Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/05GbLNxryaFd049-D7eu6UFtbS4.roa
File:                     05GbLNxryaFd049-D7eu6UFtbS4.roa (raw, json)
Hash identifier:          WD9cD8ZhFUDxY8FAVYgi4YovKNQJhSBHqHHj/0xiwaQ=
Subject key identifier:   D3:91:9B:2C:DC:6B:C9:A1:5D:D3:8F:7E:0F:B7:AE:E9:41:6D:6D:2E
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0E13
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/05GbLNxryaFd049-D7eu6UFtbS4.roa
Signing time:             Sat 15 Oct 2022 02:14:14 +0000
ROA not before:           Sat 15 Oct 2022 02:14:14 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 15 02:14:14 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=D3919B2CDC6BC9A15DD38F7E0FB7AEE9416D6D2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:70:86:01:3d:d4:86:0c:1d:dd:32:ea:7a:
                    18:45:12:3c:89:df:bc:54:e7:60:7a:56:58:5d:de:
                    5e:1e:6c:13:2d:f2:05:8e:51:9c:dc:8e:ce:b4:14:
                    9e:2b:89:79:bf:e3:58:56:d8:d0:e4:77:46:2f:02:
                    18:2e:f4:3c:19:50:ad:77:da:fe:98:26:17:7c:59:
                    21:29:f3:ff:15:5a:aa:17:63:b6:c5:02:eb:44:8f:
                    34:37:cf:cc:a6:10:06:6b:cd:21:5f:be:28:36:59:
                    b5:e0:42:3b:7c:45:b6:a4:62:ae:6c:44:ad:5d:88:
                    fa:0e:2d:6d:86:dd:1d:ee:8f:d6:68:33:4e:16:d7:
                    33:9e:05:f9:bf:ad:e2:73:00:71:1d:9e:72:a4:71:
                    1d:2c:80:89:54:3d:77:e6:a4:69:cd:ca:25:16:b0:
                    7d:b7:45:3d:5e:58:37:66:2c:1e:63:37:00:b7:c2:
                    b3:6e:08:25:c1:c2:61:9f:ae:e4:48:44:03:89:f3:
                    5d:3a:ee:8a:1e:9b:7e:7a:35:27:bf:11:1b:06:0b:
                    34:e8:6e:58:bf:51:8f:fd:5c:87:66:03:9e:2d:0f:
                    fa:c9:01:55:4e:13:c2:5f:10:c9:b1:3b:bb:08:4d:
                    8c:bd:33:28:ed:b5:7e:17:5a:68:d8:d6:1a:cc:09:
                    91:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:91:9B:2C:DC:6B:C9:A1:5D:D3:8F:7E:0F:B7:AE:E9:41:6D:6D:2E
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/05GbLNxryaFd049-D7eu6UFtbS4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:41:77:5a:4e:15:6f:c1:e2:a6:bc:c0:9b:63:3d:86:42:
         8d:3d:59:de:a7:af:70:fd:d8:40:e9:58:91:97:42:ec:a7:8b:
         f2:18:01:84:b1:f2:96:01:b8:0b:77:9f:66:a6:3f:b9:6b:d0:
         15:a8:1a:28:c9:d7:f0:c6:82:4f:e7:0f:e1:98:f7:44:7c:f5:
         c7:c1:da:85:0f:72:94:6a:ed:cc:84:b2:0a:3e:57:2c:33:32:
         28:4f:f6:2a:9c:a4:b5:94:4b:2e:92:6d:51:70:51:3c:af:f6:
         e5:2c:08:d1:9e:e6:5d:e9:7b:fa:2b:4b:b4:8d:89:8f:cc:17:
         65:dd:89:36:a5:7b:1f:94:cb:2a:0b:50:6c:e3:55:5e:c7:62:
         53:2a:2e:9a:ab:2e:74:6c:66:da:ca:b8:e5:70:fc:80:f9:3a:
         6c:dd:ef:4e:67:41:5d:74:31:1a:5b:80:08:fb:c8:80:b2:30:
         b5:87:9d:6d:7d:b1:48:30:ea:fe:89:10:a4:6c:7c:aa:c2:fd:
         c4:23:5c:aa:49:3e:b8:db:7a:f0:8f:39:e2:28:bc:1a:f6:65:
         92:13:a3:0d:f7:f4:f8:e6:4d:d5:ec:db:04:f1:83:c8:56:be:
         ec:87:3b:0f:c4:e4:77:7d:7f:ab:ad:5c:58:14:14:dc:36:1c:
         20:27:d0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:03 2023 by rpki-client on console-fra.rpki-client.org