Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/TFMWPAaMW2DZ9LRf-PGSRMqcoSQ.roa
File:                     TFMWPAaMW2DZ9LRf-PGSRMqcoSQ.roa (raw, json)
Hash identifier:          tn2FniqSF6j2saEb4uwvQdvzcohVgoui93gkTNK04B8=
Subject key identifier:   4C:53:16:3C:06:8C:5B:60:D9:F4:B4:5F:F8:F1:92:44:CA:9C:A1:24
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0C5B
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/TFMWPAaMW2DZ9LRf-PGSRMqcoSQ.roa
Signing time:             Mon 10 Oct 2022 12:14:03 +0000
ROA not before:           Mon 10 Oct 2022 12:14:03 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3163 (0xc5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 10 12:14:03 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=4C53163C068C5B60D9F4B45FF8F19244CA9CA124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:ba:4e:be:cc:68:50:ab:51:a1:a6:c6:c2:
                    ca:52:f1:ac:a8:64:e2:b3:10:35:37:93:03:ec:1e:
                    ed:e9:17:62:28:e3:99:4f:90:da:c5:4d:aa:5a:73:
                    29:40:03:96:46:fc:74:ad:dd:19:29:52:08:46:42:
                    56:a8:18:cc:34:48:22:0b:ac:dc:db:bd:e2:39:63:
                    0e:4e:3a:a8:55:bc:b4:96:b1:da:69:85:d7:60:ec:
                    6c:46:f5:46:47:e6:32:bf:26:ee:9d:8c:32:52:95:
                    d2:c8:a4:45:ca:49:84:fa:f2:d8:60:b7:57:2a:a1:
                    69:72:b2:27:ab:2d:b4:7a:dd:13:e0:e3:3b:7d:6b:
                    41:11:b8:96:94:0a:e9:e1:3d:33:2e:2a:4e:55:fa:
                    3a:a9:31:76:b5:11:2b:6f:cc:95:c3:8e:07:55:c7:
                    ba:31:33:12:0e:f0:34:34:94:4d:a3:8b:11:36:73:
                    01:ae:7e:1f:72:b7:7c:3c:90:0e:a7:07:20:27:82:
                    f1:3e:61:62:2f:10:4d:3d:10:d3:f7:07:6c:d1:68:
                    7c:93:1b:48:c8:5c:84:5d:4e:a2:db:0b:32:09:76:
                    21:cb:fb:5e:84:77:e5:9f:26:7b:05:1c:59:31:02:
                    b4:5c:fe:8a:c4:ee:fa:78:21:3e:a5:26:af:30:0b:
                    b1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:16:3C:06:8C:5B:60:D9:F4:B4:5F:F8:F1:92:44:CA:9C:A1:24
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/TFMWPAaMW2DZ9LRf-PGSRMqcoSQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         88:72:52:f3:74:70:40:d5:33:68:c5:bc:9a:01:cb:5b:e5:f4:
         33:7f:b5:84:9d:f4:1a:be:20:90:dd:ae:4f:75:f8:5b:27:1b:
         ad:db:f3:95:42:4f:fb:1e:57:f2:69:de:d2:d2:97:72:24:62:
         fd:89:48:5c:fa:44:6c:44:87:2e:4f:05:ae:56:18:1f:6e:6d:
         95:90:3f:5a:19:e5:22:7a:77:e5:44:48:c9:75:95:92:27:d2:
         07:f6:21:96:2f:26:97:83:05:09:c5:ac:f7:89:ce:ae:fa:80:
         5e:a0:d0:6c:2d:41:1b:8a:1f:d2:ff:8d:b0:28:db:bd:90:12:
         12:25:12:06:ae:9b:8d:88:a8:d5:58:c2:cb:b2:3c:4f:11:e4:
         70:ec:a8:ee:04:9b:de:c4:82:ae:68:82:ff:79:1c:af:90:f3:
         f5:4d:3c:79:6b:ac:a0:0a:11:6b:4c:2f:5d:3a:a5:ab:5d:c6:
         b3:90:d9:34:ef:1b:b8:b5:ec:af:9e:dd:b1:27:ef:ea:62:47:
         7b:69:aa:7c:d1:10:9b:13:33:7a:71:ab:f9:2b:52:21:80:95:
         b2:10:49:bb:c0:6b:ef:2f:f6:ae:df:de:c0:e3:66:79:e7:80:
         3c:af:b4:31:1a:b0:ac:03:a6:93:03:76:d6:25:19:8b:8e:63:
         1d:fd:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:07 2023 by rpki-client on console-ams.rpki-client.org