Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/9zlZBnUobSmdbgP3Ttdd5CmUCxE.roa
File:                     9zlZBnUobSmdbgP3Ttdd5CmUCxE.roa (raw, json)
Hash identifier:          gzq0GQke9NoQp34sTnaIt+KLVzATQXxEirvxTeqBU0g=
Subject key identifier:   F7:39:59:06:75:28:6D:29:9D:6E:03:F7:4E:D7:5D:E4:29:94:0B:11
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       11C3
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/9zlZBnUobSmdbgP3Ttdd5CmUCxE.roa
Signing time:             Mon 24 Oct 2022 22:02:49 +0000
ROA not before:           Mon 24 Oct 2022 22:02:49 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4547 (0x11c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 24 22:02:49 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=F739590675286D299D6E03F74ED75DE429940B11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:77:17:85:74:0d:f8:3e:9e:21:9c:2c:bf:
                    9c:a0:71:2f:c0:2e:f9:8a:98:af:d9:50:e1:5a:81:
                    50:d5:97:94:3c:81:22:23:f8:21:f4:3e:4a:d2:7a:
                    31:ea:d7:1d:01:39:20:25:29:b7:a3:22:3d:ff:24:
                    d7:59:d3:03:f9:1c:7c:b9:8e:0b:63:d2:35:bf:4e:
                    66:8a:19:5c:10:c7:2f:ef:97:22:c2:1c:84:3b:c5:
                    30:ea:57:11:68:77:b5:82:0e:a9:a1:87:a6:0c:d0:
                    b6:90:48:78:18:ea:d3:43:b0:72:91:1a:65:bb:23:
                    64:e5:ec:e4:cf:41:f3:46:76:0c:c6:e6:2b:51:9d:
                    f4:5b:3e:f1:d6:8c:04:63:cb:ef:aa:fa:83:29:0c:
                    64:41:43:19:9a:6f:f3:b9:96:7b:39:08:4d:fc:55:
                    55:be:cd:c4:68:15:ba:86:fa:d7:9b:8e:75:9d:2b:
                    23:68:93:fe:86:18:c1:e5:b0:21:c2:7d:ef:41:5d:
                    09:69:5d:e2:13:e0:f7:22:84:92:11:61:cb:67:ce:
                    3d:24:9d:13:20:1b:95:a1:70:eb:5a:08:a5:74:37:
                    13:92:98:75:3d:b0:7d:7a:c7:ec:d6:79:f6:bf:9a:
                    2d:bd:93:89:82:dd:3a:e6:c0:79:1a:c7:f7:51:3f:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:39:59:06:75:28:6D:29:9D:6E:03:F7:4E:D7:5D:E4:29:94:0B:11
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/9zlZBnUobSmdbgP3Ttdd5CmUCxE.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:3b:b8:9d:d9:0b:09:08:89:d3:5d:c4:f1:2b:81:2b:56:
         e0:52:88:06:c1:24:64:5c:cb:15:84:94:71:9c:52:99:ab:1b:
         1a:83:16:d6:d5:15:d8:72:63:f0:70:b6:a1:ce:59:32:2c:27:
         0a:6a:df:18:f1:16:d6:3d:f7:c0:ac:20:9a:1c:c6:18:1c:9b:
         71:d6:a8:bf:36:d0:cb:a5:4c:51:bd:d2:46:7f:b1:35:56:c8:
         db:87:e7:47:46:ff:1e:2a:30:f5:51:8e:a4:95:4e:a6:cf:6f:
         e2:c1:5b:ab:35:d2:0c:ff:50:6e:a3:65:ca:2a:cf:b2:67:31:
         88:da:28:5d:88:dd:a4:1d:d1:5d:51:40:fa:f5:cb:6c:5b:fa:
         13:07:a8:22:e4:1a:0e:0e:3c:b4:92:78:54:68:49:12:66:2e:
         7e:9a:94:e5:b6:fd:df:57:08:18:d8:ce:7f:af:76:a7:d3:7a:
         11:fd:6a:31:57:cd:65:70:2a:a8:58:56:d3:59:83:b5:9b:a3:
         eb:ba:80:89:72:f2:c2:5c:a3:83:18:d9:31:dc:c3:52:20:98:
         16:bb:cc:31:54:59:a9:33:8c:7b:6a:17:1b:9a:7e:77:d3:9e:
         e1:18:b4:77:40:f8:8b:9a:2f:9a:35:38:39:30:66:f3:e3:8f:
         e0:bf:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:04 2023 by rpki-client on console-fra.rpki-client.org