Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/GLzuKckiVCfRLIhWLh_7mtb82uY.roa
File:                     GLzuKckiVCfRLIhWLh_7mtb82uY.roa (raw, json)
Hash identifier:          wJw4XqhOMndIjvwrGsrhCcLtfyZ58jkuM//bg2y47z0=
Subject key identifier:   18:BC:EE:29:C9:22:54:27:D1:2C:88:56:2E:1F:FB:9A:D6:FC:DA:E6
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       3A56
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GLzuKckiVCfRLIhWLh_7mtb82uY.roa
Signing time:             Sat 06 Apr 2024 08:52:27 +0000
ROA not before:           Sat 06 Apr 2024 08:52:27 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.236.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14934 (0x3a56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: Apr  6 08:52:27 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=18BCEE29C9225427D12C88562E1FFB9AD6FCDAE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:b5:e8:58:c5:e1:01:66:88:c5:e9:d5:89:
                    88:19:ce:f0:5a:fb:b1:62:28:b0:4e:2c:21:69:34:
                    4c:f3:53:4c:57:a1:8d:72:8d:47:3e:5c:21:ad:64:
                    20:a4:f4:dd:65:18:b1:22:96:7b:b1:99:52:d5:e0:
                    ea:c6:72:e7:b5:04:9e:e4:f2:24:ea:4d:b2:02:7b:
                    c2:82:97:62:90:a5:8a:b5:de:a7:f0:92:ab:99:b1:
                    fb:f3:8f:d4:7c:8f:23:c7:28:4d:26:da:df:e5:2b:
                    e4:f8:f3:a7:38:4f:69:ce:0a:73:fa:fe:a0:bf:7e:
                    97:ef:36:d5:cf:b2:9b:65:44:66:19:fa:c4:e5:8b:
                    fa:12:47:eb:fc:b7:3f:f2:4f:7f:67:e9:3d:17:e8:
                    53:d5:cc:bb:5e:f1:3f:f3:df:1d:cf:87:d5:a2:13:
                    c7:3c:2d:9c:b9:e5:9e:eb:6f:13:d4:40:4c:11:09:
                    ab:ca:df:18:6c:3b:82:e0:92:45:40:60:45:4c:9e:
                    9c:04:07:2b:87:48:8f:20:12:ff:e1:0f:b5:83:3f:
                    71:b1:cf:03:bc:07:1c:d4:99:c2:cb:0d:4d:a4:8a:
                    03:3e:49:90:e0:14:94:5b:60:bf:4a:cb:3b:5b:bb:
                    73:09:a8:4d:a2:04:e8:94:91:7f:b2:5a:e9:c4:ea:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BC:EE:29:C9:22:54:27:D1:2C:88:56:2E:1F:FB:9A:D6:FC:DA:E6
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/GLzuKckiVCfRLIhWLh_7mtb82uY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:1d:5e:b8:57:4d:35:d5:25:96:aa:6d:06:91:f9:57:a9:e2:
         b6:b6:2d:d0:05:d8:37:39:81:d5:35:70:b1:b6:83:0c:14:d9:
         1f:42:4e:57:1e:61:94:4a:f4:54:b4:ca:8d:89:b5:ea:08:40:
         e8:5c:8f:83:21:6d:3b:90:53:72:5a:1d:62:aa:a1:9a:47:d2:
         71:9d:d5:16:04:35:86:92:a4:ab:23:46:92:de:70:e5:a4:6f:
         3e:3f:9f:44:05:e7:a1:fb:3c:4f:d9:c7:aa:78:2c:40:1f:5f:
         12:fa:84:c4:e1:2a:e6:db:6c:60:5f:9e:85:79:b1:e8:8b:5c:
         c3:cf:4d:5c:e7:d9:f4:3c:48:78:cd:7d:1c:e5:f1:0d:04:2c:
         8e:31:d2:44:ac:d9:80:51:b3:26:bd:bc:10:d8:d3:06:dd:20:
         c7:a5:f6:96:13:65:ee:b5:1b:f9:b4:e3:0a:b1:a2:c2:37:5e:
         2f:f8:28:b5:04:e8:5f:a8:7e:ce:4d:f8:54:d9:87:77:aa:05:
         c4:5b:a3:a5:98:b5:e6:f8:de:2d:fb:db:e2:91:b6:74:bd:e1:
         14:8d:eb:94:d6:86:d7:8a:da:01:0e:e1:76:8c:09:b9:f9:ff:
         b3:3f:c9:e0:3e:c3:b6:d8:fa:66:3c:ec:c0:3e:21:d0:4b:cc:
         7c:d9:47:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:27 2024 by rpki-client on console-ams.rpki-client.org