Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/39mv9p1TfW3kgJ9F4sjVWxUchZw.roa
File:                     39mv9p1TfW3kgJ9F4sjVWxUchZw.roa (raw, json)
Hash identifier:          d8Utc9qOuTSbkplMf0jgvVXmUkqCiet3B4uUDYQG8Kg=
Subject key identifier:   DF:D9:AF:F6:9D:53:7D:6D:E4:80:9F:45:E2:C8:D5:5B:15:1C:85:9C
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1287
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/39mv9p1TfW3kgJ9F4sjVWxUchZw.roa
Signing time:             Wed 26 Oct 2022 23:02:53 +0000
ROA not before:           Wed 26 Oct 2022 23:02:53 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4743 (0x1287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 26 23:02:53 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=DFD9AFF69D537D6DE4809F45E2C8D55B151C859C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ec:89:b0:ff:18:22:f9:ea:e7:c3:b7:20:c1:
                    e5:10:b7:ef:b5:be:51:b0:c3:e4:aa:1e:19:5d:16:
                    e8:87:1a:be:19:a8:24:a3:97:88:b0:79:ba:9f:e4:
                    c7:61:30:80:2d:54:27:49:68:ad:81:14:8d:1d:27:
                    c7:8c:0b:17:5e:9a:3b:f8:63:59:f1:a3:79:20:91:
                    bf:f5:63:ee:e7:15:6c:0c:a0:b1:fb:c7:49:5a:df:
                    f9:c6:ee:be:9e:52:95:6d:6a:92:00:97:0d:e2:55:
                    f5:2a:0c:f7:6e:f8:af:e6:b6:43:df:e4:7a:cf:a6:
                    3e:2b:4f:c2:ef:33:41:ab:ce:2e:24:e6:98:fb:72:
                    8b:0d:15:a4:f4:91:af:92:aa:fb:62:77:50:f6:af:
                    12:8a:6b:d6:a2:c6:6b:83:23:0a:f1:44:7a:79:94:
                    6f:98:56:a6:e8:31:43:75:ce:9e:7c:0a:7d:1b:8f:
                    97:a8:c5:e6:37:1f:dc:ff:d4:31:d4:40:36:c7:2a:
                    49:5c:5b:00:82:c4:dd:ab:64:f9:08:43:aa:42:39:
                    d4:d1:49:31:d4:e4:5d:dd:34:7f:30:d6:82:3e:3a:
                    28:56:83:1e:36:eb:1e:bf:97:65:64:d6:a4:54:68:
                    3d:2a:4b:e2:be:72:ee:78:86:50:a4:70:4d:b8:d9:
                    f8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D9:AF:F6:9D:53:7D:6D:E4:80:9F:45:E2:C8:D5:5B:15:1C:85:9C
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/39mv9p1TfW3kgJ9F4sjVWxUchZw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         99:98:0e:0f:42:52:8c:89:be:58:9d:af:df:20:85:4c:a3:2b:
         ae:10:ce:67:3c:b1:43:26:38:82:2f:70:e8:5a:7e:5d:6d:13:
         d1:04:80:b1:f7:4b:23:7c:49:cb:98:ea:e4:9a:c2:52:35:7a:
         79:26:bd:e8:2a:e0:7a:37:99:f5:d5:0b:f2:53:3a:dd:1a:6e:
         f3:a4:1b:0a:ce:2d:56:76:90:5c:a2:c1:57:4a:75:8e:05:db:
         61:5f:70:c6:35:48:01:a7:5a:79:27:3b:40:bd:f8:15:d1:4d:
         c1:53:c0:08:3c:22:8d:1b:84:e6:e1:56:da:92:74:bf:bd:7c:
         d2:48:9b:c2:89:3f:41:f0:3d:0e:cd:c7:c5:a3:c9:fd:54:33:
         31:d5:22:c6:74:81:50:5d:e6:18:8e:9a:e7:99:1c:83:61:28:
         7a:47:f7:44:37:16:74:d5:58:f2:b6:2a:da:e6:98:5d:8b:7e:
         9c:b7:76:30:80:08:7e:e4:60:eb:cf:a7:83:20:42:ba:fe:56:
         af:b2:e2:08:0f:11:73:c1:f6:ef:50:e4:df:f5:36:d5:2c:bf:
         ed:5a:f2:17:98:93:4c:0c:4f:d6:74:10:50:03:50:e2:8d:dd:
         1a:73:df:99:d9:3b:5f:fa:dc:87:6c:e8:04:29:6a:6f:62:5d:
         c1:bc:ac:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:04 2023 by rpki-client on console-fra.rpki-client.org