Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/HdzUmitEJ_VhNo41R1MJHljlcVs.roa
File:                     HdzUmitEJ_VhNo41R1MJHljlcVs.roa (raw, json)
Hash identifier:          121xb4m4BiBVpJoaY6F0i++Kg9c5z+kbTuN+2Tyc/2I=
Subject key identifier:   1D:DC:D4:9A:2B:44:27:F5:61:36:8E:35:47:53:09:1E:58:E5:71:5B
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0E47
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HdzUmitEJ_VhNo41R1MJHljlcVs.roa
Signing time:             Sat 15 Oct 2022 15:14:17 +0000
ROA not before:           Sat 15 Oct 2022 15:14:17 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3655 (0xe47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 15 15:14:17 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=1DDCD49A2B4427F561368E354753091E58E5715B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:20:21:a9:81:1f:9d:a4:79:5c:8d:25:93:
                    76:ea:63:ae:56:72:39:c2:5f:a4:6c:f8:1d:5e:93:
                    a7:e8:74:5f:c5:a4:16:14:ac:02:ba:68:d6:23:b6:
                    b5:7c:19:e6:8b:25:25:24:13:e6:ce:52:aa:3c:96:
                    b1:ca:8e:3a:43:48:e7:eb:e2:db:1a:6b:35:33:a1:
                    d5:a8:37:be:10:b3:ca:80:29:0b:51:74:e2:59:70:
                    4a:0a:2a:ec:d5:37:37:48:b7:cc:ab:2d:50:d9:a2:
                    be:78:4f:54:9f:71:20:cf:10:fc:de:c7:a6:69:f8:
                    88:2d:5c:df:29:60:b0:70:3a:97:92:52:e7:95:fb:
                    3e:24:f5:c2:20:90:27:49:08:67:5d:39:dd:57:10:
                    5f:d4:b2:96:93:dc:15:4b:5d:46:58:19:d5:1b:e2:
                    38:71:8a:8d:40:7c:65:46:fa:f1:15:2f:8c:ab:11:
                    74:2b:5d:2b:83:4c:fc:a8:c0:f6:dd:3a:37:64:3e:
                    98:e7:e1:7d:71:39:ec:26:d2:c7:72:ae:5d:dc:c7:
                    23:37:be:c2:69:92:e7:7a:e5:a7:2a:df:e6:df:fd:
                    5c:01:b1:d9:68:d5:e4:81:ca:10:82:df:5b:6f:66:
                    2f:d5:37:14:89:07:a8:d4:8c:aa:09:b2:8d:7f:78:
                    8b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DC:D4:9A:2B:44:27:F5:61:36:8E:35:47:53:09:1E:58:E5:71:5B
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/HdzUmitEJ_VhNo41R1MJHljlcVs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:a3:16:83:6f:2d:71:06:1a:ad:09:30:1d:8c:0a:f1:42:
         84:2f:8b:7e:f1:ba:57:a5:ba:49:89:11:eb:8f:5a:c6:7a:2d:
         52:36:4c:2f:09:36:a4:bd:48:db:7c:2c:66:d6:19:9d:67:23:
         79:62:1f:c7:ff:f7:a0:77:f7:46:7d:19:d3:aa:5c:91:a7:66:
         9c:6e:d4:e3:94:55:02:3a:de:0b:e2:0b:25:64:bc:58:dc:39:
         27:51:fe:b1:16:8e:e4:7e:cf:40:ca:ee:b0:01:8c:1e:c5:d1:
         b3:1b:df:b3:5c:c7:89:b2:74:79:03:bb:a0:60:c9:f9:ea:00:
         5e:c4:0e:1d:0f:81:10:b0:ca:a7:78:2d:20:0d:07:09:71:5f:
         ad:08:e5:37:04:7b:af:69:9e:17:9b:fd:c6:ad:06:78:2c:b5:
         46:16:cc:39:db:e8:55:d8:b8:91:b4:e8:cc:0e:65:c3:4d:1e:
         b7:dd:9b:a1:17:87:08:e2:56:cd:a8:19:91:c6:3c:1d:b6:31:
         68:82:a6:09:65:3e:3b:d0:d7:07:89:ce:75:85:e9:82:fd:84:
         92:da:f9:59:c3:23:b0:3f:83:b1:5e:c2:cb:ad:93:05:c2:1b:
         48:1f:13:ca:00:97:e9:0a:d3:92:60:2b:2a:01:bf:44:fc:94:
         bc:85:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org