Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/_CqXfOniyLo8SA5sojThnVspD5w.roa
File:                     _CqXfOniyLo8SA5sojThnVspD5w.roa (raw, json)
Hash identifier:          pzgX8PFDgREvACpHotQsFCEI/TazHA7pCJToH8hubSM=
Subject key identifier:   FC:2A:97:7C:E9:E2:C8:BA:3C:48:0E:6C:A2:34:E1:9D:5B:29:0F:9C
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1425
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_CqXfOniyLo8SA5sojThnVspD5w.roa
Signing time:             Mon 31 Oct 2022 06:33:02 +0000
ROA not before:           Mon 31 Oct 2022 06:33:02 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5157 (0x1425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 31 06:33:02 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=FC2A977CE9E2C8BA3C480E6CA234E19D5B290F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d7:a1:09:d2:f9:85:0d:5a:e2:4e:4f:a5:6c:
                    8e:ae:0e:09:54:17:6e:9a:54:f1:b7:d8:60:60:98:
                    2e:73:50:ce:bf:8b:10:8a:eb:6e:5d:30:00:b5:dd:
                    92:a2:6d:ec:e2:a0:42:a9:70:0f:f3:7f:fc:86:13:
                    ee:51:21:db:29:03:06:ac:b5:e4:46:83:8b:4c:03:
                    2b:76:9a:0d:08:66:dd:6d:3e:41:a7:58:8c:01:ef:
                    16:e8:d9:2f:5a:53:ea:8c:c2:f1:03:f7:90:39:96:
                    7c:55:b8:2e:55:21:b5:eb:03:c5:46:98:ff:ab:f0:
                    d9:60:87:c7:6e:79:2a:63:65:2a:19:b0:c3:20:6b:
                    47:27:fa:f2:e9:df:e8:a0:e2:8b:82:a9:cd:3c:1d:
                    56:69:92:8e:1a:3d:ab:b9:9c:6a:c0:bb:bf:37:9f:
                    60:9c:7b:02:2e:fe:c8:27:ca:e5:99:dd:f9:2b:cb:
                    4f:77:d1:9d:f6:d2:5a:a5:e2:4f:ca:f9:65:69:42:
                    a2:74:89:d7:b6:f7:a4:07:ab:42:dc:73:4d:0d:42:
                    1a:39:31:10:31:d7:3a:87:15:d0:dc:49:dd:4b:3c:
                    b3:39:00:da:8e:05:4f:8d:4e:0b:dd:ba:85:ed:28:
                    f6:ad:9f:91:73:31:78:95:51:f6:11:65:7f:bc:4a:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2A:97:7C:E9:E2:C8:BA:3C:48:0E:6C:A2:34:E1:9D:5B:29:0F:9C
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_CqXfOniyLo8SA5sojThnVspD5w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         3b:4e:a4:32:f7:f4:88:bf:99:5b:b8:ab:1c:e9:e7:9e:ef:20:
         9c:1c:a2:44:82:39:a2:84:ea:81:95:2c:ec:fe:b9:3f:b1:1b:
         e7:6c:e9:63:1d:79:7f:88:98:18:56:a7:cd:d6:26:ac:e5:40:
         69:5c:57:3e:6e:59:8b:1f:6a:ba:7c:23:06:24:17:dc:cb:46:
         40:91:b6:d1:71:12:55:20:c5:c7:0f:6a:01:c5:f3:eb:6c:0c:
         d1:72:f7:00:11:f7:16:18:03:77:06:70:30:d5:a9:08:31:e1:
         92:c6:40:2e:42:a8:21:f0:67:90:80:be:9d:95:15:44:13:04:
         05:20:fb:45:a3:25:54:89:09:24:51:7d:6b:35:e7:ea:b9:83:
         19:1a:ee:a9:e3:8d:0a:e6:0f:b7:f6:d5:08:46:e5:ab:78:6a:
         3d:f9:42:86:56:2d:df:cf:4a:6c:e6:b3:5b:56:21:b3:89:3d:
         ce:93:f9:61:97:c3:f4:df:cd:49:38:49:5a:eb:c7:0c:c3:66:
         87:f9:96:f4:d8:21:a0:15:56:76:c8:49:37:01:48:28:ae:12:
         b1:de:5f:6a:14:c3:83:f6:a5:41:63:43:47:66:5a:0c:1f:19:
         9f:f5:c1:87:e3:da:2b:cf:cf:f9:27:b8:12:ce:37:e3:7b:67:
         72:9a:fa:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org