Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/NcIfCN8chBqouYw7SM3Sc7clmxU.roa
File:                     NcIfCN8chBqouYw7SM3Sc7clmxU.roa (raw, json)
Hash identifier:          sK1nWay+D3KYI19+AOuKq1BnAXHSBv33mY3JoYjOc9Y=
Subject key identifier:   35:C2:1F:08:DF:1C:84:1A:A8:B9:8C:3B:48:CD:D2:73:B7:25:9B:15
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       102B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/NcIfCN8chBqouYw7SM3Sc7clmxU.roa
Signing time:             Thu 20 Oct 2022 16:02:40 +0000
ROA not before:           Thu 20 Oct 2022 16:02:40 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4139 (0x102b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 20 16:02:40 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=35C21F08DF1C841AA8B98C3B48CDD273B7259B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:85:07:44:8e:33:9b:30:37:6e:2d:1e:48:48:
                    28:d1:e0:42:95:57:91:09:52:e1:94:78:11:fe:b4:
                    7c:63:d2:c3:40:bc:24:1a:f7:e9:e0:50:49:c3:aa:
                    9a:0f:16:e4:b2:b9:19:00:b6:38:cd:a8:f5:02:dd:
                    ee:65:26:fd:37:4f:9c:f8:a8:12:79:d2:f6:0a:28:
                    b9:a9:3b:16:22:6d:55:46:37:c1:03:54:f3:83:f8:
                    ba:a2:df:40:95:78:42:6e:11:94:0d:70:ed:88:7a:
                    a2:44:a1:f1:7b:70:28:44:f1:e0:2e:82:04:fe:b8:
                    b9:68:20:1c:11:27:1d:6e:be:e1:3a:3c:d9:ee:ed:
                    83:43:41:67:eb:96:e5:c9:33:ff:f8:dc:94:5d:fa:
                    cb:1b:dd:ec:51:e3:e9:52:82:af:c9:2f:92:72:b1:
                    d3:ce:de:88:81:46:87:21:aa:a8:7e:fc:01:30:ab:
                    ab:db:cb:2a:71:66:6b:86:30:3e:5a:95:45:aa:3d:
                    f4:0d:0c:9f:fd:27:ac:5d:8c:69:df:f0:0b:bc:ef:
                    fd:b6:4d:81:43:d5:cd:0e:27:ca:cb:79:0b:62:4b:
                    f8:9a:5b:38:05:49:71:4a:4a:e4:69:d0:41:8c:a1:
                    34:35:eb:e8:a2:5c:a7:b3:d7:f5:40:73:83:91:68:
                    aa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C2:1F:08:DF:1C:84:1A:A8:B9:8C:3B:48:CD:D2:73:B7:25:9B:15
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/NcIfCN8chBqouYw7SM3Sc7clmxU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         41:d6:b4:3f:ac:54:27:e2:f3:9d:7d:9d:d8:56:da:04:c9:a1:
         60:75:38:4b:df:5c:e5:d0:e6:b0:40:05:9b:87:ab:ff:b5:8e:
         9a:f4:4a:c6:b8:53:6e:71:c7:94:3a:d7:ca:08:aa:5d:09:27:
         3b:5f:a9:50:73:4a:65:38:ca:08:ec:91:56:fc:00:d9:9b:82:
         bf:3c:f7:34:b8:12:f8:b1:68:39:95:56:c3:b1:1b:ad:3b:6a:
         dd:06:71:0f:ec:74:32:94:45:14:eb:cd:d5:9c:e6:88:ad:0e:
         ab:ee:3b:ec:a2:1b:2e:bb:02:e8:a5:83:d8:85:89:8b:7b:00:
         f8:40:4f:f9:a7:77:2a:53:23:8d:bb:f8:3b:67:e6:a4:53:b7:
         72:6f:02:be:3c:e2:eb:68:c7:6a:96:1f:63:74:ed:fe:97:06:
         6a:b3:f3:a8:b3:ff:a6:62:83:75:89:17:78:74:70:ea:bc:44:
         f2:01:03:f2:16:24:00:cd:38:29:2c:17:17:15:0f:99:c4:3a:
         50:16:91:29:13:77:5e:c6:61:9c:04:d2:a6:18:57:6c:29:d0:
         ed:b9:ae:0a:b6:b9:60:c8:be:ef:23:ed:a9:c8:81:cf:b3:a7:
         c7:a3:00:69:95:61:18:f9:e5:19:f9:45:d1:6e:41:7e:b8:16:
         2b:e5:66:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org