Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/YXPW3Yy_8Cl6H4b7wTUy_pWZ2fc.roa
File:                     YXPW3Yy_8Cl6H4b7wTUy_pWZ2fc.roa (raw, json)
Hash identifier:          iXdBn/Xk5DZ558DULBSK8rrh0+zeYWBg4bKJc5eMYcA=
Subject key identifier:   61:73:D6:DD:8C:BF:F0:29:7A:1F:86:FB:C1:35:32:FE:95:99:D9:F7
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1235
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YXPW3Yy_8Cl6H4b7wTUy_pWZ2fc.roa
Signing time:             Wed 26 Oct 2022 02:33:11 +0000
ROA not before:           Wed 26 Oct 2022 02:33:11 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4661 (0x1235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 26 02:33:11 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=6173D6DD8CBFF0297A1F86FBC13532FE9599D9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:ae:27:4b:f7:04:78:da:82:f4:a3:8d:a9:
                    71:b4:ec:2b:c3:57:37:f7:21:b4:be:91:62:eb:cc:
                    35:23:d5:dd:f8:79:5a:3a:e6:c6:49:e2:6b:6e:eb:
                    6a:68:c8:57:45:08:c4:a1:2c:2e:3c:eb:ad:2f:36:
                    cd:39:e4:8a:fb:8a:db:5f:f9:7f:4e:30:5d:1f:7c:
                    12:fe:98:06:3f:2d:4b:12:fe:9f:7d:5b:a7:07:a8:
                    18:0b:21:2e:83:7a:7b:68:68:58:95:a4:52:91:6d:
                    4b:ab:32:04:de:f1:28:1a:d0:3d:0a:8c:d8:4f:00:
                    18:8c:9b:62:6a:b6:98:0d:a8:0a:07:89:a5:94:f6:
                    1f:cd:e0:96:3e:71:f5:a4:e2:49:57:4d:70:84:0d:
                    42:97:2d:5a:86:72:7c:64:c0:12:4e:49:1b:31:e9:
                    c1:b1:cd:c1:3d:0e:e8:53:c9:70:46:8e:42:26:47:
                    73:ee:52:4e:20:66:c6:a5:8e:39:1e:db:c8:e5:4a:
                    7c:c4:bd:de:81:f3:f9:85:17:0a:df:4a:4f:0f:77:
                    fb:48:5b:b9:19:98:b7:44:3b:92:5c:b6:a3:b1:7e:
                    ad:b5:dd:d2:f6:ca:4b:13:dd:98:6a:17:6a:23:96:
                    ac:9d:ee:81:09:0e:1a:67:9b:db:52:cd:5d:8f:e9:
                    58:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:73:D6:DD:8C:BF:F0:29:7A:1F:86:FB:C1:35:32:FE:95:99:D9:F7
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/YXPW3Yy_8Cl6H4b7wTUy_pWZ2fc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         13:9e:ee:ff:d0:a8:5f:89:af:a9:dd:93:e9:30:24:2b:48:b5:
         7b:d4:44:49:d4:af:a1:36:06:06:e9:1e:cb:e8:aa:36:05:45:
         a8:2a:6e:8b:3d:b0:d3:25:82:aa:0e:8c:36:b3:20:72:83:8f:
         ed:50:8e:8a:a8:ab:6a:99:e3:4f:11:6a:46:1b:c0:d7:4f:a3:
         4b:53:03:f4:de:fb:f2:4d:23:64:9d:7c:8b:b2:34:fc:b7:6e:
         8b:3f:1e:a9:ec:f9:54:4f:9f:ac:c2:13:10:0b:1e:d5:fe:8c:
         0a:82:22:d4:de:68:29:03:a6:0c:48:28:e6:ec:8f:3a:90:dc:
         e2:36:3a:96:23:1f:f0:41:3d:bf:36:f5:90:4c:7e:05:0c:5b:
         87:26:20:cf:f7:7c:12:9e:da:8b:7c:2a:49:a1:00:3f:5f:89:
         c4:89:5f:b7:e5:4c:04:6f:5b:3f:8a:e2:62:44:44:4c:63:d7:
         5d:5d:55:77:5e:98:c9:0f:b3:39:71:b9:20:7f:b7:db:9b:5f:
         ae:2c:e3:f4:98:2b:d2:50:bb:a3:01:d7:dd:c2:dc:1d:f3:64:
         62:35:ce:3c:21:6c:6f:86:ef:ba:2e:ec:a6:1c:96:8d:39:fb:
         d7:6e:dd:25:67:20:c5:6e:18:11:2b:74:67:f1:d2:73:7d:9f:
         cd:20:95:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:08 2023 by rpki-client on console-ams.rpki-client.org