Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/IOINxHAwYSF9XfOi4wu3Wt0Wpdg.roa
File:                     IOINxHAwYSF9XfOi4wu3Wt0Wpdg.roa (raw, json)
Hash identifier:          yR3adA8P81n8hxKI/fhe5gCbCSEzyNCdF4CFHPyHnXE=
Subject key identifier:   20:E2:0D:C4:70:30:61:21:7D:5D:F3:A2:E3:0B:B7:5A:DD:16:A5:D8
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0DEB
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/IOINxHAwYSF9XfOi4wu3Wt0Wpdg.roa
Signing time:             Fri 14 Oct 2022 16:14:11 +0000
ROA not before:           Fri 14 Oct 2022 16:14:11 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3563 (0xdeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 14 16:14:11 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=20E20DC4703061217D5DF3A2E30BB75ADD16A5D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:16:29:1c:30:0c:35:b2:cf:9c:f5:e7:88:
                    00:6b:bc:86:9b:64:81:44:0a:09:f5:01:7c:16:b5:
                    80:03:2f:a9:94:59:45:f9:cd:c8:a3:90:b4:24:27:
                    72:2b:55:3f:01:db:ae:47:a3:6f:f4:88:cf:a3:c8:
                    e4:43:9f:da:db:7c:ed:7c:d1:ec:4b:60:42:74:20:
                    02:dc:93:24:75:7e:6d:57:ff:4a:5e:b4:33:82:f7:
                    9f:47:71:0b:61:cb:c1:65:94:4b:74:24:30:e7:f2:
                    af:2f:ee:5c:8f:de:fe:bf:56:1e:b7:a5:97:8a:ad:
                    9b:52:d4:74:b2:a5:61:d0:24:3d:85:1e:6c:df:48:
                    a7:8b:ec:b1:4f:06:53:26:94:03:df:40:34:9f:b0:
                    8d:fe:f6:85:9d:b3:8c:a7:ae:5c:d2:1e:8e:95:6d:
                    55:62:10:69:4c:17:4c:bf:66:55:ec:10:72:ec:e2:
                    1c:60:c3:4e:00:32:63:4c:0f:29:e5:9a:61:7b:e8:
                    62:4b:5b:c1:93:a7:03:65:a3:f3:6c:e7:13:07:19:
                    f9:59:6c:91:80:bb:aa:0d:4e:4e:6d:cd:89:10:e5:
                    d7:e4:f7:7e:0f:61:0b:02:92:96:70:2e:6d:2e:f4:
                    b2:ad:cb:7a:c3:67:06:2d:92:ba:b4:f2:69:b3:e3:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E2:0D:C4:70:30:61:21:7D:5D:F3:A2:E3:0B:B7:5A:DD:16:A5:D8
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/IOINxHAwYSF9XfOi4wu3Wt0Wpdg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:c3:0d:37:5d:7c:dc:49:dd:71:43:8c:ac:d9:4f:b0:59:61:
         20:e3:02:7f:1a:35:67:27:f7:b4:f9:0e:a4:76:da:19:b4:c0:
         bf:2c:fc:dd:52:f7:89:11:54:6b:c1:33:e6:7a:a3:00:69:88:
         57:80:fb:01:08:14:9a:93:58:18:cf:c6:6d:3b:26:bd:1a:d9:
         15:d4:29:b2:0f:6c:6f:02:f7:5e:b0:81:9a:71:ca:6d:3e:d3:
         64:af:a9:68:59:a5:51:ef:5d:ce:86:88:77:84:a7:6d:10:0c:
         86:b9:04:7b:21:87:f9:4b:1a:cd:c8:7a:6a:48:17:49:37:af:
         ee:25:af:2d:0a:98:58:c4:1b:5a:fa:ae:5d:db:3b:46:5f:19:
         ee:6f:84:58:31:8f:96:96:a0:3c:89:6b:8e:8c:da:a6:e4:2a:
         49:98:2d:20:97:98:71:d0:da:be:ca:e6:77:4f:12:4b:42:67:
         14:f9:b3:a3:5d:69:c7:de:69:5e:d9:6b:15:98:5e:86:e0:a2:
         f0:57:23:d5:f1:78:f7:4a:97:6b:3f:66:6c:7d:9b:54:bf:c5:
         c6:33:02:c2:12:0d:0f:ef:d1:8f:98:a4:57:fb:2e:01:bc:fb:
         4b:a5:58:2a:f9:ec:61:28:48:69:64:1a:cf:30:38:99:ac:2b:
         d0:af:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org