Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/9KxESlZJt4E5gguD51vo3JSJIec.roa
File:                     9KxESlZJt4E5gguD51vo3JSJIec.roa (raw, json)
Hash identifier:          aBqiIszJXdXvfl0XxuYb3xbjIBR5xMGMnPanpKI6Klc=
Subject key identifier:   F4:AC:44:4A:56:49:B7:81:39:82:0B:83:E7:5B:E8:DC:94:89:21:E7
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0E3D
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/9KxESlZJt4E5gguD51vo3JSJIec.roa
Signing time:             Sat 15 Oct 2022 12:44:12 +0000
ROA not before:           Sat 15 Oct 2022 12:44:12 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3645 (0xe3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 15 12:44:12 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=F4AC444A5649B78139820B83E75BE8DC948921E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fb:0d:48:23:e5:b3:48:1a:a9:40:ea:50:bb:
                    71:80:15:f4:97:0d:19:e1:90:34:5b:68:f4:3f:28:
                    11:05:45:5c:44:1f:79:f4:f1:cf:65:8f:12:62:5e:
                    da:32:dd:84:c2:8b:bf:01:8a:f2:ef:0c:09:21:7c:
                    a8:50:f2:38:6e:58:5e:d5:2c:1f:46:79:02:ae:ae:
                    4f:63:0c:98:b0:3d:53:6a:d2:6f:63:da:35:4f:70:
                    cf:40:81:ff:1a:2f:cb:6d:d1:ec:81:82:cd:bb:02:
                    e2:0a:46:68:77:9f:36:66:3b:d3:9f:eb:fb:0f:02:
                    df:92:6c:99:07:14:c3:53:d3:de:a9:c4:78:3b:a1:
                    bf:61:82:78:bc:39:31:88:4e:fa:8c:cf:a3:4f:12:
                    af:5b:37:cd:3a:3b:69:e0:29:8b:55:69:58:9c:57:
                    a9:5f:54:db:f4:0e:d9:c7:69:66:5a:1a:ba:c5:43:
                    63:b6:c5:cb:96:a7:e4:af:79:48:57:7d:21:6d:2b:
                    c6:97:f2:e7:83:0f:80:46:59:39:42:f9:81:ef:33:
                    a8:eb:72:9e:13:fb:d2:52:af:fb:6e:9d:00:16:5c:
                    3f:1b:9d:d3:c0:34:8e:47:d6:8c:19:b8:f8:0a:9c:
                    54:13:a8:78:e8:60:49:cb:db:c4:23:bd:1e:63:0f:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AC:44:4A:56:49:B7:81:39:82:0B:83:E7:5B:E8:DC:94:89:21:E7
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/9KxESlZJt4E5gguD51vo3JSJIec.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         a2:0e:ee:56:3d:c8:5f:38:cd:12:11:fd:42:e4:9f:80:05:e9:
         02:93:c6:a6:40:23:fb:74:e2:76:61:2a:0c:0c:3a:4b:7c:68:
         74:dc:d6:a4:3d:75:c7:0e:bf:d9:97:1d:cc:2c:1b:25:5d:af:
         a9:d2:3a:1a:7e:5d:d1:22:1f:50:6a:d0:15:66:59:29:bd:59:
         7c:d3:d2:d4:49:48:d2:f1:af:c7:e7:3b:6a:35:2f:a7:93:7b:
         a3:a6:76:f7:a3:aa:4d:5f:16:f7:20:92:ae:c8:a3:84:eb:c3:
         0e:bd:94:67:4a:a0:18:70:17:b2:76:ca:4a:91:8e:8b:42:41:
         6e:66:6b:c3:c9:06:67:98:35:16:a8:5d:cc:f3:2d:6b:46:ef:
         89:05:4d:7b:70:a3:45:79:a1:26:d2:61:ca:f2:7d:50:af:c2:
         8b:6f:2e:7f:a9:d2:7b:99:ae:a5:40:bd:6e:f2:46:67:c4:46:
         50:10:c8:d8:29:a4:34:7f:b2:c0:0e:10:c4:af:f6:26:00:39:
         a1:c0:90:d2:55:94:be:50:e8:4f:fc:e9:e9:e4:39:6a:36:a4:
         10:bf:d7:c4:f0:66:11:08:45:07:c8:c5:81:90:61:16:c1:41:
         54:d4:52:39:d5:90:92:24:0d:57:3a:bf:b0:58:34:59:ac:ef:
         01:a7:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:06 2023 by rpki-client on console-ams.rpki-client.org