Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/XSrmp-iPSRUfiSUwxSlll4dwBz4.roa
File:                     XSrmp-iPSRUfiSUwxSlll4dwBz4.roa (raw, json)
Hash identifier:          UC5T3Ec/M3O+cQBWT6AGDHVIPR9aC0tdVkgfO3DHzLU=
Subject key identifier:   5D:2A:E6:A7:E8:8F:49:15:1F:89:25:30:C5:29:65:97:87:70:07:3E
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0C71
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/XSrmp-iPSRUfiSUwxSlll4dwBz4.roa
Signing time:             Mon 10 Oct 2022 17:44:02 +0000
ROA not before:           Mon 10 Oct 2022 17:44:02 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3185 (0xc71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 10 17:44:02 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=5D2AE6A7E88F49151F892530C52965978770073E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:98:ad:f0:56:4f:fa:33:d1:75:67:4a:bd:
                    b6:fa:35:aa:22:16:b6:f3:9d:61:99:66:b7:87:56:
                    01:51:0d:58:c6:4c:db:ef:46:a7:b0:2a:ca:86:a2:
                    bc:9a:cf:79:bb:6b:ee:1b:f8:57:b3:62:9a:ab:a7:
                    c8:09:a9:9a:9e:62:1d:29:11:8c:76:4b:9e:72:44:
                    8a:b8:ac:d1:c1:3d:20:3b:cd:7b:6a:10:e4:13:3e:
                    09:86:65:fb:3e:c1:a7:ed:23:3e:ee:cf:57:cd:da:
                    95:02:ca:7c:a9:09:93:3d:b3:d6:68:90:62:90:d4:
                    1c:58:1d:b8:cb:6c:bb:23:e5:62:27:d8:f8:c0:1f:
                    ba:f2:0b:8d:46:51:7b:f7:1f:0b:b7:d6:a6:d4:93:
                    eb:3a:33:2f:4c:4f:16:9d:8e:d4:28:18:6a:79:4f:
                    b3:26:bd:d7:34:e0:e6:e5:59:1f:c7:9e:e5:3d:34:
                    b6:c6:5a:59:16:47:13:6c:f4:8a:8a:ae:66:32:c8:
                    1d:e1:f1:76:e6:73:69:0e:94:19:76:5c:c0:1c:30:
                    fe:0d:64:78:e9:11:1c:6e:69:26:56:71:ee:95:da:
                    72:27:eb:5f:cc:3a:7e:fb:4b:e2:cf:b5:3b:a7:ff:
                    87:1d:e6:27:f9:f6:4d:e5:51:bb:5b:9f:2c:b1:ca:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:E6:A7:E8:8F:49:15:1F:89:25:30:C5:29:65:97:87:70:07:3E
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/XSrmp-iPSRUfiSUwxSlll4dwBz4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:4b:f6:20:c8:ba:09:85:ab:99:c5:01:bd:3c:3c:3f:b2:
         46:a2:78:cb:27:2a:3c:55:9a:2b:76:e2:2d:d5:49:9d:db:f6:
         34:cb:3b:cb:bf:aa:2b:26:94:47:bf:56:05:bb:84:61:04:7f:
         72:a5:25:d0:72:7c:ce:ad:92:25:88:88:4e:39:fd:fd:9c:ab:
         9b:4f:90:a9:50:55:88:70:ef:08:5f:b2:1c:1a:a1:95:34:d3:
         5e:aa:3a:e3:49:01:fc:40:29:c2:4e:be:30:19:43:f8:68:d8:
         16:78:07:93:d9:a3:84:ec:0b:46:48:57:02:d6:b9:a1:62:2a:
         89:b7:d4:93:cf:dc:96:0c:e8:c4:98:9e:0f:6e:49:a5:42:98:
         42:ba:90:a7:ad:1d:d8:8c:c9:f3:48:53:17:7d:b1:88:74:58:
         f9:fd:bd:8a:d9:a5:48:a0:bd:d1:0b:09:83:9d:b2:c3:48:5b:
         e6:75:a3:3a:e1:5c:f1:f3:f3:f3:b6:95:cc:db:11:b1:c8:26:
         2b:16:44:d8:60:0d:6a:53:62:07:78:33:63:e5:bb:47:23:08:
         6e:d2:1a:6c:f0:b7:bf:2d:1b:8b:4e:c0:90:74:79:0b:64:65:
         71:a5:c3:24:99:f6:f4:c1:01:7d:e9:02:cb:69:3e:b9:84:be:
         11:18:94:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org