Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/1sPR15dMSh4Fgxv95MpNv1hk82k.roa
File:                     1sPR15dMSh4Fgxv95MpNv1hk82k.roa (raw, json)
Hash identifier:          173ITOvz7ucpqn/I0Dwp/Zbi3vNxZ1Um20Fn8IMU3RE=
Subject key identifier:   D6:C3:D1:D7:97:4C:4A:1E:05:83:1B:FD:E4:CA:4D:BF:58:64:F3:69
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       10E7
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/1sPR15dMSh4Fgxv95MpNv1hk82k.roa
Signing time:             Sat 22 Oct 2022 15:02:45 +0000
ROA not before:           Sat 22 Oct 2022 15:02:45 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4327 (0x10e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 22 15:02:45 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=D6C3D1D7974C4A1E05831BFDE4CA4DBF5864F369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0b:2f:43:73:65:3f:4d:9a:ab:d8:20:cb:37:
                    0f:a1:7c:d1:5b:ac:71:b3:89:5b:f5:25:93:a8:63:
                    cc:71:e0:c7:88:4e:09:38:78:2f:76:d4:8c:54:fb:
                    42:8c:e6:28:6f:8d:47:59:f2:2b:fa:5f:ec:4d:3e:
                    0d:aa:58:d3:da:26:ba:5c:d5:3b:0f:e8:a0:88:eb:
                    a2:9a:9c:de:46:ab:82:4f:74:d7:0f:40:bc:0e:6b:
                    51:6d:77:34:8e:ad:03:fd:a5:e1:6d:c8:81:7a:80:
                    90:b2:5a:4c:30:e6:d1:63:c9:de:8e:11:16:a4:1e:
                    c8:8c:e2:14:0d:d9:91:06:93:61:93:7b:92:bf:da:
                    bd:c1:2a:45:09:b4:c5:fd:07:0e:71:d7:94:e0:8b:
                    67:3e:9f:88:11:b3:31:64:f9:64:39:dd:c5:df:5b:
                    94:bf:9f:d5:05:b6:9c:4b:a9:85:21:86:c9:21:45:
                    73:b5:67:61:ae:f5:51:f6:d0:d1:29:1f:1b:81:1d:
                    d9:ae:e1:1b:1b:3e:4d:ab:3c:d8:56:c9:d2:c4:34:
                    9e:1c:66:08:ef:e1:fb:eb:19:1f:55:ea:07:1e:bd:
                    9f:47:c0:67:55:04:bf:9b:59:75:ac:2a:53:84:b1:
                    c0:53:b9:f5:ff:63:2c:0d:56:79:51:1e:97:9c:d2:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:D1:D7:97:4C:4A:1E:05:83:1B:FD:E4:CA:4D:BF:58:64:F3:69
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/1sPR15dMSh4Fgxv95MpNv1hk82k.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         40:4c:0c:58:bc:d6:4e:59:23:00:d9:d6:d4:89:13:5a:b0:fd:
         e1:7c:ba:a9:30:47:68:2d:ad:7b:1f:a8:1e:ba:9f:70:18:61:
         80:05:b6:05:80:dd:59:07:a5:d7:10:4f:05:6a:35:bd:1a:cf:
         bd:f1:20:c5:75:8b:9d:a4:65:dd:63:85:8b:8c:fb:fa:5c:34:
         a4:59:d5:18:6f:7c:54:29:7c:5b:3d:27:ee:82:91:d9:b2:1e:
         da:cf:b1:55:4d:f3:66:8a:cf:5f:ab:78:66:de:68:50:39:4f:
         aa:89:ec:45:0c:b2:22:ac:9b:b6:f9:6a:e1:45:f7:49:10:11:
         a2:d7:73:86:ae:c1:57:19:ac:1d:a2:0d:bb:77:a6:1f:f7:d7:
         e1:1f:ca:fc:b4:3a:e9:7c:70:da:c7:5c:f8:16:6d:41:9c:f0:
         35:96:e8:ff:fa:70:a8:a6:68:fc:b0:5e:60:9e:e7:6c:a2:e5:
         01:7d:72:61:bd:9a:c8:23:a4:41:ae:76:77:56:94:22:f5:23:
         64:30:2b:14:de:c3:ef:43:12:98:3f:2d:0b:26:ce:9a:ca:d7:
         ba:0e:0d:a7:f2:38:d1:58:1c:24:68:ec:74:6b:10:b7:24:99:
         b5:dd:38:80:c4:ab:6a:d9:fb:81:a7:b1:c9:2e:98:a5:da:10:
         96:93:a0:70
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICEOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMjIx
NTAyNDVaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKEQ2QzNEMUQ3OTc0QzRB
MUUwNTgzMUJGREU0Q0E0REJGNTg2NEYzNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvCy9Dc2U/TZqr2CDLNw+hfNFbrHGziVv1JZOoY8xx4MeITgk4
eC921IxU+0KM5ihvjUdZ8iv6X+xNPg2qWNPaJrpc1TsP6KCI66KanN5Gq4JPdNcP
QLwOa1FtdzSOrQP9peFtyIF6gJCyWkww5tFjyd6OERakHsiM4hQN2ZEGk2GTe5K/
2r3BKkUJtMX9Bw5x15Tgi2c+n4gRszFk+WQ53cXfW5S/n9UFtpxLqYUhhskhRXO1
Z2Gu9VH20NEpHxuBHdmu4RsbPk2rPNhWydLENJ4cZgjv4fvrGR9V6gcevZ9HwGdV
BL+bWXWsKlOEscBTufX/YywNVnlRHpec0mLZAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQU1sPR15dMSh4Fgxv95MpNv1hk82kwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvMXNQUjE1ZE1TaDRG
Z3h2OTVNcE52MWhrODJrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAEBMDFi8
1k5ZIwDZ1tSJE1qw/eF8uqkwR2gtrXsfqB66n3AYYYAFtgWA3VkHpdcQTwVqNb0a
z73xIMV1i52kZd1jhYuM+/pcNKRZ1RhvfFQpfFs9J+6CkdmyHtrPsVVN82aKz1+r
eGbeaFA5T6qJ7EUMsiKsm7b5auFF90kQEaLXc4auwVcZrB2iDbt3ph/31+Efyvy0
Oul8cNrHXPgWbUGc8DWW6P/6cKimaPywXmCe52yi5QF9cmG9msgjpEGudndWlCL1
I2QwKxTew+9DEpg/LQsmzprK17oODafyONFYHCRo7HRrELckmbXdOIDEq2rZ+4Gn
sckumKXaEJaToHA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org