Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/MmJLQtOIacwQPzlhbHyjZSwe9z4.roa
File:                     MmJLQtOIacwQPzlhbHyjZSwe9z4.roa (raw, json)
Hash identifier:          87jqG9QLT2D2DV+htijUD3vPvHZvUMfqBXmzmBhYhn4=
Subject key identifier:   32:62:4B:42:D3:88:69:CC:10:3F:39:61:6C:7C:A3:65:2C:1E:F7:3E
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       145B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/MmJLQtOIacwQPzlhbHyjZSwe9z4.roa
Signing time:             Mon 31 Oct 2022 19:33:02 +0000
ROA not before:           Mon 31 Oct 2022 19:33:02 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5211 (0x145b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 31 19:33:02 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=32624B42D38869CC103F39616C7CA3652C1EF73E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:5c:e2:33:e4:2a:65:74:41:86:d2:8b:7f:
                    55:7a:c0:02:1b:e4:1f:c6:02:e8:36:78:4c:49:11:
                    04:23:bf:81:c5:76:3e:7f:2f:59:a3:0c:fb:7c:31:
                    e3:d2:f6:d2:c7:1b:44:e6:1e:a9:11:ca:66:97:47:
                    a3:1e:72:d7:9f:65:24:c2:dc:49:a2:9b:03:2e:c0:
                    1d:15:8d:4f:11:56:2f:55:66:4b:9c:c6:8f:07:62:
                    63:03:e0:9f:78:1e:e1:b8:0e:8d:ac:5b:68:28:4a:
                    4a:8e:f8:a5:29:43:7a:68:4f:88:1d:8e:7b:fa:c0:
                    3f:d7:6e:e2:f4:a5:d5:53:2f:35:de:d5:bc:2f:b5:
                    50:c6:6c:52:9d:d4:a0:58:48:6c:89:37:83:8a:7a:
                    41:7e:26:cd:5c:b1:39:6f:e9:f5:37:1b:92:4f:b1:
                    bb:36:60:69:8a:62:81:6d:8f:32:8e:3e:ba:ef:21:
                    ef:1a:87:75:80:9e:da:f4:d8:69:68:4f:3e:74:19:
                    a5:c5:fb:ad:29:df:90:72:d4:89:dd:25:12:c6:82:
                    69:73:33:6c:64:a2:a6:fc:e3:c6:63:f1:08:e6:cc:
                    a1:9b:bc:ee:de:e1:cd:9a:10:2d:7c:b7:18:98:9d:
                    99:e5:6e:64:d5:a5:b8:18:64:41:be:ee:f1:50:52:
                    b4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:62:4B:42:D3:88:69:CC:10:3F:39:61:6C:7C:A3:65:2C:1E:F7:3E
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/MmJLQtOIacwQPzlhbHyjZSwe9z4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:9c:f2:8e:4e:cd:01:0a:b9:b5:ae:93:a2:7d:5f:15:b4:
         0f:af:f0:fb:8b:bb:8e:e6:3d:9a:7f:89:85:19:1d:eb:95:56:
         0f:27:a9:62:34:54:5e:d1:a5:a0:93:66:b4:17:48:eb:19:9d:
         b4:fa:0d:33:df:5b:ea:46:83:39:1b:f5:fb:79:5c:6e:50:da:
         6e:cf:46:7e:cd:71:9f:18:cb:16:00:d8:4b:96:4a:78:71:5a:
         8a:7a:e0:4b:48:30:bc:8b:b6:62:3a:4d:d4:f5:df:cc:ab:6b:
         93:73:b0:8d:05:bb:eb:e6:eb:c3:78:a2:4c:1f:b0:01:b4:ea:
         3c:f2:73:c3:d3:98:67:59:72:fb:a1:38:93:ec:37:9c:32:28:
         b1:58:c6:ae:0b:4f:1e:53:f4:12:96:d9:ef:10:a6:ad:90:79:
         90:b7:77:ed:30:56:a2:b8:67:8d:be:aa:a4:e5:35:78:98:8e:
         57:7d:ab:98:9c:19:e0:24:41:52:71:aa:0a:0d:f7:e2:2f:6b:
         05:70:4e:89:d7:ab:95:62:d2:74:60:c7:a2:b3:d6:32:57:48:
         13:bf:ce:11:a8:4e:4f:1d:97:33:57:b6:8f:ba:38:66:e9:2f:
         6b:b1:58:06:46:33:2b:ac:f1:c7:4d:f7:72:fc:85:eb:f0:45:
         d8:9a:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:05 2023 by rpki-client on console-fra.rpki-client.org