Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/JFW9Wt62iTeGP6wTv4-MTvjxsjg.roa
File:                     JFW9Wt62iTeGP6wTv4-MTvjxsjg.roa (raw, json)
Hash identifier:          F4airsNrQlJZU5s101ZPMhadwkl6TAvNc+UxuSQFWzc=
Subject key identifier:   24:55:BD:5A:DE:B6:89:37:86:3F:AC:13:BF:8F:8C:4E:F8:F1:B2:38
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1201
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JFW9Wt62iTeGP6wTv4-MTvjxsjg.roa
Signing time:             Tue 25 Oct 2022 13:32:49 +0000
ROA not before:           Tue 25 Oct 2022 13:32:49 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4609 (0x1201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 25 13:32:49 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=2455BD5ADEB68937863FAC13BF8F8C4EF8F1B238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:f9:81:ff:c4:c7:91:79:27:a3:01:29:89:
                    26:4d:fc:96:61:4b:67:86:a6:0f:98:85:69:be:89:
                    dc:fe:b6:0e:08:b7:35:d0:74:08:1d:cf:80:98:6d:
                    55:3d:e0:29:71:5d:c4:6d:d8:4f:29:4d:60:ab:44:
                    08:ee:2d:37:64:8e:f1:e6:7c:f4:92:f3:0d:89:f2:
                    95:f8:88:da:53:ba:15:d7:8d:fd:bf:54:e0:bc:a3:
                    1e:32:93:e6:13:f1:91:de:85:af:b2:13:07:8b:ed:
                    cc:1f:6a:38:a1:04:de:cf:66:f9:de:60:87:f5:f8:
                    31:35:73:03:c4:da:6a:28:86:e2:79:88:61:78:e5:
                    65:78:d5:e8:f5:39:42:fc:b7:02:a7:74:f9:99:e3:
                    be:59:dc:b4:21:a4:e6:16:8d:b2:87:83:c9:52:1e:
                    a4:c2:d5:43:0f:1b:4b:a9:ae:b2:61:bd:c5:4a:45:
                    46:d7:5f:55:4c:ad:ab:00:db:5f:0e:11:c1:b4:49:
                    c1:e9:37:9b:d1:de:ec:16:e1:d0:29:c0:fd:d7:1a:
                    d4:6c:74:b3:23:6a:fe:4b:db:8d:4b:73:58:ba:69:
                    da:e8:cc:7b:18:c3:94:8b:07:87:6b:80:2f:5e:a5:
                    04:59:ce:15:77:39:95:1a:9d:f3:dc:2a:5e:ff:7d:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:55:BD:5A:DE:B6:89:37:86:3F:AC:13:BF:8F:8C:4E:F8:F1:B2:38
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/JFW9Wt62iTeGP6wTv4-MTvjxsjg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         13:57:b7:29:40:a7:b5:56:13:c9:d1:0b:32:bf:4c:19:2b:29:
         2a:b3:75:6d:4c:f4:94:fb:72:8a:69:dc:84:96:c9:ff:a6:4f:
         e4:83:ba:1f:19:0e:26:28:4a:18:50:48:cf:9d:69:39:88:4f:
         96:c6:da:ad:7b:0f:69:b1:ca:c1:3d:0b:9a:f7:1c:e2:c6:22:
         e8:7e:eb:19:45:9d:5b:2c:4f:fe:1e:8e:de:c4:d7:e4:6a:1e:
         9f:d6:af:ba:f5:8e:c8:bc:34:12:17:03:6d:8a:4c:1d:d4:e5:
         3c:4a:fe:83:33:de:a9:e9:e3:ba:16:a8:9e:db:e0:19:34:a2:
         6d:03:0b:89:c2:fb:b9:db:75:6c:87:d6:09:d3:1b:a8:70:25:
         e2:6a:62:23:59:3c:9b:ea:d6:08:8f:78:af:fc:95:08:4f:3e:
         e3:19:83:28:f8:3c:45:ad:1e:a8:01:bf:4a:3c:52:28:e8:2c:
         1d:ff:44:6c:66:7b:4d:b3:aa:25:5f:3e:5a:78:70:76:76:76:
         dd:7d:bd:69:aa:5f:80:19:d2:19:77:79:5f:aa:7e:9f:e8:49:
         ee:1f:34:0c:90:6a:4e:e0:1d:42:f4:41:4a:16:7b:40:6b:dd:
         a8:7e:68:5a:b1:c8:2f:eb:f3:df:2f:60:10:c1:4d:47:48:28:
         e2:db:33:5a
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICEgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMjUx
MzMyNDlaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDI0NTVCRDVBREVCNjg5
Mzc4NjNGQUMxM0JGOEY4QzRFRjhGMUIyMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDflPmB/8THkXknowEpiSZN/JZhS2eGpg+YhWm+idz+tg4ItzXQ
dAgdz4CYbVU94ClxXcRt2E8pTWCrRAjuLTdkjvHmfPSS8w2J8pX4iNpTuhXXjf2/
VOC8ox4yk+YT8ZHeha+yEweL7cwfajihBN7PZvneYIf1+DE1cwPE2moohuJ5iGF4
5WV41ej1OUL8twKndPmZ475Z3LQhpOYWjbKHg8lSHqTC1UMPG0uprrJhvcVKRUbX
X1VMrasA218OEcG0ScHpN5vR3uwW4dApwP3XGtRsdLMjav5L241Lc1i6adrozHsY
w5SLB4drgC9epQRZzhV3OZUanfPcKl7/fcZ9AgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUJFW9Wt62iTeGP6wTv4+MTvjxsjgwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvSkZXOVd0NjJpVGVH
UDZ3VHY0LU1Udmp4c2pnLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBABNXtylA
p7VWE8nRCzK/TBkrKSqzdW1M9JT7copp3ISWyf+mT+SDuh8ZDiYoShhQSM+daTmI
T5bG2q17D2mxysE9C5r3HOLGIuh+6xlFnVssT/4ejt7E1+RqHp/Wr7r1jsi8NBIX
A22KTB3U5TxK/oMz3qnp47oWqJ7b4Bk0om0DC4nC+7nbdWyH1gnTG6hwJeJqYiNZ
PJvq1giPeK/8lQhPPuMZgyj4PEWtHqgBv0o8UijoLB3/RGxme02zqiVfPlp4cHZ2
dt19vWmqX4AZ0hl3eV+qfp/oSe4fNAyQak7gHUL0QUoWe0Br3ah+aFqxyC/r898v
YBDBTUdIKOLbM1o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org