Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/_0ZMv-nXMfHD2UeNhWHgEKSX7XE.roa
File:                     _0ZMv-nXMfHD2UeNhWHgEKSX7XE.roa (raw, json)
Hash identifier:          5IF1f3NpGHcIuAfGCWpvNNu43sEd6BGreyOkrkG48wI=
Subject key identifier:   FF:46:4C:BF:E9:D7:31:F1:C3:D9:47:8D:85:61:E0:10:A4:97:ED:71
Certificate issuer:       /CN=EB99479D36FDF26A88696045970E50154123586C
Certificate serial:       06F8
Authority key identifier: EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/_0ZMv-nXMfHD2UeNhWHgEKSX7XE.roa
Signing time:             Fri 09 Jul 2021 07:07:05 +0000
ROA not before:           Fri 09 Jul 2021 07:07:05 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     59066
IP address blocks:        103.43.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB99479D36FDF26A88696045970E50154123586C
        Validity
            Not Before: Jul  9 07:07:05 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=FF464CBFE9D731F1C3D9478D8561E010A497ED71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:dc:65:2b:e1:82:4c:16:93:c2:38:74:e5:
                    9e:f9:bb:2e:4f:5c:ae:3f:ee:9f:c7:4a:05:78:47:
                    c0:6c:35:d7:90:93:43:88:62:fe:df:59:d6:98:e4:
                    72:f0:69:4b:a4:35:24:8b:d9:93:0e:2e:0c:f7:9e:
                    dd:34:ab:84:6c:9a:94:e0:f5:46:9a:4e:21:3c:f2:
                    02:6a:9e:47:f7:0f:48:23:1b:5c:1d:3b:ed:95:85:
                    d8:fb:ff:96:e6:e7:ea:f9:61:d6:5a:77:ed:4b:c6:
                    61:60:89:e7:29:16:9c:6c:fe:1b:fd:f7:2c:ba:55:
                    9b:56:fb:ab:bb:ab:2e:68:a0:da:73:bd:a1:40:17:
                    d2:71:54:4a:f0:4a:fa:94:a0:44:89:c6:bf:e7:4e:
                    4a:46:c4:e7:33:5e:82:01:d6:38:5a:8d:53:24:29:
                    1a:85:a3:fc:84:66:0c:67:f5:ad:73:4d:70:6d:a3:
                    e5:de:66:de:c5:26:0b:41:ac:18:db:95:fe:67:cc:
                    52:d4:59:34:bf:f2:f8:06:21:1a:06:5a:53:03:50:
                    87:4b:fd:dc:df:a9:7f:35:23:da:da:dc:44:3b:47:
                    27:8e:11:d5:8b:ed:28:81:87:72:c3:82:cf:e6:b5:
                    cb:12:da:b4:4d:95:31:a0:5b:4c:3f:38:06:c3:f3:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:46:4C:BF:E9:D7:31:F1:C3:D9:47:8D:85:61:E0:10:A4:97:ED:71
            X509v3 Authority Key Identifier:
                keyid:EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/65lHnTb98mqIaWBFlw5QFUEjWGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/_0ZMv-nXMfHD2UeNhWHgEKSX7XE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:63:b4:04:5e:67:08:09:1e:af:55:35:fc:e1:f2:13:17:
         83:95:c9:47:fc:a5:23:40:71:aa:a7:f7:a4:c0:0f:05:b3:f5:
         b8:04:f9:0f:ee:73:9e:e5:dd:d7:5b:28:c1:80:11:fe:42:b6:
         a8:04:37:1c:bb:82:96:09:13:7b:ef:2d:3e:62:dd:5e:3a:97:
         44:78:5c:51:3c:39:a5:4e:fd:72:ca:b0:fe:2d:02:77:59:4a:
         ae:bb:42:06:6c:27:4b:c0:69:b7:21:ee:44:44:33:e6:16:8e:
         0e:28:9b:b4:b1:99:ea:5b:dc:e6:cf:54:d7:be:e0:fa:f2:d4:
         a7:f6:46:e5:10:4b:e1:02:98:70:b3:ac:5b:d5:8c:c3:5d:f6:
         eb:c5:be:91:df:4b:ee:28:43:70:81:8d:c2:3a:f9:12:2e:b2:
         58:35:29:f1:53:1b:5b:5e:50:9d:0d:c6:b7:87:65:47:52:5f:
         2c:51:3e:ff:1d:fa:d5:f8:3f:59:d0:cb:75:ff:a4:00:15:9e:
         bf:ff:72:3b:03:2c:a1:00:cb:67:a0:e7:9b:ba:bb:b1:c7:22:
         80:19:f1:e2:b0:13:ba:ee:07:d0:27:7b:78:3e:c1:a8:90:0b:
         cb:98:54:77:9a:b8:49:06:59:67:9e:3c:10:07:85:45:31:3c:
         91:0a:53:b6
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI5
OTQ3OUQzNkZERjI2QTg4Njk2MDQ1OTcwRTUwMTU0MTIzNTg2QzAeFw0yMTA3MDkw
NzA3MDVaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEZGNDY0Q0JGRTlENzMx
RjFDM0Q5NDc4RDg1NjFFMDEwQTQ5N0VENzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6MdxlK+GCTBaTwjh05Z75uy5PXK4/7p/HSgV4R8BsNdeQk0OI
Yv7fWdaY5HLwaUukNSSL2ZMOLgz3nt00q4RsmpTg9UaaTiE88gJqnkf3D0gjG1wd
O+2Vhdj7/5bm5+r5YdZad+1LxmFgiecpFpxs/hv99yy6VZtW+6u7qy5ooNpzvaFA
F9JxVErwSvqUoESJxr/nTkpGxOczXoIB1jhajVMkKRqFo/yEZgxn9a1zTXBto+Xe
Zt7FJgtBrBjblf5nzFLUWTS/8vgGIRoGWlMDUIdL/dzfqX81I9ra3EQ7RyeOEdWL
7SiBh3LDgs/mtcsS2rRNlTGgW0w/OAbD8y2lAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQU/0ZMv+nXMfHD2UeNhWHgEKSX7XEwHwYDVR0jBBgwFoAU65lHnTb98mqIaWBF
lw5QFUEjWGwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAz
MC82NWxIblRiOThtcUlhV0JGbHc1UUZVRWpXR3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzY1bEhuVGI5OG1xSWFXQkZsdzVRRlVFaldHdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMzAvXzBaTXYtblhNZkhE
MlVlTmhXSGdFS1NYN1hFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcrwDANBgkqhkiG9w0BAQsFAAOCAQEAXjdjtAReZwgJHq9VNfzh8hMXg5XJ
R/ylI0Bxqqf3pMAPBbP1uAT5D+5znuXd11sowYAR/kK2qAQ3HLuClgkTe+8tPmLd
XjqXRHhcUTw5pU79csqw/i0Cd1lKrrtCBmwnS8BptyHuREQz5haODiibtLGZ6lvc
5s9U177g+vLUp/ZG5RBL4QKYcLOsW9WMw13268W+kd9L7ihDcIGNwjr5Ei6yWDUp
8VMbW15QnQ3Gt4dlR1JfLFE+/x361fg/WdDLdf+kABWev/9yOwMsoQDLZ6Dnm7q7
sccigBnx4rATuu4H0Cd7eD7BqJALy5hUd5q4SQZZZ548EAeFRTE8kQpTtg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:06 2024 by rpki-client on console-ams.rpki-client.org