Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
File:                     Jyk8tW8AryRyC1pnsE9g1sN4agY.roa (raw, json)
Hash identifier:          EMub7YnQ5CuYPSzcarG9tjD+kYW7UMHxIcvHb2dIXFk=
Subject key identifier:   27:29:3C:B5:6F:00:AF:24:72:0B:5A:67:B0:4F:60:D6:C3:78:6A:06
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       573E
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
Signing time:             Tue 14 May 2024 21:54:11 +0000
ROA not before:           Tue 14 May 2024 21:54:11 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        43.236.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22334 (0x573e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May 14 21:54:11 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=27293CB56F00AF24720B5A67B04F60D6C3786A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:f1:f2:10:67:6b:02:58:28:07:e9:5e:61:
                    d7:c6:18:8f:5c:2a:73:d2:1a:b4:c7:e9:33:1b:50:
                    31:aa:46:e6:e1:fc:e2:50:f8:b7:1e:4e:8b:82:b6:
                    93:63:43:1f:1a:0e:6b:99:f1:29:ee:91:c0:d5:e4:
                    ad:2c:a2:97:59:f7:31:c1:0b:2b:e5:8e:fa:ba:92:
                    55:54:a0:1e:f0:be:0c:21:de:17:1b:c5:8c:c3:48:
                    52:68:5b:74:88:6e:ac:f2:fb:20:4d:c5:81:b0:43:
                    70:75:86:45:f3:58:f4:64:d6:d8:d6:74:fc:25:b7:
                    ed:15:6e:c6:27:ab:90:d2:c7:a8:42:a2:fc:e3:46:
                    ba:a9:cf:5a:1f:0b:90:81:7c:5f:88:cd:ae:a7:1f:
                    0d:c4:cd:8f:9b:90:92:8a:74:ce:bc:47:48:b6:08:
                    63:7c:e1:f6:68:7a:42:de:22:04:14:a0:03:f0:df:
                    ff:71:23:da:3e:4d:be:db:32:97:b0:7b:4e:72:2b:
                    66:ea:10:bb:ce:f6:87:3a:df:b0:c0:d3:2f:ac:81:
                    45:ff:3f:d5:6b:06:2e:d1:6a:e5:f7:c5:a1:c3:73:
                    67:ad:fd:ca:30:b6:95:bb:f9:3d:03:e2:fb:28:f2:
                    a4:cd:14:f0:c8:83:b4:f5:95:31:06:6a:b9:6a:59:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:3C:B5:6F:00:AF:24:72:0B:5A:67:B0:4F:60:D6:C3:78:6A:06
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/Jyk8tW8AryRyC1pnsE9g1sN4agY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.236.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:74:7c:43:de:1c:da:ef:95:89:46:39:f7:9b:b1:06:93:1c:
         d8:2f:9f:10:18:da:3f:23:eb:20:f1:d6:40:fe:ba:63:13:04:
         3a:09:a6:0e:93:e3:b3:7e:e6:75:bb:3d:4a:47:ee:60:40:f8:
         60:18:e6:21:0d:96:d9:b2:f5:06:0f:5d:52:09:53:e5:18:17:
         1b:1b:a9:cf:a3:ca:fe:e6:63:2b:56:f4:cc:62:7f:44:4e:63:
         13:1a:ab:8a:3b:43:53:c9:aa:67:d4:d2:88:ff:bd:a7:6c:94:
         8e:cf:c5:3a:28:e1:6b:a9:58:04:98:7c:1c:5c:3d:38:fb:b3:
         ff:08:9f:f5:f0:38:09:b2:2c:f1:81:e9:f3:69:4d:06:cd:e4:
         43:40:a5:f2:9f:1e:77:51:13:af:d1:9d:6f:77:02:0d:46:5b:
         6d:1a:03:e5:6b:92:cd:0e:31:bf:9e:cc:e9:32:bb:78:07:4a:
         30:24:83:e6:51:cf:28:6d:3d:97:6b:c6:4c:3b:65:99:0e:a9:
         b8:83:79:c9:4e:bc:13:d1:06:de:b0:1a:91:3b:9f:c1:4b:2f:
         98:9e:aa:4e:97:b4:42:cd:46:ee:33:ff:24:8f:85:f9:88:42:
         4b:44:6a:9b:1d:6a:0f:f1:67:f3:8b:20:81:0c:fa:cf:e3:43:
         ab:8b:7e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:19 2024 by rpki-client on console-fra.rpki-client.org