Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/3Xd5VutdAoxz2N9CErDeSjqG9bI.roa
File:                     3Xd5VutdAoxz2N9CErDeSjqG9bI.roa (raw, json)
Hash identifier:          WpZFennC2ztQ3NQ5lk2/sI/70CFZXcUL+ojXGgOKm+o=
Subject key identifier:   DD:77:79:56:EB:5D:02:8C:73:D8:DF:42:12:B0:DE:4A:3A:86:F5:B2
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       146F
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/3Xd5VutdAoxz2N9CErDeSjqG9bI.roa
Signing time:             Tue 01 Nov 2022 00:33:01 +0000
ROA not before:           Tue 01 Nov 2022 00:33:01 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5231 (0x146f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Nov  1 00:33:01 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=DD777956EB5D028C73D8DF4212B0DE4A3A86F5B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:83:38:6c:59:fe:cc:e9:47:95:78:71:4e:
                    54:cb:99:cb:ce:34:05:19:fd:77:fe:85:1c:9c:ac:
                    bc:8a:84:d3:85:11:1f:5f:49:3d:98:16:1e:db:41:
                    0e:aa:a8:ba:c5:ef:6c:4e:c1:e8:b8:a6:b3:b9:56:
                    b2:e9:c1:f4:1c:56:0e:19:33:93:12:d4:21:7d:34:
                    50:f1:78:f4:d4:4f:92:97:33:24:d4:cf:b9:80:76:
                    86:fe:ea:5b:3f:fb:47:45:d0:b6:b4:73:5d:31:bb:
                    ff:9b:32:40:c1:63:7d:c7:a1:91:53:67:05:ca:c3:
                    ea:fd:17:c3:52:d8:c6:56:d1:67:1e:8b:5c:3a:8c:
                    b5:9e:ea:94:c6:3d:ff:c8:53:ce:f3:78:5b:23:fb:
                    1a:e0:45:43:44:69:66:59:90:26:52:34:30:c0:79:
                    c3:28:8f:a7:5a:b9:1c:24:d7:02:ec:fe:04:e6:f0:
                    77:d8:2d:55:4f:2d:b5:4f:74:d2:41:59:87:31:a1:
                    29:c8:6d:86:12:3a:97:21:65:09:18:27:b5:1d:70:
                    f9:24:3e:59:6d:5f:c7:b0:81:f2:03:d6:6d:0e:94:
                    c6:96:58:26:b7:26:3d:ef:24:4c:95:ba:4a:cb:6b:
                    a3:ec:ba:6c:05:a4:db:a1:e0:03:7e:e5:75:22:f6:
                    9b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:77:79:56:EB:5D:02:8C:73:D8:DF:42:12:B0:DE:4A:3A:86:F5:B2
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/3Xd5VutdAoxz2N9CErDeSjqG9bI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:2a:19:f3:eb:1f:7c:37:6c:5e:1a:a4:84:8a:cf:c9:c3:
         a8:b7:62:3b:b7:9d:a7:fc:17:b6:5f:d0:6c:40:d2:0b:d9:c1:
         01:5c:35:3f:64:52:df:5e:26:4c:00:7e:3c:c7:6e:d0:ce:c0:
         96:ea:18:4a:98:96:07:af:70:98:ca:95:36:c6:92:90:ce:af:
         2c:4c:3e:95:7c:1f:8c:1d:b4:c0:b1:27:a4:c7:6f:a7:77:12:
         13:b4:5e:7c:d3:98:70:60:78:23:fa:20:27:e7:c0:dc:76:56:
         34:a9:ab:8f:82:b0:4a:c1:0e:15:ea:2b:ee:ba:7d:bf:d1:62:
         87:41:ed:02:c6:06:c5:e5:60:4f:d8:7a:ba:d9:39:73:6f:1f:
         03:fb:7f:76:ff:26:06:87:7e:c9:a3:3c:10:cd:6f:31:5c:3c:
         4d:11:95:1f:90:48:b2:b9:d0:ae:f4:3c:7a:a9:a8:bb:7b:b0:
         7a:a5:e9:d0:f3:13:62:61:26:78:33:42:05:a5:8e:45:b3:19:
         26:26:39:0e:44:6b:3a:fc:aa:95:2d:e2:4a:49:ae:40:b9:cd:
         f4:3c:6a:39:bd:51:10:3d:0b:c3:9b:3d:40:3d:ad:f2:4e:19:
         c3:cd:69:dd:72:67:8f:5c:e9:aa:7c:ad:81:0c:d4:df:19:12:
         56:7d:aa:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org