Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/BvGaRINnlNiYDn-NsGJNCD-Xxsg.roa
File:                     BvGaRINnlNiYDn-NsGJNCD-Xxsg.roa (raw, json)
Hash identifier:          rn1Wg6+lSDWT6sjGQ8g3JedbxdnriebcNcm2hlTKGF4=
Subject key identifier:   06:F1:9A:44:83:67:94:D8:98:0E:7F:8D:B0:62:4D:08:3F:97:C6:C8
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0F31
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/BvGaRINnlNiYDn-NsGJNCD-Xxsg.roa
Signing time:             Tue 18 Oct 2022 01:44:17 +0000
ROA not before:           Tue 18 Oct 2022 01:44:17 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3889 (0xf31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 18 01:44:17 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=06F19A44836794D8980E7F8DB0624D083F97C6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:19:b5:5d:d0:d9:6a:af:eb:ac:95:2a:62:
                    91:d9:ad:ce:d4:d9:21:65:b7:19:95:f5:3a:2b:39:
                    b1:54:10:03:e7:8a:ee:8d:77:b6:d9:66:03:c0:90:
                    b6:27:9e:36:55:09:41:b2:42:47:05:81:66:5d:5d:
                    5e:60:23:b3:60:de:22:d1:f6:69:92:d7:ac:51:d8:
                    68:b1:ae:8a:ed:bd:0d:e6:d7:70:9a:51:28:64:30:
                    fa:d6:f7:7b:51:55:ca:bd:bf:a3:14:16:b0:e9:e2:
                    80:c5:95:b2:2a:00:0f:ea:72:c0:d0:ab:a5:1a:72:
                    1a:17:81:2c:0f:44:d0:70:16:43:fa:9c:fe:82:86:
                    1c:be:f8:02:34:f6:c2:3f:94:56:88:3a:7f:44:b6:
                    67:25:41:05:91:55:3f:28:ca:a4:a2:86:34:a3:29:
                    04:2d:60:3d:36:49:ce:0f:4b:b9:c5:b3:f0:fb:2b:
                    a4:8e:de:43:fa:09:5c:ca:3b:f5:19:fa:a5:20:f5:
                    c5:a2:80:85:ed:e2:a5:9c:3b:a2:e3:1c:0d:49:3d:
                    1d:33:7e:5f:fc:c0:1e:84:29:6a:a1:8e:ea:e4:dc:
                    49:b8:33:38:69:11:c3:a5:d1:23:28:01:11:f7:91:
                    a0:e5:aa:4e:fd:ad:18:2b:5e:78:43:0c:cd:a7:8c:
                    91:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F1:9A:44:83:67:94:D8:98:0E:7F:8D:B0:62:4D:08:3F:97:C6:C8
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/BvGaRINnlNiYDn-NsGJNCD-Xxsg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:08:17:f1:10:63:39:3d:66:dd:b8:6b:60:3c:89:a7:35:
         3e:fa:36:d6:0d:51:69:91:f0:2f:4b:9a:e7:ff:9e:97:d3:93:
         64:d4:94:87:96:f0:aa:09:3f:ff:14:73:b5:6a:39:18:86:3c:
         12:72:d5:78:28:1f:51:73:31:54:b4:2a:90:60:35:20:db:a8:
         9a:a8:2d:2d:d6:7e:6d:94:c9:f2:c1:7f:c0:41:23:1f:24:0a:
         fd:85:4f:14:fb:fb:d0:5c:d6:63:dd:ba:ff:e0:db:15:ff:26:
         1a:a1:ab:1b:d0:c6:cb:e1:16:60:3c:d7:45:a4:67:af:3c:3e:
         65:58:b0:53:2a:2f:c2:81:7d:52:ea:e8:a2:9e:ce:b9:59:a3:
         4c:30:3f:14:56:d6:7a:db:e0:b5:ba:f6:6a:6e:b5:c3:c0:5a:
         36:84:5c:76:f5:90:5a:a6:07:c9:bd:9b:0b:e9:37:d1:31:87:
         ec:f7:34:13:45:a2:00:d1:eb:75:c5:a6:5c:c0:2d:fa:18:05:
         49:de:00:57:da:50:e8:a6:55:11:a4:ac:bb:ab:3b:5b:ed:72:
         81:dd:49:79:67:af:57:9a:ff:c6:8c:ef:f9:77:b0:73:2c:f8:
         72:a9:f8:66:8e:c1:70:70:d0:5a:f1:4e:6d:a9:5b:ad:6a:08:
         aa:70:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:04 2023 by rpki-client on console-fra.rpki-client.org