Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1200/agPq1ZG0yFobvDGt_flVX8GxcDk.roa
File:                     agPq1ZG0yFobvDGt_flVX8GxcDk.roa (raw, json)
Hash identifier:          34TCRSgK8LMCFZl6/4jt2LcJ0D5AL5sm8hhQ5IhoBRQ=
Subject key identifier:   6A:03:EA:D5:91:B4:C8:5A:1B:BC:31:AD:FD:F9:55:5F:C1:B1:70:39
Certificate issuer:       /CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
Certificate serial:       06E6
Authority key identifier: 61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/agPq1ZG0yFobvDGt_flVX8GxcDk.roa
Signing time:             Thu 18 May 2023 07:23:23 +0000
ROA not before:           Thu 18 May 2023 07:23:23 +0000
ROA not after:            Wed 27 Mar 2024 01:13:10 +0000
asID:                     59022
IP address blocks:        45.115.244.0/22 maxlen: 22
                          103.56.20.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766 (0x6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6191AACDCE560A74D83C05DA8EA9327AF944DBBD
        Validity
            Not Before: May 18 07:23:23 2023 GMT
            Not After : Mar 27 01:13:10 2024 GMT
        Subject: CN=6A03EAD591B4C85A1BBC31ADFDF9555FC1B17039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:06:0a:d5:95:17:f1:92:78:91:4b:6d:b3:
                    60:3d:40:01:b8:17:ca:b1:9d:d8:b8:f4:0c:aa:34:
                    aa:ad:42:ab:f5:c2:8f:06:6c:6e:a8:94:09:49:da:
                    64:45:f6:8f:3d:ac:84:f9:61:60:e1:51:49:e5:8c:
                    93:39:a2:61:50:76:e5:f0:f8:cb:6d:91:34:2d:9e:
                    e2:82:4f:2f:e0:20:02:90:5b:a0:75:8f:fe:47:c1:
                    65:7f:57:f2:5c:d8:83:80:05:7f:d9:aa:0a:a1:b2:
                    b9:c1:ec:c8:09:74:0a:0d:41:15:dd:3c:65:24:b6:
                    a4:29:a5:09:5b:d8:34:66:ff:cd:5f:04:df:53:9b:
                    5f:3d:ec:c1:3b:c4:78:cb:37:06:29:e9:d3:a3:a5:
                    4e:f9:5b:36:e2:e7:74:75:a9:51:67:d6:3b:c7:5c:
                    ca:5e:08:24:c3:e3:62:85:63:98:79:6b:e5:dd:7d:
                    02:97:82:af:ad:95:0f:0d:a4:90:f2:6f:56:ac:d4:
                    8f:e0:b9:40:3a:0f:7b:9a:ad:92:b7:77:a4:9f:e8:
                    9d:b1:9b:fa:f0:c5:86:00:8b:6b:bb:e5:4a:87:c7:
                    ee:2f:1d:1b:59:83:b2:36:6d:2d:05:cc:f6:3d:06:
                    89:41:54:bd:25:a7:53:30:02:2f:91:a8:06:f8:f8:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:03:EA:D5:91:B4:C8:5A:1B:BC:31:AD:FD:F9:55:5F:C1:B1:70:39
            X509v3 Authority Key Identifier:
                keyid:61:91:AA:CD:CE:56:0A:74:D8:3C:05:DA:8E:A9:32:7A:F9:44:DB:BD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/YZGqzc5WCnTYPAXajqkyevlE270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/YZGqzc5WCnTYPAXajqkyevlE270.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1200/agPq1ZG0yFobvDGt_flVX8GxcDk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.115.244.0/22
                  103.56.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:28:76:c8:6d:2f:07:74:df:10:de:88:6e:0a:00:1d:bf:7e:
         9f:19:6a:3a:56:7c:c7:c7:2e:5c:83:46:97:d8:9c:ad:89:69:
         27:5b:43:e9:2e:2d:7e:54:4a:60:9b:cb:ab:15:be:6d:86:3b:
         04:3a:49:21:40:eb:84:02:55:a1:47:45:1c:20:f4:d2:b3:32:
         83:b2:ca:e1:f8:07:28:e3:6a:dc:d9:08:94:9c:2d:ef:d1:fa:
         73:12:63:fd:94:aa:36:ae:10:ee:4f:74:a8:21:9c:7d:c7:3e:
         c8:d2:68:b5:5f:e3:8a:4f:a0:e5:1e:48:62:d4:17:3c:81:ee:
         31:ff:31:15:5b:f3:49:23:43:17:dd:3c:45:cf:e2:81:90:32:
         67:27:96:2f:5d:ee:41:aa:81:a4:c3:12:93:43:09:00:84:4c:
         11:20:0a:ac:a8:d4:39:68:d8:3b:2a:e0:d7:5d:a7:38:f1:50:
         47:b9:b2:d0:6d:92:55:43:fe:f0:ce:90:55:b2:6a:df:0e:bf:
         9b:28:4f:1e:e9:8f:6b:3c:bd:39:37:6f:aa:58:23:13:2d:fb:
         17:21:1a:8f:63:32:b3:12:3f:6b:14:4c:c0:fd:b9:4f:2e:a1:
         da:d6:12:68:a4:1d:8b:38:3f:ff:7f:66:7e:9a:92:d8:e0:4d:
         0a:2c:b0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:01 2024 by rpki-client on console-fra.rpki-client.org