Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/D4EfHQtwdIPNFUFLIVwFt5y59yw.roa
File:                     D4EfHQtwdIPNFUFLIVwFt5y59yw.roa (raw, json)
Hash identifier:          iquJTfN8LqMu1qKszWqM67QxssNllgO/PC4S7jobxJM=
Subject key identifier:   0F:81:1F:1D:0B:70:74:83:CD:15:41:4B:21:5C:05:B7:9C:B9:F7:2C
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       120B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/D4EfHQtwdIPNFUFLIVwFt5y59yw.roa
Signing time:             Tue 25 Oct 2022 16:02:50 +0000
ROA not before:           Tue 25 Oct 2022 16:02:50 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4619 (0x120b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 25 16:02:50 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=0F811F1D0B707483CD15414B215C05B79CB9F72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:ac:d6:54:be:8b:28:b0:10:dd:2e:46:0d:
                    6c:7a:0a:bd:2e:81:3e:d1:a1:a3:0f:6d:cf:e2:8e:
                    e3:c5:e7:32:e6:fd:cd:9c:fa:2d:ec:6f:60:a0:98:
                    08:b5:6b:5c:7c:50:0f:3b:84:34:d1:43:5d:e0:16:
                    04:a9:f3:34:0e:98:5f:56:b2:67:d2:36:52:52:32:
                    f5:35:1e:b3:a4:91:1b:b7:cc:ce:59:c9:e7:80:4b:
                    3d:a9:a9:05:f0:5d:62:a9:c7:28:80:aa:e1:95:a9:
                    fb:4c:d3:0a:42:d3:41:e1:59:1b:bd:16:13:ba:fb:
                    db:f5:d9:07:23:99:54:b1:cf:4e:61:68:b7:54:7a:
                    cb:48:bb:cb:27:fd:0b:00:60:9b:bf:cd:91:fc:75:
                    6e:5e:2f:98:a1:b1:13:86:89:f4:c1:4f:26:a1:06:
                    87:55:69:d6:38:cd:e2:5f:f1:b2:57:1d:51:fc:1b:
                    60:09:75:ce:cb:32:b7:89:45:fc:ed:f8:61:ec:a1:
                    56:ee:f9:a6:5d:05:40:4b:59:44:da:1c:68:1c:8e:
                    70:fc:bc:2a:7e:8f:d9:54:47:1f:7b:6e:d8:a7:0f:
                    51:e4:9b:64:be:7d:27:93:3d:3c:e6:f8:4d:40:f9:
                    ca:7f:4b:7c:5a:36:a4:6f:49:48:76:1b:9e:31:c0:
                    91:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:81:1F:1D:0B:70:74:83:CD:15:41:4B:21:5C:05:B7:9C:B9:F7:2C
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/D4EfHQtwdIPNFUFLIVwFt5y59yw.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         1e:5a:00:41:b6:1a:ae:57:a1:77:02:64:59:0a:51:e4:2f:6b:
         a5:64:c8:2f:b3:58:13:53:b4:de:64:f9:89:26:3a:d1:47:c5:
         20:87:68:35:ab:80:19:c4:76:d4:11:7c:92:1b:23:30:e5:e9:
         68:76:b2:3a:7c:10:b5:85:17:37:b8:61:b5:ef:88:5a:69:37:
         7b:44:a3:57:4d:81:64:a9:19:50:30:2e:7f:f5:31:55:85:0a:
         2e:ad:c4:ac:b1:f1:35:76:f6:71:5a:9e:37:14:06:1b:bc:48:
         90:1b:1d:c2:34:11:53:a4:2c:2c:0c:e1:64:f7:8b:ef:e6:c7:
         06:4c:f6:23:a8:ff:ef:84:a5:72:9d:7d:f7:d3:b7:eb:cb:ba:
         14:b2:c1:a9:30:c6:9e:51:03:6f:c0:69:c1:09:94:f9:d1:3d:
         f5:cf:a5:57:94:16:33:d7:75:7c:1c:5e:49:d2:89:6f:c2:c8:
         ef:42:11:90:f5:b2:cf:1f:61:ea:f2:2c:fc:0a:78:00:60:5c:
         53:c4:07:6a:82:17:aa:d8:c6:96:57:b7:17:8a:d0:f0:ee:a4:
         88:1f:57:b5:b4:38:03:d8:37:fa:48:9b:10:db:ab:90:6e:7b:
         e8:ef:a6:ee:1f:8b:d6:e8:fd:76:c9:0f:7c:8b:9a:c3:ef:d9:
         04:6a:25:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org