Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1030/q7HhNkd-enW0u2mv3zNj-zhV5EM.roa
File:                     q7HhNkd-enW0u2mv3zNj-zhV5EM.roa (raw, json)
Hash identifier:          VuvLZ90B+7/f60VSWM/aNSQGJyT4DzIqIPJJCW089RQ=
Subject key identifier:   AB:B1:E1:36:47:7E:7A:75:B4:BB:69:AF:DF:33:63:FB:38:55:E4:43
Certificate issuer:       /CN=EB99479D36FDF26A88696045970E50154123586C
Certificate serial:       06F8
Authority key identifier: EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/q7HhNkd-enW0u2mv3zNj-zhV5EM.roa
Signing time:             Fri 09 Jul 2021 07:07:05 +0000
ROA not before:           Fri 09 Jul 2021 07:07:05 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     131482
IP address blocks:        103.43.192.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1784 (0x6f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB99479D36FDF26A88696045970E50154123586C
        Validity
            Not Before: Jul  9 07:07:05 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=ABB1E136477E7A75B4BB69AFDF3363FB3855E443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:9b:7f:43:5d:69:b1:1e:72:2e:06:6b:50:38:
                    24:c2:35:ca:22:b6:e0:bf:d8:8f:51:71:c1:d6:d4:
                    9b:24:23:8a:44:0e:d9:ae:c3:e1:d6:e4:d4:34:e0:
                    03:65:06:b1:ad:dd:67:ce:34:f7:bd:7c:48:ac:1f:
                    04:33:b2:32:fb:d6:8e:dd:a3:25:d3:f0:06:7e:da:
                    76:d3:19:a8:78:1c:4b:3b:17:e3:96:8a:7a:ce:67:
                    65:90:d1:c5:ae:e7:7d:16:bc:98:78:a4:3d:42:9c:
                    09:87:2a:92:88:bc:47:73:85:c8:a3:5a:95:b2:cb:
                    70:fe:35:67:60:eb:e4:5a:ac:5c:d1:71:aa:06:4c:
                    c3:00:1f:01:0a:54:99:92:d3:4f:d9:66:6d:94:00:
                    dc:ad:55:2a:4b:e4:51:52:a6:1f:f5:53:2e:3e:f1:
                    22:56:4f:71:79:44:19:67:ff:75:a8:e6:ba:ef:62:
                    22:b7:5c:f5:31:8c:a2:20:95:9f:84:8a:b0:23:bc:
                    27:38:2f:6b:58:1d:5c:d2:2d:18:96:ca:91:63:31:
                    4b:55:51:c7:10:6d:97:40:6e:8c:7a:7e:88:0b:05:
                    da:80:fc:98:58:43:ae:ea:de:66:5c:e9:6f:d8:ba:
                    88:5c:4d:71:cb:70:2a:3e:b1:75:28:ac:ac:15:f2:
                    a8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B1:E1:36:47:7E:7A:75:B4:BB:69:AF:DF:33:63:FB:38:55:E4:43
            X509v3 Authority Key Identifier:
                keyid:EB:99:47:9D:36:FD:F2:6A:88:69:60:45:97:0E:50:15:41:23:58:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/65lHnTb98mqIaWBFlw5QFUEjWGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/65lHnTb98mqIaWBFlw5QFUEjWGw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1030/q7HhNkd-enW0u2mv3zNj-zhV5EM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:0d:00:02:5b:1d:a6:a1:0a:b8:a2:3a:e0:95:90:06:f9:76:
         d5:85:f9:98:be:d2:fe:1c:44:df:41:ab:3a:81:70:ad:ba:e9:
         4a:cd:bf:e2:1c:22:72:96:6e:35:34:3d:fa:d9:36:3e:b1:75:
         c1:4c:9f:99:cb:4d:c8:85:bf:08:1f:f7:a4:ea:d5:1f:d6:80:
         25:f0:61:99:09:7a:62:db:8d:74:20:81:3c:95:76:aa:f9:cd:
         b5:38:4a:ff:71:40:5a:9d:7a:13:c3:c5:5f:c6:bb:88:7d:cf:
         e0:d7:c0:64:23:9b:2e:a5:98:b8:ff:d3:93:d9:19:81:a4:dc:
         02:1b:17:71:da:e9:f4:fb:17:3f:ee:43:23:18:c5:f3:21:15:
         ed:60:bd:ce:ab:64:ea:41:e1:25:a6:76:83:81:96:42:8e:f9:
         87:33:46:75:5a:5c:a1:28:2c:e7:03:90:44:67:7a:76:ea:e8:
         53:ce:22:b9:08:3a:cb:dd:7f:75:4d:94:54:14:17:39:15:f8:
         bd:87:6b:15:c8:8a:a2:e2:c0:0b:7a:6c:65:92:d1:a2:69:bd:
         ca:55:04:8d:bb:4c:e3:89:a7:71:39:9e:45:ae:66:13:8f:31:
         72:b8:b5:05:80:41:50:9f:6b:05:e6:a0:9c:5c:48:33:fd:42:
         19:57:03:04
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICBvgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI5
OTQ3OUQzNkZERjI2QTg4Njk2MDQ1OTcwRTUwMTU0MTIzNTg2QzAeFw0yMTA3MDkw
NzA3MDVaFw0yMjA1MjcwNDU5NTJaMDMxMTAvBgNVBAMTKEFCQjFFMTM2NDc3RTdB
NzVCNEJCNjlBRkRGMzM2M0ZCMzg1NUU0NDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhm39DXWmxHnIuBmtQOCTCNcoituC/2I9RccHW1JskI4pEDtmu
w+HW5NQ04ANlBrGt3WfONPe9fEisHwQzsjL71o7doyXT8AZ+2nbTGah4HEs7F+OW
inrOZ2WQ0cWu530WvJh4pD1CnAmHKpKIvEdzhcijWpWyy3D+NWdg6+RarFzRcaoG
TMMAHwEKVJmS00/ZZm2UANytVSpL5FFSph/1Uy4+8SJWT3F5RBln/3Wo5rrvYiK3
XPUxjKIglZ+EirAjvCc4L2tYHVzSLRiWypFjMUtVUccQbZdAbox6fogLBdqA/JhY
Q67q3mZc6W/YuohcTXHLcCo+sXUorKwV8qhlAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUq7HhNkd+enW0u2mv3zNj+zhV5EMwHwYDVR0jBBgwFoAU65lHnTb98mqIaWBF
lw5QFUEjWGwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTAz
MC82NWxIblRiOThtcUlhV0JGbHc1UUZVRWpXR3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzY1bEhuVGI5OG1xSWFXQkZsdzVRRlVFaldHdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzEwMzAvcTdIaE5rZC1lblcw
dTJtdjN6TmotemhWNUVNLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcrwDANBgkqhkiG9w0BAQsFAAOCAQEAgQ0AAlsdpqEKuKI64JWQBvl21YX5
mL7S/hxE30GrOoFwrbrpSs2/4hwicpZuNTQ9+tk2PrF1wUyfmctNyIW/CB/3pOrV
H9aAJfBhmQl6YtuNdCCBPJV2qvnNtThK/3FAWp16E8PFX8a7iH3P4NfAZCObLqWY
uP/Tk9kZgaTcAhsXcdrp9PsXP+5DIxjF8yEV7WC9zqtk6kHhJaZ2g4GWQo75hzNG
dVpcoSgs5wOQRGd6duroU84iuQg6y91/dU2UVBQXORX4vYdrFciKouLAC3psZZLR
omm9ylUEjbtM44mncTmeRa5mE48xcri1BYBBUJ9rBeagnFxIM/1CGVcDBA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:00 2024 by rpki-client on console-fra.rpki-client.org