Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/1osuxSm9Veb7gBsPrkyMF__49W4.roa
File:                     1osuxSm9Veb7gBsPrkyMF__49W4.roa (raw, json)
Hash identifier:          slTALUR8IpIUXAXmHbgpQtxYlMDJojvGfPflEjjx6Aw=
Subject key identifier:   D6:8B:2E:C5:29:BD:55:E6:FB:80:1B:0F:AE:4C:8C:17:FF:F8:F5:6E
Certificate issuer:       /CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
Certificate serial:       06E2
Authority key identifier: 7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/1osuxSm9Veb7gBsPrkyMF__49W4.roa
Signing time:             Thu 18 May 2023 07:25:30 +0000
ROA not before:           Thu 18 May 2023 07:25:30 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     59066
IP address blocks:        103.43.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1762 (0x6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7AB6E2F4C45731D03C27AEAFDD608611871B423C
        Validity
            Not Before: May 18 07:25:30 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=D68B2EC529BD55E6FB801B0FAE4C8C17FFF8F56E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:92:e4:9d:b6:22:ca:dc:07:a8:99:80:ce:
                    40:19:5e:59:27:43:14:f6:25:9c:37:47:c3:2c:40:
                    56:11:a3:35:66:93:d9:24:c9:2e:23:9e:9c:b2:a8:
                    5c:ce:ab:71:a8:08:dc:1e:3a:d8:dc:21:80:c8:89:
                    ef:9e:b9:0d:23:eb:3d:2d:f4:85:53:c2:46:0e:8f:
                    05:22:f2:c6:07:7b:d9:45:b0:43:8f:f0:c4:35:d3:
                    cc:0a:d8:cd:25:5e:b1:23:b2:06:62:72:bc:33:be:
                    a1:6f:9e:6c:93:c2:ad:76:cd:e6:b1:d7:35:a7:e0:
                    e0:78:4f:de:cb:07:bf:51:a1:13:65:f0:05:bf:f8:
                    d6:16:8d:8a:f8:18:08:13:5d:89:8e:84:dc:44:b2:
                    09:b6:0d:ed:e5:96:d1:07:91:61:ca:c5:34:0d:2e:
                    f8:eb:89:d1:47:37:0c:aa:9f:a4:3d:9b:ea:97:47:
                    64:40:af:8b:7e:d8:38:db:a0:32:2f:a6:fd:65:b2:
                    76:48:29:0f:0d:5e:cd:d1:d0:a0:e9:04:bf:9f:4a:
                    17:19:6c:57:8f:fa:79:bb:6e:2c:8b:53:d0:fb:72:
                    92:b7:44:fd:a8:4f:7f:b9:d7:9c:00:a3:e4:e9:10:
                    3e:3a:dd:73:a5:55:6a:81:41:36:1f:29:23:11:81:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8B:2E:C5:29:BD:55:E6:FB:80:1B:0F:AE:4C:8C:17:FF:F8:F5:6E
            X509v3 Authority Key Identifier:
                keyid:7A:B6:E2:F4:C4:57:31:D0:3C:27:AE:AF:DD:60:86:11:87:1B:42:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/erbi9MRXMdA8J66v3WCGEYcbQjw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/erbi9MRXMdA8J66v3WCGEYcbQjw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/1osuxSm9Veb7gBsPrkyMF__49W4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:16:21:33:82:54:06:36:3f:74:de:9e:a1:16:58:03:e2:13:
         ba:ba:d9:45:91:54:08:74:13:06:50:1c:8d:e2:5d:eb:43:e3:
         bf:46:6e:55:b1:e5:05:fe:ef:97:ec:60:af:35:df:02:9a:95:
         ad:f1:33:47:e3:a5:19:f7:43:4d:64:b6:3d:bb:1f:b7:13:ac:
         9d:4e:9c:a1:68:86:5b:ad:f4:47:9e:e4:e4:52:3b:07:f9:93:
         00:e8:3e:28:b2:3f:cc:99:c5:0e:f8:eb:af:03:3b:67:bf:39:
         04:3f:44:5a:3d:1e:0a:e1:75:aa:10:04:84:92:7a:2f:55:23:
         68:be:6a:51:8a:8e:97:99:7e:cf:9c:27:35:82:a7:ee:b0:66:
         fa:c2:a6:d6:e9:60:fd:cb:ad:90:52:67:09:9a:9b:14:99:e5:
         ec:19:9b:b0:22:9b:1a:bd:7b:84:d2:89:6c:2c:ff:cc:2a:67:
         ee:98:b5:5e:d9:0f:da:d4:1f:59:ab:49:1b:2e:cf:1a:5d:23:
         a9:b7:f8:2b:2a:1d:d7:c2:64:b1:1a:7d:0b:9b:0f:88:5e:3b:
         4a:e8:ad:74:30:c0:e2:fd:f6:74:95:98:64:19:0e:d0:c1:87:
         5e:e8:72:4f:bc:80:17:5c:b9:9d:76:63:46:0d:60:00:4a:c4:
         78:c5:4b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org