Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/43h8rWWFhp-DoCVWazqAnPKcL2w.roa
File:                     43h8rWWFhp-DoCVWazqAnPKcL2w.roa (raw, json)
Hash identifier:          ipCw62Rx3Jj4juqSB/ZhCdwMUI8A29H6V82J6eCLuto=
Subject key identifier:   E3:78:7C:AD:65:85:86:9F:83:A0:25:56:6B:3A:80:9C:F2:9C:2F:6C
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0DAB
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/43h8rWWFhp-DoCVWazqAnPKcL2w.roa
Signing time:             Fri 14 Oct 2022 00:14:11 +0000
ROA not before:           Fri 14 Oct 2022 00:14:11 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3499 (0xdab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 14 00:14:11 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=E3787CAD6585869F83A025566B3A809CF29C2F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f5:3b:95:05:32:62:a8:ca:9e:dd:0b:c1:e8:
                    a9:fd:aa:43:f4:44:74:3b:81:11:6d:f7:ea:ac:5b:
                    43:63:e9:59:d6:5f:af:db:7a:49:03:f9:d2:0f:1e:
                    03:01:9a:33:3f:56:69:26:71:7c:db:06:ac:49:7b:
                    71:65:fb:a1:a6:33:d1:ce:5b:93:87:72:7f:d6:98:
                    d1:83:1d:98:7b:96:67:62:56:0e:1b:85:4b:68:66:
                    3e:88:8c:ee:b7:87:3c:49:3f:f6:fe:46:05:75:c7:
                    5e:2f:bb:0d:c8:0e:f7:59:c7:17:31:e1:bd:50:bd:
                    a3:d0:07:22:1a:1a:1b:70:8e:c9:5d:ab:ca:98:60:
                    c6:f0:0b:7e:b1:d1:f9:b0:a1:fc:16:95:4d:a3:9d:
                    7d:4a:48:34:c9:1f:e1:2b:55:0f:68:cf:2d:c3:28:
                    cf:9f:89:23:21:10:0f:32:e3:39:34:89:31:2f:9a:
                    31:98:a4:6d:12:cb:81:31:c8:71:0d:31:24:85:f2:
                    56:74:14:0a:d5:35:44:54:8c:83:30:65:04:f4:2d:
                    e3:ef:9b:1d:a8:f7:9b:b4:e7:52:42:c8:dd:8b:ee:
                    22:77:a9:60:e3:0c:8b:dd:5f:5a:15:ab:39:5a:25:
                    2f:3e:e6:4d:55:09:18:d3:db:07:cb:81:81:c7:09:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:78:7C:AD:65:85:86:9F:83:A0:25:56:6B:3A:80:9C:F2:9C:2F:6C
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/43h8rWWFhp-DoCVWazqAnPKcL2w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         75:01:8a:b5:f0:3e:a7:b3:20:1d:72:91:55:e7:96:5d:89:ff:
         2a:f6:41:c4:ce:ce:a6:92:e5:0e:55:f9:04:2a:03:89:43:d5:
         f8:e1:f1:6c:f9:5f:5a:e7:f4:f9:56:21:5b:02:3d:56:44:8d:
         1c:7d:8a:d8:18:de:98:25:74:66:9d:9c:73:ee:51:a2:3e:ab:
         50:12:35:7a:7d:fc:38:62:c8:91:37:5d:b8:99:c6:99:9f:26:
         23:de:68:8d:c5:f2:d7:a1:0b:a7:e7:6c:1d:b5:74:c8:05:1b:
         ec:d1:17:75:83:fc:e2:ce:fd:96:ca:c3:94:34:56:c8:c8:96:
         a0:ff:e7:52:a3:78:09:a4:90:63:20:b2:7e:4a:6b:8d:c1:a0:
         6a:39:a0:84:f7:db:a3:46:ed:20:bc:a5:96:bd:14:97:13:1b:
         30:96:2d:35:f2:b6:46:9b:ad:78:7e:18:5b:41:5d:41:c6:6d:
         89:c6:92:39:e1:c0:1b:c9:8a:ed:a8:e8:00:aa:d2:9a:d8:f8:
         ec:32:95:0a:84:2e:01:1e:af:9a:13:26:66:1e:11:96:b2:d5:
         0f:88:1f:4c:b9:f9:e3:12:4b:a5:b3:10:b8:9b:44:bd:91:0f:
         9b:87:79:84:e3:03:29:97:49:be:98:f6:2a:4c:8a:b6:16:20:
         7c:2b:33:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:57 2024 by rpki-client on console-fra.rpki-client.org