Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/MFVXS-LE_IyZSZrd06N3ZUN9mCE.roa
File:                     MFVXS-LE_IyZSZrd06N3ZUN9mCE.roa (raw, json)
Hash identifier:          V0Wio8mfyv+hTh8cW5hpdGaUl6yctSn876dENwDanBs=
Subject key identifier:   30:55:57:4B:E2:C4:FC:8C:99:49:9A:DD:D3:A3:77:65:43:7D:98:21
Certificate issuer:       /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial:       52C7
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MFVXS-LE_IyZSZrd06N3ZUN9mCE.roa
Signing time:             Wed 08 May 2024 22:54:00 +0000
ROA not before:           Wed 08 May 2024 22:54:00 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     24426
IP address blocks:        36.0.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21191 (0x52c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
        Validity
            Not Before: May  8 22:54:00 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=3055574BE2C4FC8C99499ADDD3A37765437D9821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:65:f7:ef:97:be:b4:7b:aa:9d:e4:a4:c7:
                    65:81:a0:d0:41:cf:11:8e:6e:a0:07:33:cf:4a:a1:
                    b6:0f:2d:2c:57:b8:37:33:67:b4:c9:ff:6c:bc:43:
                    7b:2d:65:06:6c:87:b8:1f:6b:db:ef:62:2f:8b:89:
                    31:25:95:0a:f2:05:6d:27:8a:e3:c3:24:cd:c0:0f:
                    da:44:a6:07:cf:c4:2a:b7:d3:64:98:94:d5:fb:21:
                    33:4f:68:36:6d:63:03:d0:f4:c7:8a:00:5f:ca:2f:
                    49:89:e9:e4:ef:f3:75:d7:96:82:c9:29:07:b5:44:
                    73:3d:ba:b8:6c:cb:d3:9b:6b:a1:6b:fc:00:b0:97:
                    f7:0b:df:6d:b2:b7:5f:61:ae:96:31:5e:a5:22:fd:
                    fa:cb:92:cf:a9:02:0e:59:fc:99:25:ea:45:14:4c:
                    15:0e:4b:d1:96:35:94:2f:ae:ac:c4:ae:2f:54:b5:
                    ff:16:1a:b1:e8:9c:40:64:fd:5e:3a:cd:75:f4:df:
                    77:cc:64:1f:e2:99:d3:fb:dd:9f:b9:4a:cd:0a:61:
                    4f:46:14:33:68:8d:5b:e9:87:d9:b0:4f:01:fb:13:
                    5a:ac:6e:7f:ea:71:4d:3d:cc:5c:a9:18:b1:c6:9b:
                    15:fe:38:f8:27:a6:39:93:92:2a:09:e9:39:ca:97:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:57:4B:E2:C4:FC:8C:99:49:9A:DD:D3:A3:77:65:43:7D:98:21
            X509v3 Authority Key Identifier:
                keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/MFVXS-LE_IyZSZrd06N3ZUN9mCE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b3:cf:75:74:74:70:a9:64:33:38:ce:f0:03:7e:e7:8b:e6:e5:
         fb:a2:73:84:b5:77:0a:12:8f:4b:be:17:d7:1d:0a:62:3f:ec:
         4a:ae:26:1e:16:93:15:c9:53:b7:72:73:6d:b9:17:76:e1:9b:
         fd:27:29:85:8c:e0:c0:ff:3f:2c:9c:7f:9e:f8:5b:a3:11:49:
         85:fa:24:d1:46:b9:7c:31:5e:df:a2:54:7f:3c:9c:27:11:90:
         dc:e4:1a:cf:f4:70:2f:cc:89:ac:cc:58:ab:ae:b0:ec:81:db:
         fa:f9:be:0c:a8:e4:e4:aa:63:76:d6:56:23:1c:df:8b:fe:a7:
         62:6b:34:ea:46:0a:7f:c4:5f:7a:57:bd:aa:cc:fc:28:6b:94:
         5e:01:13:b0:66:7b:0c:da:a7:62:e8:cc:99:33:48:e5:fb:52:
         c8:29:2d:17:65:ba:6e:14:97:21:56:9b:42:11:4e:ff:16:e7:
         4d:89:e7:c4:f1:67:fc:e4:72:ee:85:f2:0a:a6:4d:08:65:b8:
         69:c6:6d:6e:4e:23:0a:5a:c9:e5:fc:60:19:81:8a:a9:cb:45:
         69:7e:86:43:25:cd:70:6f:72:e8:6d:71:82:40:9e:59:18:48:
         cb:46:04:09:63:85:e9:57:a4:f8:5f:67:e7:39:76:28:2a:05:
         e7:8c:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:34 2024 by rpki-client on console-ams.rpki-client.org