA not before:           Sun 22 Jun 2025 07:41:50 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8785 (0x2251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun 22 07:41:50 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=F63F6658395C65638C6451700119D6300DDAE961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:ef:33:dd:29:d7:7b:df:2c:1e:77:18:1d:
                    90:8a:22:9e:1f:06:15:29:9f:14:e4:29:a8:9c:f5:
                    37:c9:23:04:2f:45:cb:ba:89:01:d0:07:28:f4:57:
                    e4:5b:89:e8:e0:2e:20:db:b8:16:c5:6d:1b:d9:af:
                    f4:c0:63:7e:4f:c0:a5:70:66:77:39:2f:3a:fb:62:
                    22:79:c5:fe:80:ff:7f:0b:36:fc:2c:ac:a9:f9:a4:
                    4d:97:80:12:ee:cb:81:19:ec:45:95:9b:76:c0:6b:
                    6b:80:5f:b0:38:95:e8:39:d4:dc:34:2e:b5:6c:c1:
                    5d:51:d8:e9:0d:b1:17:a5:8b:2c:fb:4f:8d:30:98:
                    4d:80:93:df:c2:96:66:29:a9:9f:57:92:b7:b0:8d:
                    bb:ec:7b:d9:27:99:50:f4:80:f9:a2:86:d0:0d:cb:
                    92:d6:fb:10:3b:f8:7b:03:fb:39:ec:27:80:65:f4:
                    66:4e:2b:30:51:5f:31:4e:4c:59:1c:e9:46:d4:1f:
                    36:0d:ac:b0:71:3c:aa:b9:86:3f:aa:af:d9:49:c3:
                    93:ab:8d:d0:75:a2:1f:e8:58:51:2a:84:fc:cc:40:
                    9f:d0:8c:e6:d6:36:6c:cc:ad:6c:25:fc:0c:fd:1d:
                    93:49:22:b2:2c:73:65:f0:31:6f:5c:5f:a6:6c:3c:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3F:66:58:39:5C:65:63:8C:64:51:70:01:19:D6:30:0D:DA:E9:61
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/9j9mWDlcZWOMZFFwARnWMA3a6WE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:55:3d:93:cc:53:8b:df:f2:28:fd:96:63:99:4f:a1:6e:36:
         c6:2d:5f:4a:ff:1e:b2:12:0f:4a:19:2b:a5:b2:26:fd:c3:38:
         ab:1d:56:b7:53:72:28:15:7a:a9:8a:46:0f:84:70:5d:15:38:
         51:cc:2b:d9:3c:07:3e:91:6f:47:48:1a:0b:e3:dd:55:db:d9:
         7a:2a:a7:c4:bd:db:07:32:4a:37:8e:36:38:19:77:f9:8c:45:
         8d:5a:82:fe:0d:f1:d9:a0:7a:2d:21:4a:11:d4:c7:00:61:9b:
         db:50:20:8a:d1:6e:e6:a7:c6:13:28:0a:9c:cd:ee:2a:15:da:
         7e:a3:f6:0e:a3:c0:99:b4:69:53:2e:01:05:59:c2:ac:fc:97:
         b9:cb:ef:0e:79:ff:00:9f:45:18:63:dc:0a:fa:e0:c4:8f:7a:
         5c:43:88:b0:4a:3a:54:76:5a:59:f9:d1:6a:eb:85:4e:1a:2b:
         10:15:89:be:e9:4a:96:cd:c3:38:73:40:3f:35:11:12:6c:ce:
         1d:7e:81:53:13:65:ec:0c:d0:66:c1:dd:b8:ec:53:2d:25:5c:
         dc:42:47:6c:ed:5c:30:76:28:ba:57:9f:db:a8:b5:8a:35:a4:
         4a:63:1c:7a:51:84:b7:77:0a:7c:6b:a4:4a:21:98:d3:a7:db:
         59:ea:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 19:05:31 2025 by rpki-client