Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/GvqEegMxiTcdT-rGahVjZBACC-U.roa
File:                     GvqEegMxiTcdT-rGahVjZBACC-U.roa (raw, json)
Hash identifier:          XuYb698c13MOx6U8jiz9/pY6sPNeu0YliZtDBNJQQsI=
Subject key identifier:   1A:FA:84:7A:03:31:89:37:1D:4F:EA:C6:6A:15:63:64:10:02:0B:E5
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       122B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GvqEegMxiTcdT-rGahVjZBACC-U.roa
Signing time:             Wed 26 Oct 2022 00:02:53 +0000
ROA not before:           Wed 26 Oct 2022 00:02:53 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4651 (0x122b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 26 00:02:53 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=1AFA847A033189371D4FEAC66A15636410020BE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:89:71:55:7d:fa:c7:c9:38:46:f3:dc:f3:80:
                    47:40:21:94:ab:3c:93:48:54:18:09:d5:58:0f:2a:
                    62:a0:91:ac:a1:b9:2c:b1:0b:0f:a7:7f:f7:67:c4:
                    07:56:ec:73:fb:0c:9e:7b:0e:0c:9d:98:65:57:16:
                    b2:57:2e:6b:fa:c6:79:6a:48:1f:2c:a1:aa:ae:37:
                    37:65:bd:3c:0b:37:e8:ce:63:0b:2c:07:80:2e:3f:
                    9d:ea:24:17:25:2d:6f:5a:89:da:f5:b5:4f:13:4b:
                    a3:44:71:4b:00:87:b9:0d:21:df:45:e6:24:b1:5d:
                    fb:78:51:84:0d:a2:65:4f:c7:4e:3a:75:28:46:08:
                    88:9e:78:d3:fa:5c:f0:75:aa:27:00:2b:f6:a4:3b:
                    48:07:79:44:f3:ab:78:2e:66:8b:2b:2e:01:4b:0a:
                    79:7c:71:15:ee:41:d8:d6:d3:bf:2a:d2:d5:ce:2a:
                    db:e2:bf:76:b5:23:60:2c:bf:bb:ba:9e:9e:de:a4:
                    48:09:51:3a:af:f6:0c:1d:29:be:77:02:76:33:70:
                    9f:d0:25:69:07:69:7d:52:aa:04:47:59:56:a2:52:
                    40:7f:d4:9e:fa:ba:07:4b:c4:4f:63:e8:00:42:a0:
                    f2:1f:5e:a4:17:55:b3:f5:e9:6b:53:4e:4b:56:83:
                    56:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FA:84:7A:03:31:89:37:1D:4F:EA:C6:6A:15:63:64:10:02:0B:E5
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/GvqEegMxiTcdT-rGahVjZBACC-U.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:b8:26:d2:27:35:17:0b:0b:b7:a9:09:92:2d:d5:e2:a6:
         b9:a0:68:0f:2d:a1:2d:78:5e:9b:07:b7:ed:77:d2:fb:3b:45:
         ea:c1:51:a5:d4:96:a9:2a:63:05:74:dc:bc:90:b0:ab:98:f1:
         16:c1:c5:4f:aa:38:bf:68:fe:3e:0e:f1:97:c5:6c:a6:aa:d8:
         e2:9e:14:4f:82:20:48:1b:6c:45:e8:9e:a1:6e:97:1b:eb:aa:
         ce:51:61:d1:97:86:f8:e5:8a:77:81:fa:74:d9:fa:0a:18:39:
         2d:3b:aa:d3:da:b0:36:7b:1c:f2:6a:78:65:21:0b:21:66:1d:
         98:ce:c2:55:54:cc:f1:9e:b9:bc:0b:dd:da:45:0b:6e:22:b2:
         5a:6a:ab:0d:ec:54:64:67:c3:7d:7e:1e:24:6e:50:09:b4:54:
         a0:c8:d4:c2:1b:1c:20:d4:c1:f7:a0:61:34:e4:cb:a3:fb:0d:
         b7:a8:bc:9b:40:38:5a:df:b1:b1:52:a4:cf:c5:03:4a:09:6b:
         7a:e8:a7:4b:74:c4:4d:f0:10:1a:e0:a5:09:f4:99:e2:6b:52:
         ea:78:bc:08:2b:91:aa:14:b6:4b:3c:07:d8:09:dd:fa:b3:54:
         46:91:5f:2d:f2:c9:a9:ca:0e:58:90:32:2a:1f:c7:3f:e8:22:
         38:64:42:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org