Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/4MVOuG5ORkgAJdIsbDoAwufBTSc.roa
File:                     4MVOuG5ORkgAJdIsbDoAwufBTSc.roa (raw, json)
Hash identifier:          3sjJo2NXAfHZx7P4S3g0k5QbtDmxK0A6zzlpcODGVaE=
Subject key identifier:   E0:C5:4E:B8:6E:4E:46:48:00:25:D2:2C:6C:3A:00:C2:E7:C1:4D:27
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       13E7
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4MVOuG5ORkgAJdIsbDoAwufBTSc.roa
Signing time:             Sun 30 Oct 2022 15:02:57 +0000
ROA not before:           Sun 30 Oct 2022 15:02:57 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5095 (0x13e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 30 15:02:57 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=E0C54EB86E4E46480025D22C6C3A00C2E7C14D27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:e2:f5:43:4d:a7:ef:37:39:fc:2c:fc:40:
                    66:7d:de:be:42:fc:f7:88:e5:f9:d7:75:4d:82:a4:
                    19:90:cc:2f:5d:c5:cf:f3:0b:14:ea:4a:f6:00:57:
                    7a:32:be:17:22:10:02:8f:c9:de:93:7f:a5:19:86:
                    a4:0d:6b:45:d0:73:4a:49:ca:e5:23:84:43:85:c5:
                    81:5c:e4:62:1d:3c:de:51:8b:a0:4c:42:a4:f4:07:
                    15:dc:7e:f3:2d:1d:14:08:f1:f8:0c:9b:52:e8:09:
                    c1:1f:5a:27:07:25:96:c4:86:9d:a0:31:db:62:23:
                    a7:b4:84:17:30:52:db:2f:c1:32:2d:af:ed:fa:5c:
                    2a:c4:6a:49:da:39:13:86:bb:d3:c4:3f:8b:fe:a6:
                    d6:3a:a5:b3:f0:07:60:4d:98:79:0d:85:5f:0c:c2:
                    c4:6e:73:d5:30:d2:2a:99:f5:94:a3:d8:72:f7:b7:
                    5b:7b:18:08:c8:dd:74:c7:b6:7f:9b:62:a8:3a:87:
                    87:08:5c:71:f4:86:8b:33:9a:e9:8c:8a:2f:fb:ac:
                    d5:d9:a2:89:48:e8:de:9b:15:37:b9:f1:99:67:96:
                    78:bf:19:b7:7f:23:48:eb:ef:eb:97:2b:18:29:9b:
                    a5:4a:e5:79:3b:35:b9:ef:a8:51:54:bb:c1:c5:ff:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C5:4E:B8:6E:4E:46:48:00:25:D2:2C:6C:3A:00:C2:E7:C1:4D:27
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/4MVOuG5ORkgAJdIsbDoAwufBTSc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         b2:20:73:92:06:60:97:d2:85:2b:6e:3f:74:b8:31:fc:3a:53:
         63:47:1a:9a:ae:e7:a0:18:7f:6d:91:77:fd:a6:e3:af:16:af:
         62:8b:ed:99:6d:ae:dd:ef:ff:b8:5c:1b:0d:36:08:5b:e9:b7:
         a9:f6:b8:3c:64:6e:c2:2d:d8:05:f7:5c:c5:cb:41:1e:97:49:
         be:04:c7:39:cc:00:d7:26:a1:8e:d0:80:6e:69:8e:f1:a8:39:
         35:a7:ba:ef:42:e6:22:c3:dd:d3:fb:09:38:b1:ed:1b:77:37:
         fd:3e:b8:e5:b1:73:5a:7a:36:b9:fd:f7:4c:3b:75:54:0a:34:
         76:ab:b0:c8:7a:85:17:4f:24:9d:14:da:23:c0:de:c8:6c:52:
         33:76:c4:c5:60:7e:79:39:da:52:91:96:c5:37:51:7c:5f:24:
         b8:8a:28:35:b4:95:9c:e6:ab:44:f6:53:67:ea:02:30:c4:3f:
         c8:b9:e0:2c:ed:21:3d:ee:2a:f7:fc:fb:6a:97:95:9c:4e:d2:
         16:85:61:18:09:ce:2f:95:98:15:c1:ca:1e:ea:e9:7d:8f:0e:
         d8:97:c4:26:9e:91:73:58:8c:e6:82:61:81:d1:81:d2:83:90:
         ea:01:ce:57:73:6f:d8:de:77:b2:a8:cf:fa:f5:2e:9f:dd:48:
         56:48:e0:ff
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICE+cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMzAx
NTAyNTdaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKEUwQzU0RUI4NkU0RTQ2
NDgwMDI1RDIyQzZDM0EwMEMyRTdDMTREMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPT+L1Q02n7zc5/Cz8QGZ93r5C/PeI5fnXdU2CpBmQzC9dxc/z
CxTqSvYAV3oyvhciEAKPyd6Tf6UZhqQNa0XQc0pJyuUjhEOFxYFc5GIdPN5Ri6BM
QqT0BxXcfvMtHRQI8fgMm1LoCcEfWicHJZbEhp2gMdtiI6e0hBcwUtsvwTItr+36
XCrEaknaOROGu9PEP4v+ptY6pbPwB2BNmHkNhV8MwsRuc9Uw0iqZ9ZSj2HL3t1t7
GAjI3XTHtn+bYqg6h4cIXHH0hoszmumMii/7rNXZoolI6N6bFTe58Zlnlni/Gbd/
I0jr7+uXKxgpm6VK5Xk7NbnvqFFUu8HF/1zxAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQU4MVOuG5ORkgAJdIsbDoAwufBTScwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvNE1WT3VHNU9Sa2dB
SmRJc2JEb0F3dWZCVFNjLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBALIgc5IG
YJfShStuP3S4Mfw6U2NHGpqu56AYf22Rd/2m468Wr2KL7Zltrt3v/7hcGw02CFvp
t6n2uDxkbsIt2AX3XMXLQR6XSb4ExznMANcmoY7QgG5pjvGoOTWnuu9C5iLD3dP7
CTix7Rt3N/0+uOWxc1p6Nrn990w7dVQKNHarsMh6hRdPJJ0U2iPA3shsUjN2xMVg
fnk52lKRlsU3UXxfJLiKKDW0lZzmq0T2U2fqAjDEP8i54CztIT3uKvf8+2qXlZxO
0haFYRgJzi+VmBXByh7q6X2PDtiXxCaekXNYjOaCYYHRgdKDkOoBzldzb9jed7Ko
z/r1Lp/dSFZI4P8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org