Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/76/D_62ZU_LMjbNZaBvMKwt57VO82Q.roa
File:                     D_62ZU_LMjbNZaBvMKwt57VO82Q.roa (raw, json)
Hash identifier:          ZV8xxbQXQXNMDW8IHyphfduVai6PunIQ4LWW5B1plho=
Subject key identifier:   0F:FE:B6:65:4F:CB:32:36:CD:65:A0:6F:30:AC:2D:E7:B5:4E:F3:64
Certificate issuer:       /CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
Certificate serial:       040E
Authority key identifier: 2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D_62ZU_LMjbNZaBvMKwt57VO82Q.roa
Signing time:             Mon 12 May 2025 11:37:57 +0000
ROA not before:           Mon 12 May 2025 11:37:57 +0000
ROA not after:            Thu 09 Apr 2026 06:33:21 +0000
asID:                     9391
IP address blocks:        119.16.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E266DC3EAD80EB25D49858A64DC1EF1C8A1B942
        Validity
            Not Before: May 12 11:37:57 2025 GMT
            Not After : Apr  9 06:33:21 2026 GMT
        Subject: CN=0FFEB6654FCB3236CD65A06F30AC2DE7B54EF364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:18:7d:32:7b:52:02:b3:90:9f:57:9b:b5:
                    a1:b8:22:30:ea:2a:48:b8:cd:d9:49:f3:fe:46:ad:
                    17:47:3e:3d:0e:8a:ba:84:82:de:15:0f:5b:9a:17:
                    0a:6b:d7:34:00:4b:7e:b6:45:50:5f:96:c2:a3:a3:
                    d5:27:9e:bb:58:bd:fe:a4:ea:a4:fc:f9:fd:1f:d2:
                    75:ec:e7:08:2e:48:81:45:c1:1c:01:6d:ea:bd:32:
                    73:19:65:4a:07:17:32:c8:25:82:b7:0e:33:f6:0f:
                    3a:3f:8e:ba:58:25:35:aa:88:1d:26:fb:2b:cf:e8:
                    9f:71:1d:17:e3:92:2b:3c:1d:77:82:0f:ca:22:57:
                    3d:76:3d:db:27:aa:3a:eb:14:71:95:4f:e2:f7:3e:
                    97:24:a5:71:bc:8d:2b:8c:74:6b:47:30:08:dc:3e:
                    2e:ff:0e:79:ee:1f:b5:cf:e5:17:58:35:3c:d8:a9:
                    52:3c:27:84:99:51:db:a8:e3:40:51:f0:79:52:68:
                    29:be:dd:4b:74:0f:77:80:a8:0d:45:c9:3c:10:25:
                    ec:fe:aa:b2:0a:22:30:96:77:49:8f:09:28:b6:b9:
                    27:60:90:93:5b:9d:f9:ec:78:38:93:09:6e:7f:c2:
                    fe:fd:74:c9:2d:1e:62:d9:25:1c:2f:68:ca:76:2e:
                    be:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FE:B6:65:4F:CB:32:36:CD:65:A0:6F:30:AC:2D:E7:B5:4E:F3:64
            X509v3 Authority Key Identifier:
                keyid:2E:26:6D:C3:EA:D8:0E:B2:5D:49:85:8A:64:DC:1E:F1:C8:A1:B9:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/LiZtw-rYDrJdSYWKZNwe8cihuUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LiZtw-rYDrJdSYWKZNwe8cihuUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/76/D_62ZU_LMjbNZaBvMKwt57VO82Q.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:62:f5:a5:e6:48:08:1c:e1:4a:ec:93:05:70:e2:1f:c0:6d:
         e6:6c:da:81:89:bf:b0:d8:73:dc:a1:04:04:b8:4a:87:22:8c:
         6c:c7:7a:fc:50:a3:93:8d:d0:4c:12:87:bb:f5:31:94:7a:a9:
         02:69:ea:f3:7f:7f:2d:c4:79:59:5a:fc:a3:40:4a:46:09:d6:
         54:6f:de:23:18:36:44:ef:56:22:1a:7f:e9:e0:2a:a9:4b:2c:
         1f:de:9b:5a:19:55:20:d7:ef:3e:51:4d:98:e7:58:ff:b6:d6:
         47:03:d9:93:f0:60:36:59:3f:87:ba:f0:e5:ed:a1:cf:79:1d:
         0d:a7:15:98:8d:59:51:77:02:3e:89:3e:a6:bf:2f:26:50:82:
         c1:d0:9c:c5:ee:d6:0e:29:06:c9:49:69:08:78:46:07:d9:f7:
         a2:b2:af:fc:f6:63:16:db:a7:ff:e8:de:24:57:fa:b5:e1:4b:
         30:e9:8b:47:35:33:2b:fb:65:bb:cd:37:f1:7a:84:b5:5b:cf:
         ad:8f:8c:95:39:94:19:d3:fc:b6:73:a0:d7:a4:79:2c:38:f1:
         10:9c:b0:72:0a:b0:a2:f8:71:ca:b5:54:2a:01:b5:c6:01:61:
         69:77:da:71:fd:34:06:14:93:83:4e:1e:53:15:e2:37:88:e8:
         ad:f6:7c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 01:01:36 2025 by rpki-client