Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/cEccjeo6z__9Es9hhm3y2aJlK2Y.roa
File:                     cEccjeo6z__9Es9hhm3y2aJlK2Y.roa (raw, json)
Hash identifier:          P9252SkibuUP7rSVx3wC0g9jTl4vsqYvFdcvGRYZywI=
Subject key identifier:   70:47:1C:8D:EA:3A:CF:FF:FD:12:CF:61:86:6D:F2:D9:A2:65:2B:66
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       1331
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cEccjeo6z__9Es9hhm3y2aJlK2Y.roa
Signing time:             Sun 01 Jun 2025 16:09:20 +0000
ROA not before:           Sun 01 Jun 2025 16:09:20 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        27.103.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4913 (0x1331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: Jun  1 16:09:20 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=70471C8DEA3ACFFFFD12CF61866DF2D9A2652B66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:c9:e3:4c:e7:9a:ea:67:c9:dd:5d:6a:52:
                    8e:cd:fb:ba:b8:5f:a5:4e:69:cc:70:a3:76:0a:67:
                    6c:ab:4b:97:c5:47:82:41:ff:69:e0:cb:63:8c:68:
                    64:38:1f:42:6c:b3:fe:ed:f3:3b:8a:39:a7:e2:da:
                    0b:e7:1a:b7:47:10:cd:9d:c2:0d:9d:e7:b4:2b:c0:
                    81:e2:91:64:fe:67:0c:7f:6d:42:20:db:89:3f:47:
                    3f:54:77:d0:1c:e8:75:fd:5b:e3:ec:85:d7:c3:8c:
                    39:6b:1a:74:d5:08:9d:b3:44:8d:bb:1d:7e:25:c7:
                    e3:83:49:a9:bc:ea:9a:0c:76:ee:cc:00:90:fb:30:
                    ee:1f:2e:46:9d:86:6c:44:29:62:75:7b:cf:7f:63:
                    ae:b6:ea:4c:25:3d:1c:21:5d:9b:e6:eb:25:5a:05:
                    7b:ca:ba:52:f6:95:4f:bb:bc:ec:91:9f:68:07:db:
                    a3:da:61:ad:f9:a8:1e:db:e0:bf:9b:db:78:47:70:
                    8d:28:24:0e:bd:71:4d:ae:11:3c:ab:1a:4d:89:70:
                    3d:6a:8f:7a:da:f9:17:0c:ff:5e:0e:42:b4:49:e6:
                    b8:53:af:a3:e1:3d:e8:d1:5c:58:f9:e0:9a:7d:55:
                    c0:0c:5c:21:49:43:fb:9e:f3:6f:14:4d:23:2a:f4:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:47:1C:8D:EA:3A:CF:FF:FD:12:CF:61:86:6D:F2:D9:A2:65:2B:66
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/cEccjeo6z__9Es9hhm3y2aJlK2Y.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:c2:b9:ad:12:0e:ff:b3:27:9a:db:b4:e7:df:47:f0:23:
         94:02:1b:0e:b7:43:19:98:63:95:9f:36:80:85:f9:e1:e6:9d:
         01:36:90:ea:3c:bb:1d:6d:19:5b:d4:fb:7f:aa:2d:e2:79:14:
         ef:d1:5c:7a:29:ec:52:40:ab:9b:df:d4:4f:3e:cf:c8:1a:a4:
         81:d1:3a:8f:cb:93:f1:dd:93:f9:db:4f:7b:14:b2:5c:82:8c:
         b4:ae:47:70:da:ed:1f:37:5e:4c:25:f0:56:d5:30:3f:1d:46:
         61:6a:6f:53:42:fa:54:38:98:61:b4:7b:17:01:f7:e7:b2:bf:
         bf:b3:c9:e5:42:02:a2:05:26:50:d0:dd:7b:01:a9:e6:c1:13:
         e4:7f:8b:34:a9:08:3d:82:9b:d6:92:76:0e:8f:67:fc:97:33:
         3b:57:1b:d1:25:ae:4c:e9:13:dc:df:d8:39:6e:e2:92:bc:81:
         d6:31:a9:59:a9:5a:dd:d1:09:06:b6:59:2f:a1:ce:61:2b:da:
         5e:c9:18:35:9c:5f:95:32:4f:28:27:56:9e:17:17:e6:8a:e8:
         f8:97:41:ba:a5:53:50:d6:9f:f1:76:5d:dc:76:bf:50:6a:42:
         2d:88:9a:8e:52:08:49:47:cf:6f:5c:1d:f2:b3:ed:50:db:ba:
         ee:90:be:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:23:54 2025 by rpki-client