Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/YSHg_9YonHH66EFGerxscIvbhVk.roa
File:                     YSHg_9YonHH66EFGerxscIvbhVk.roa (raw, json)
Hash identifier:          S+9VdAHc3d3U5FE5ZffspN1UiCzhq2QP1Hpe3Apap4k=
Subject key identifier:   61:21:E0:FF:D6:28:9C:71:FA:E8:41:46:7A:BC:6C:70:8B:DB:85:59
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0E1F
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YSHg_9YonHH66EFGerxscIvbhVk.roa
Signing time:             Sat 15 Oct 2022 05:14:12 +0000
ROA not before:           Sat 15 Oct 2022 05:14:12 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3615 (0xe1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 15 05:14:12 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=6121E0FFD6289C71FAE841467ABC6C708BDB8559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:fe:15:01:66:1d:b3:43:7a:a1:3b:55:02:31:
                    74:84:9f:67:2f:29:73:7c:36:4c:44:b8:04:a4:6b:
                    c4:b7:b9:ca:c1:39:0d:06:3d:67:c7:72:16:75:be:
                    25:76:45:47:f1:08:4e:91:2b:3f:69:40:c7:c4:c8:
                    c4:39:85:c8:5f:91:38:84:a4:68:e1:be:4b:96:b4:
                    51:fb:24:32:c0:03:ff:da:55:73:c4:74:1c:b0:50:
                    87:19:db:07:3d:f8:f9:b0:5c:af:bd:4b:b7:54:62:
                    69:01:34:4a:1f:19:d7:12:24:1a:99:47:4d:61:1f:
                    44:5e:d5:cb:e5:cc:37:fa:f8:f5:f8:e5:b5:15:b5:
                    52:08:0a:d4:ba:53:98:33:35:a8:20:c5:50:b2:b1:
                    dd:7a:9a:a7:17:81:05:d8:57:02:b4:da:33:bc:d2:
                    30:a5:f4:d0:70:50:2d:25:da:81:c4:8e:04:f2:e0:
                    0d:aa:db:6e:ad:1d:7e:bb:d2:2b:09:43:b9:a8:88:
                    6a:c5:e6:75:83:4c:dc:41:18:d4:d0:6f:d8:22:8e:
                    96:85:42:1b:c4:cc:29:a6:ef:ef:e1:d3:8d:27:5d:
                    38:52:db:cb:67:7c:0d:04:52:11:37:5b:bc:a1:d0:
                    b2:14:59:ad:6a:c0:68:8a:b1:cb:04:e8:ae:6f:a6:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:21:E0:FF:D6:28:9C:71:FA:E8:41:46:7A:BC:6C:70:8B:DB:85:59
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YSHg_9YonHH66EFGerxscIvbhVk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         13:25:56:05:81:7c:e9:23:91:68:86:0f:bf:e2:6a:4f:50:c5:
         43:74:3c:47:0a:04:26:da:29:ef:1b:ad:86:18:69:94:1e:4c:
         09:ff:65:ad:6d:20:79:f5:bd:bd:ce:51:97:6e:3d:ab:00:bb:
         4b:33:b8:1e:25:78:1d:9c:cb:a9:69:59:f3:5b:1f:0d:c8:f3:
         68:8c:98:1b:ea:a4:df:77:88:fd:f9:80:ca:05:3c:66:e2:0a:
         49:73:7e:5f:e9:be:56:8d:4e:7d:ec:c9:fe:d3:3c:3a:c7:b9:
         5d:ac:65:8c:a3:9e:d5:6f:a9:28:1b:80:58:c8:de:67:60:e5:
         bf:a5:1b:a8:9e:35:7d:4a:d8:6d:30:4c:bd:a5:2d:6e:d8:6c:
         9d:7d:68:24:a7:c8:e2:07:95:c3:ab:8b:5a:9e:03:a1:17:d7:
         c6:3d:23:c2:59:cf:ed:40:39:7c:3a:e2:2c:95:2f:e7:13:a6:
         78:f9:84:1f:46:0e:a6:f0:f5:cc:1a:cf:05:e1:bc:ad:44:52:
         bd:44:0f:10:0a:d2:8f:9d:96:5f:e8:c8:39:c3:4c:3c:6a:e5:
         10:88:48:9d:59:89:d7:1b:b7:a4:c7:cf:3e:c6:a2:80:48:db:
         ac:bc:e2:fe:61:4d:c2:aa:15:ab:d3:2e:ed:76:18:d9:c4:d6:
         25:79:e4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org