Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/J79FwVbEGZ0a-6-0pXJwnWbOdUc.roa
File:                     J79FwVbEGZ0a-6-0pXJwnWbOdUc.roa (raw, json)
Hash identifier:          vFy1z30cA3tIyZkXcXgwp92m0/dOLW3V8uVRnhL17ik=
Subject key identifier:   27:BF:45:C1:56:C4:19:9D:1A:FB:AF:B4:A5:72:70:9D:66:CE:75:47
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0F7B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/J79FwVbEGZ0a-6-0pXJwnWbOdUc.roa
Signing time:             Tue 18 Oct 2022 20:02:40 +0000
ROA not before:           Tue 18 Oct 2022 20:02:40 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3963 (0xf7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 18 20:02:40 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=27BF45C156C4199D1AFBAFB4A572709D66CE7547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ff:77:d7:61:1a:43:3e:ab:b5:93:da:60:4d:
                    e8:66:2d:1b:d0:5e:ba:9b:1c:33:7f:ed:a9:0f:45:
                    ae:57:b3:99:8e:9d:aa:5a:10:1c:c6:35:c6:d6:2e:
                    d8:20:27:dc:70:98:2b:77:e2:7f:a9:7c:da:5f:af:
                    82:49:1b:e1:f5:10:93:25:82:5d:c9:f1:94:d4:0f:
                    79:58:94:30:3d:50:e1:1d:a2:0f:59:96:95:0f:07:
                    01:02:09:f5:e5:e2:7c:c0:41:df:7b:4a:48:69:97:
                    92:f3:42:78:7f:b4:56:4b:ec:0f:63:be:45:89:e6:
                    02:bb:3a:a3:bf:33:7a:d0:9b:29:79:0b:99:01:1c:
                    e1:d5:8d:a6:ee:04:17:63:31:5b:5d:16:54:6f:76:
                    49:ea:0d:d3:85:e5:37:d9:cb:cb:cf:44:67:53:b4:
                    49:9f:78:25:66:ba:8a:13:5b:ec:2a:15:02:35:6a:
                    1e:59:01:ee:f4:6f:bb:9c:90:75:94:c5:6e:2d:3e:
                    eb:a7:12:1b:f4:da:d4:91:b5:71:7e:32:97:fd:8b:
                    0a:9a:15:dc:fe:97:3d:61:25:2e:70:16:50:9c:e3:
                    91:44:25:a7:e5:91:44:84:2d:41:85:1b:16:56:ee:
                    52:bb:88:11:a1:55:17:2b:43:d2:ce:cb:39:43:50:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BF:45:C1:56:C4:19:9D:1A:FB:AF:B4:A5:72:70:9D:66:CE:75:47
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/J79FwVbEGZ0a-6-0pXJwnWbOdUc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         46:f2:ee:56:11:c1:94:94:8f:73:1a:6f:41:a4:50:3d:10:1a:
         93:82:cd:37:5b:a1:d6:a2:a0:2f:2d:21:26:74:ae:6a:b9:80:
         30:66:ca:7f:d6:1d:62:3f:71:74:b4:15:69:f6:1d:45:ef:6d:
         72:4d:79:b7:87:f2:b6:a1:64:fa:82:f7:71:36:6d:c8:1c:8e:
         ef:aa:09:3b:2f:ab:7e:7b:73:90:dc:b3:dd:6e:a9:8c:ec:46:
         d1:44:85:b8:c9:ec:fb:a7:6b:c6:d8:43:90:ab:b5:77:95:1d:
         8c:56:3e:d9:c0:ab:c6:04:05:49:dd:3a:63:59:d5:6a:40:b6:
         ae:e7:d5:ad:5c:13:26:1d:c7:31:df:f5:af:ac:eb:96:09:8c:
         d7:44:1d:9d:1d:00:c5:ba:2f:5d:4b:b3:22:bf:0e:0d:7c:df:
         78:ce:f0:89:da:ec:8a:f5:56:3a:06:78:46:c7:0e:e8:a6:c8:
         4d:e5:e3:6b:8d:49:4a:07:80:5f:3c:32:8e:6b:64:46:34:6b:
         ca:14:31:44:52:3b:4f:10:85:0d:cc:ec:09:6f:cb:bf:93:87:
         da:1d:f1:bf:a6:fa:80:f6:b3:55:2c:ba:2d:05:d9:d9:22:c5:
         f7:12:f5:3d:f3:83:ac:1e:6c:be:01:fb:f3:a9:9a:ed:ee:62:
         38:dc:d1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org