Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/BGh9FXqMJxtbTofdzbPCwCqBdDg.roa
File:                     BGh9FXqMJxtbTofdzbPCwCqBdDg.roa (raw, json)
Hash identifier:          HjRMdvP1YelvB9vTOlptQhHBcc6gPLAdDJQYVi+v/0E=
Subject key identifier:   04:68:7D:15:7A:8C:27:1B:5B:4E:87:DD:CD:B3:C2:C0:2A:81:74:38
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0C99
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/BGh9FXqMJxtbTofdzbPCwCqBdDg.roa
Signing time:             Tue 11 Oct 2022 03:44:06 +0000
ROA not before:           Tue 11 Oct 2022 03:44:06 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3225 (0xc99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 11 03:44:06 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=04687D157A8C271B5B4E87DDCDB3C2C02A817438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:b4:4a:c5:2a:f7:1b:47:cf:72:ff:1b:23:
                    69:45:57:2e:90:4a:8a:99:63:ea:73:5b:9d:16:a8:
                    ef:08:c8:9d:72:36:af:02:1b:fb:97:b3:43:a0:09:
                    e4:19:d0:f8:2a:ff:7f:d6:56:b3:42:0b:19:08:07:
                    5d:69:a1:b0:eb:48:d0:b8:48:da:d2:53:de:b4:d7:
                    4a:1d:57:b8:1e:b8:3b:89:8a:1d:96:69:e0:ce:d6:
                    af:94:c2:38:93:d7:59:52:8f:61:02:ae:02:bd:91:
                    8d:8c:97:51:48:d7:3a:ef:8f:f5:c1:d7:25:24:42:
                    91:f5:eb:12:db:96:f7:f1:e8:c4:d2:ea:8f:57:78:
                    5e:66:69:df:84:63:b3:4c:c4:f5:81:8b:30:df:5c:
                    4c:a8:88:06:12:db:01:ab:40:88:8b:01:87:01:f2:
                    f4:43:4e:9c:25:7d:3b:3a:4f:d5:8c:85:60:1c:ef:
                    f3:4c:3e:45:fd:48:d7:25:6c:e6:87:c0:38:ab:f3:
                    09:ac:af:51:41:98:9c:6b:73:c6:8a:c8:3d:0c:06:
                    4c:0c:68:12:97:74:85:b5:27:84:ad:e4:54:0e:6a:
                    77:74:af:51:61:30:f5:bc:f8:d8:34:15:b7:85:60:
                    f0:ec:d5:49:56:0d:91:8e:4e:0c:c4:72:79:9f:91:
                    c5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:68:7D:15:7A:8C:27:1B:5B:4E:87:DD:CD:B3:C2:C0:2A:81:74:38
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/BGh9FXqMJxtbTofdzbPCwCqBdDg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         06:35:f5:09:13:14:8d:75:5f:64:77:ca:27:6b:cd:c6:a0:57:
         99:f7:c5:64:5e:fe:79:50:b6:c1:d2:13:40:59:af:0d:27:25:
         7f:38:4d:65:9d:89:21:9c:df:1d:56:80:fb:2e:da:1e:7d:ca:
         02:66:6c:95:65:a6:b5:71:5a:2b:b8:cc:53:a0:4a:79:74:4a:
         20:f3:e3:ff:5c:28:bc:78:fc:f9:83:6b:ed:3c:9b:25:be:ef:
         0c:98:69:90:19:40:8d:f2:19:74:9d:89:e4:69:82:4c:48:b0:
         c1:06:fa:d6:ef:f1:e1:7e:e0:e5:01:49:14:15:7b:2b:5e:68:
         6c:ba:ab:5c:92:9f:63:0a:b2:6e:ff:09:f5:1c:14:e2:db:bf:
         6f:6b:8c:78:12:43:d1:73:de:86:90:7a:1c:3c:f5:4b:41:02:
         bb:40:c5:9e:e3:86:c4:be:4a:24:52:bb:34:4b:80:fd:af:8c:
         eb:1c:e2:c6:48:32:7d:a0:d1:a5:3b:8d:dd:a3:36:e6:a3:e0:
         7f:b0:5b:0b:ad:10:ae:f5:df:a4:c5:01:60:d2:4e:2b:70:e1:
         ce:12:a4:aa:52:d2:36:af:8a:6d:a6:11:17:59:78:d9:06:1c:
         49:4c:11:d6:8f:a9:1c:10:60:c3:8a:ca:80:9b:14:21:1b:28:
         e5:f9:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org