Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/0HG59Fw2DcEY-bxGuAxlJ_Ux_iI.roa
File:                     0HG59Fw2DcEY-bxGuAxlJ_Ux_iI.roa (raw, json)
Hash identifier:          p05m9sM5DpaPCJE/1ZWI+ln0EyoEcXJGV23dbP24v4k=
Subject key identifier:   D0:71:B9:F4:5C:36:0D:C1:18:F9:BC:46:B8:0C:65:27:F5:31:FE:22
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       107D
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/0HG59Fw2DcEY-bxGuAxlJ_Ux_iI.roa
Signing time:             Fri 21 Oct 2022 12:32:43 +0000
ROA not before:           Fri 21 Oct 2022 12:32:43 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4221 (0x107d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 21 12:32:43 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=D071B9F45C360DC118F9BC46B80C6527F531FE22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:5f:df:8e:9a:89:fd:bb:d1:b5:07:b8:ac:d4:
                    46:d7:d7:23:c8:43:08:e5:2b:8a:05:c2:9e:19:a6:
                    39:62:11:50:66:77:44:15:a1:ac:0d:07:20:57:97:
                    eb:72:a3:3d:af:85:7d:57:1e:8d:46:af:b5:ba:25:
                    b9:ea:66:3d:19:7e:5a:19:6a:5f:e1:86:d0:ea:a3:
                    74:b9:86:19:98:f8:cc:21:b0:46:ea:7c:00:b4:4b:
                    9d:47:1e:49:43:df:2f:61:66:69:21:c4:52:de:4d:
                    b8:57:29:e5:8c:55:a3:24:37:57:11:20:53:2b:62:
                    e6:a4:9e:ab:1e:ec:3b:bf:c1:d1:21:0a:eb:06:67:
                    83:20:22:e0:30:c2:da:9c:31:c3:3f:e6:06:22:9b:
                    64:45:c4:5c:22:57:0f:e3:62:45:8a:39:e2:45:17:
                    d7:23:f3:47:86:7d:dd:e2:16:f3:80:6f:12:26:f0:
                    5f:37:5b:d8:82:17:c1:45:7a:3a:cf:06:68:10:af:
                    5d:6a:7b:c3:51:f8:01:98:f7:4d:b4:e2:36:56:9f:
                    e4:19:1f:7c:13:ab:42:92:27:75:56:9f:f0:36:6c:
                    00:30:d2:d1:57:64:af:78:c5:fe:0c:6a:f4:d7:ef:
                    e7:fa:7f:d9:2f:52:f1:4e:fa:fb:f5:98:b9:56:10:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:71:B9:F4:5C:36:0D:C1:18:F9:BC:46:B8:0C:65:27:F5:31:FE:22
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/0HG59Fw2DcEY-bxGuAxlJ_Ux_iI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         ad:25:7b:20:26:68:c4:7a:90:47:d8:86:af:c1:df:23:61:b0:
         21:ea:ae:d3:cc:0e:91:3e:8f:d1:ea:83:b7:bd:ae:b2:9d:ed:
         02:af:04:09:3b:13:21:1d:73:60:df:18:71:52:9f:48:9a:d9:
         25:f9:69:e4:1f:41:bc:2a:1c:39:1e:a9:13:06:67:5a:10:f0:
         17:bc:bb:bc:7f:5f:2c:43:a2:4f:a8:2e:bc:48:82:81:c4:9d:
         d5:47:62:18:b3:8a:70:4f:be:a3:0a:c0:6a:b3:df:56:33:fa:
         f7:34:21:da:62:f8:fb:8c:60:45:6c:94:bc:ad:ae:65:32:57:
         8c:4e:f4:84:2a:b1:a3:c2:28:d7:0e:8a:71:1b:34:54:e2:b5:
         be:17:ef:6b:78:d5:2a:b2:51:42:fa:d3:c5:24:a8:9f:67:53:
         74:7c:d8:58:ac:87:0e:d1:3e:be:95:9b:b4:84:8c:67:29:55:
         6e:9a:88:38:46:48:df:93:bd:32:ee:dd:58:0d:a4:4f:bf:d8:
         5f:7c:d5:a7:a8:da:1a:88:45:a8:64:ea:ee:14:46:19:a8:91:
         b3:fc:5b:7d:60:35:a6:9a:85:58:8e:ae:e7:2f:d2:4a:02:2e:
         5d:f9:b1:d2:24:29:8c:02:c8:a5:95:cf:bc:24:ac:a0:6e:32:
         5e:5a:5f:19
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICEH0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMjEx
MjMyNDNaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKEQwNzFCOUY0NUMzNjBE
QzExOEY5QkM0NkI4MEM2NTI3RjUzMUZFMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD5X9+Omon9u9G1B7is1EbX1yPIQwjlK4oFwp4ZpjliEVBmd0QV
oawNByBXl+tyoz2vhX1XHo1Gr7W6JbnqZj0ZfloZal/hhtDqo3S5hhmY+MwhsEbq
fAC0S51HHklD3y9hZmkhxFLeTbhXKeWMVaMkN1cRIFMrYuaknqse7Du/wdEhCusG
Z4MgIuAwwtqcMcM/5gYim2RFxFwiVw/jYkWKOeJFF9cj80eGfd3iFvOAbxIm8F83
W9iCF8FFejrPBmgQr11qe8NR+AGY90204jZWn+QZH3wTq0KSJ3VWn/A2bAAw0tFX
ZK94xf4MavTX7+f6f9kvUvFO+vv1mLlWEH1zAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQU0HG59Fw2DcEY+bxGuAxlJ/Ux/iIwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvMEhHNTlGdzJEY0VZ
LWJ4R3VBeGxKX1V4X2lJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAK0leyAm
aMR6kEfYhq/B3yNhsCHqrtPMDpE+j9Hqg7e9rrKd7QKvBAk7EyEdc2DfGHFSn0ia
2SX5aeQfQbwqHDkeqRMGZ1oQ8Be8u7x/XyxDok+oLrxIgoHEndVHYhizinBPvqMK
wGqz31Yz+vc0Idpi+PuMYEVslLytrmUyV4xO9IQqsaPCKNcOinEbNFTitb4X72t4
1SqyUUL608UkqJ9nU3R82Fishw7RPr6Vm7SEjGcpVW6aiDhGSN+TvTLu3VgNpE+/
2F981aeo2hqIRahk6u4URhmokbP8W31gNaaahViOrucv0koCLl35sdIkKYwCyKWV
z7wkrKBuMl5aXxk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org