Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/L1iPDEkWKlnB089nSTPrCYX-qbM.roa
File:                     L1iPDEkWKlnB089nSTPrCYX-qbM.roa (raw, json)
Hash identifier:          CZEf2webQFk/f+4wA/ijWFt0NCMyU3c2oW9W5ksaz1E=
Subject key identifier:   2F:58:8F:0C:49:16:2A:59:C1:D3:CF:67:49:33:EB:09:85:FE:A9:B3
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0BEF
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/L1iPDEkWKlnB089nSTPrCYX-qbM.roa
Signing time:             Sun 09 Oct 2022 09:13:59 +0000
ROA not before:           Sun 09 Oct 2022 09:13:59 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct  9 09:13:59 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=2F588F0C49162A59C1D3CF674933EB0985FEA9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:09:cc:29:33:90:7c:9b:26:b6:30:4f:06:
                    3d:ed:30:bd:2a:66:5c:19:36:e1:6e:35:f9:6b:3e:
                    16:ff:4f:b5:eb:cb:43:3b:27:69:01:dd:02:6d:2d:
                    7b:05:de:a1:8d:c3:20:4d:a1:a8:a0:29:ed:36:c0:
                    65:3e:2c:6b:98:fc:1f:96:1b:b7:ee:a8:34:69:ba:
                    40:c8:ee:55:ad:ff:ea:5c:25:23:d8:2d:37:2d:c6:
                    9d:6e:b0:89:b0:3d:3e:93:5f:2a:14:0e:ce:c6:11:
                    c8:fc:4b:a5:e7:d0:a1:0a:68:2f:57:3e:a7:80:d2:
                    8f:99:c2:d9:db:c9:7e:9b:31:34:c2:05:77:50:50:
                    75:8e:53:cd:21:65:ed:b3:68:02:bb:e7:0c:d8:ad:
                    eb:ac:30:ca:d1:c4:34:5d:5d:25:5f:e5:dc:1c:f0:
                    78:98:9b:53:80:8c:f9:03:2a:a0:89:11:23:e4:74:
                    69:32:ef:09:79:2a:59:f1:37:54:88:6c:91:cd:f9:
                    29:51:a2:68:c7:b9:c8:82:9e:15:2d:8d:5d:fc:99:
                    f7:a3:0a:3b:4a:49:3d:d8:7a:b4:5e:d3:07:f9:69:
                    d8:6c:95:67:4c:8f:73:d9:f5:ec:68:a0:8c:ca:9f:
                    9a:25:ea:d8:c8:1d:3c:cc:16:68:18:81:f3:11:45:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:8F:0C:49:16:2A:59:C1:D3:CF:67:49:33:EB:09:85:FE:A9:B3
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/L1iPDEkWKlnB089nSTPrCYX-qbM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         6b:89:c5:46:d4:f4:03:be:55:31:c0:93:5f:92:1c:eb:44:8e:
         00:ed:d6:c8:e1:a3:fa:b6:48:1c:7e:f9:0f:8d:e4:d9:f0:98:
         05:24:d1:fd:8f:ef:54:68:4c:4d:db:b4:6e:c1:95:ed:49:ee:
         76:01:6b:7d:15:76:62:f1:18:14:8e:42:09:9d:d3:3b:03:9e:
         85:a5:1f:fe:16:9e:aa:a9:a9:18:30:6e:4b:d1:d9:55:3a:66:
         7e:e3:09:6e:1a:b9:52:50:ad:c1:73:06:ac:cd:d2:8c:f8:8d:
         e6:32:ed:a9:25:02:ba:26:f5:89:47:91:1f:34:25:03:64:bd:
         fc:c9:7d:c4:1f:80:d2:7c:70:6a:0a:ce:92:04:bb:f5:cf:83:
         78:f6:2a:81:48:98:2b:ec:87:aa:35:3b:5b:23:a1:22:11:36:
         15:0b:31:57:4b:a9:dc:1b:4f:46:35:e4:b7:9a:15:2c:72:28:
         9b:dd:19:9b:8d:cf:2d:93:b1:da:bd:0a:9e:08:2c:ff:32:cb:
         ed:cc:01:af:44:81:cb:f8:3f:fe:fe:7a:bf:f5:7d:d1:0b:da:
         39:25:3d:0b:35:03:64:c8:38:4d:97:03:af:83:01:31:d9:fc:
         7a:b4:58:3c:bb:b8:e5:92:34:5a:e4:bc:82:12:6a:a8:14:36:
         0b:b1:82:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org