Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/JqSuOB4J4yTLqLN9PTObQgFGcDM.roa
File:                     JqSuOB4J4yTLqLN9PTObQgFGcDM.roa (raw, json)
Hash identifier:          5218pbWfAg2nG5RlfB/WcLDhI6u7BQQGHRC7Y09zj8Y=
Subject key identifier:   26:A4:AE:38:1E:09:E3:24:CB:A8:B3:7D:3D:33:9B:42:01:46:70:33
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       0D96
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/JqSuOB4J4yTLqLN9PTObQgFGcDM.roa
Signing time:             Thu 15 Dec 2022 06:15:30 +0000
ROA not before:           Thu 15 Dec 2022 06:15:30 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     7018
IP address blocks:        45.126.100.0/22 maxlen: 24
                          103.73.244.0/22 maxlen: 24
                          103.249.12.0/22 maxlen: 24
                          103.249.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3478 (0xd96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Dec 15 06:15:30 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=26A4AE381E09E324CBA8B37D3D339B4201467033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:ae:d3:ac:2e:6c:11:77:25:b0:10:90:39:
                    a1:e3:8f:60:1a:3c:1c:2d:ef:73:12:06:c7:56:a7:
                    3c:b9:aa:03:a2:fa:20:c6:6b:09:4e:f3:49:67:1d:
                    66:c7:24:c4:59:30:72:45:2d:6e:ac:1e:a2:e5:85:
                    7a:a4:e5:76:46:ba:91:6f:2a:f0:4b:d3:4b:7e:1c:
                    d5:54:33:e0:84:ec:f9:aa:0d:35:66:16:67:9f:06:
                    12:02:7a:ea:6c:3c:26:48:fc:34:55:cc:5d:d3:8b:
                    a1:67:e9:b3:3e:e9:0f:6f:e3:6d:cd:4b:b8:df:7e:
                    41:09:d8:e2:79:a7:ab:59:ce:16:17:9c:e6:ac:d0:
                    35:76:e4:5f:b5:f6:55:87:76:6b:fa:0c:01:82:0b:
                    ba:81:59:5f:d2:6c:2b:c3:93:7b:ae:94:86:1f:a2:
                    cf:63:bd:6b:8c:c6:ae:b2:cb:24:4c:7b:0b:64:16:
                    05:e2:00:ae:ff:df:49:1e:e8:d4:a7:bd:e1:55:24:
                    cd:bd:86:93:e0:ba:76:16:8c:cd:8d:f1:dd:54:30:
                    42:66:43:50:75:34:0a:8d:15:50:dc:37:f0:6b:84:
                    b1:3f:5c:be:36:b8:17:d5:1b:3c:92:c4:23:94:2c:
                    22:bd:e0:b6:69:f4:f3:a5:9e:3d:45:25:d3:16:8b:
                    4d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A4:AE:38:1E:09:E3:24:CB:A8:B3:7D:3D:33:9B:42:01:46:70:33
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/JqSuOB4J4yTLqLN9PTObQgFGcDM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.100.0/22
                  103.73.244.0/22
                  103.249.12.0/22
                  103.249.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e9:58:c6:04:7d:bc:b4:5f:db:0f:60:ed:e5:62:db:7d:31:b6:
         69:71:f4:13:2b:48:db:b2:e4:7c:4e:2a:22:a3:99:7d:36:ce:
         ec:fd:33:13:82:24:73:97:9d:72:e4:21:3a:df:8e:8d:5d:bc:
         99:73:8e:5c:5f:89:23:ac:96:ed:b1:c7:d2:0c:c7:2c:b7:6a:
         5f:e3:5f:c8:01:b1:8f:8c:ae:2c:36:ac:9b:15:02:a9:92:b4:
         ba:e2:03:15:57:23:2a:3f:86:5a:1e:43:4b:b4:be:4d:af:18:
         e5:5e:6b:4c:0f:57:f4:c4:f2:bc:47:ad:27:a4:a6:43:6a:f7:
         8a:9a:3c:d7:0d:74:26:c6:37:0b:42:24:64:a9:98:04:a0:cb:
         0b:56:f4:6f:c8:da:d6:79:05:d7:54:c1:50:6d:97:6c:be:c6:
         3e:59:f0:6b:01:02:b0:cc:6b:c8:bf:2f:ee:0e:ba:29:93:9a:
         c3:60:5d:2a:35:6c:b1:43:78:1d:8d:fa:e3:11:71:01:69:88:
         41:14:84:4c:32:80:12:97:3e:ee:3e:4f:12:45:28:48:01:90:
         cb:31:7f:eb:d0:07:55:90:a3:55:15:23:7f:24:ee:87:a0:cd:
         04:e4:1a:05:29:56:ee:98:60:95:ac:23:09:ef:6a:6d:a4:33:
         6a:32:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:23 2023 by rpki-client on console-fra.rpki-client.org