Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/OS7FPzM2uFYz9KJTXERvWA4Plw8.roa
File:                     OS7FPzM2uFYz9KJTXERvWA4Plw8.roa (raw, json)
Hash identifier:          b6PAEPgEuXZ1qwaTAQXrBIXuvIrINlTBHgtKtL2AJqQ=
Subject key identifier:   39:2E:C5:3F:33:36:B8:56:33:F4:A2:53:5C:44:6F:58:0E:0F:97:0F
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0DF5
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/OS7FPzM2uFYz9KJTXERvWA4Plw8.roa
Signing time:             Fri 14 Oct 2022 18:44:11 +0000
ROA not before:           Fri 14 Oct 2022 18:44:10 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3573 (0xdf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 14 18:44:10 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=392EC53F3336B85633F4A2535C446F580E0F970F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2a:cc:89:69:a2:46:3c:ea:ef:2e:2f:37:8d:
                    9a:97:44:3e:52:f2:bd:f9:d6:57:0a:58:28:74:f2:
                    47:07:69:f0:84:d2:10:2f:d4:d3:4b:81:77:3a:dd:
                    56:49:76:78:31:5d:3c:63:cd:f4:72:ae:39:25:d7:
                    00:b4:2c:a9:84:ef:8f:b2:30:98:1a:e3:68:2b:9a:
                    10:cf:37:7d:75:b8:50:de:1b:a0:09:87:60:24:4a:
                    64:6a:a6:7e:4c:2c:5c:a1:77:f5:6c:dc:a9:29:48:
                    5d:8c:25:42:24:0e:93:d7:b3:4f:ad:37:d3:12:a6:
                    cc:02:a4:1a:ca:ff:ac:50:b8:c1:73:18:95:a4:a4:
                    d4:0e:85:ee:1e:26:55:da:08:15:b5:a9:3c:5c:0d:
                    da:40:06:dd:f9:20:46:b7:b4:9e:41:11:1e:2f:a4:
                    71:08:8b:09:f0:bb:89:c3:1e:cb:f6:f9:46:03:b6:
                    8e:96:dc:ed:3a:2b:22:b1:1e:c7:5b:9c:50:51:79:
                    bd:6b:2a:a2:ab:72:7a:73:07:be:b4:9f:52:0c:8b:
                    64:02:83:f8:70:5e:e7:a8:1b:3d:6a:ec:c8:1a:93:
                    5a:b3:57:2c:23:38:b5:67:0b:d0:45:50:74:e3:be:
                    4d:5e:cc:c3:0a:17:d5:c1:4c:c0:54:69:23:da:f0:
                    11:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2E:C5:3F:33:36:B8:56:33:F4:A2:53:5C:44:6F:58:0E:0F:97:0F
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/OS7FPzM2uFYz9KJTXERvWA4Plw8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         a3:e1:da:17:2f:a6:70:57:95:53:d7:fa:8f:bb:5f:22:35:3a:
         4f:a8:b7:ea:b8:5b:18:98:3b:06:91:16:23:a6:b7:c6:35:cb:
         4c:6b:9f:fd:c6:0a:ba:43:f2:60:0f:81:6e:25:b9:53:21:4b:
         0e:43:13:92:51:11:21:94:85:d0:59:77:5b:96:d5:4f:20:65:
         f9:79:f9:61:01:ca:38:42:cf:be:3e:13:15:ce:4d:c5:67:4c:
         a9:1b:f1:4a:0a:1d:3f:ff:50:c6:a1:1e:80:67:96:a5:5a:41:
         9b:c4:4f:2f:db:58:21:2c:19:8d:c6:18:be:71:8c:3a:b0:85:
         36:67:cd:d6:a3:00:5f:d8:fa:7c:9c:36:5e:b4:a7:e0:54:36:
         a3:74:35:e4:ed:c1:ec:ce:a2:46:e8:9d:cb:8a:fc:f8:7d:f1:
         c9:53:7d:c2:a8:e2:d6:c8:cc:05:d6:2d:66:c8:21:d2:9a:fe:
         e7:6c:37:1d:2d:6b:6d:9a:1e:f5:27:4e:ad:70:9c:4a:65:3b:
         8e:e2:86:02:9a:77:07:97:79:7c:7f:af:6b:4b:2e:c0:0b:47:
         0c:5f:1f:af:9e:56:38:68:4c:23:1d:2c:32:c3:41:51:7a:6a:
         13:1f:ed:c8:dc:e5:76:17:e5:9a:a4:2e:11:d2:39:50:f2:6e:
         e9:08:85:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org