Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/_jPbn5DPmLALiwnkltukQzHCDRQ.roa
File:                     _jPbn5DPmLALiwnkltukQzHCDRQ.roa (raw, json)
Hash identifier:          K2zlpw97qQfkKcUjtyM9IvlBVJNK+LFEHu/3WQcV8A8=
Subject key identifier:   FE:33:DB:9F:90:CF:98:B0:0B:8B:09:E4:96:DB:A4:43:31:C2:0D:14
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1015
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_jPbn5DPmLALiwnkltukQzHCDRQ.roa
Signing time:             Thu 20 Oct 2022 10:32:41 +0000
ROA not before:           Thu 20 Oct 2022 10:32:41 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4117 (0x1015)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 20 10:32:41 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=FE33DB9F90CF98B00B8B09E496DBA44331C20D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:5d:07:d4:7f:66:cc:f4:f9:05:c1:ed:7f:
                    75:b0:31:05:87:40:ed:92:89:02:ca:5c:c9:c4:a5:
                    f2:42:01:10:f7:28:3c:4d:2d:8c:bf:00:82:15:96:
                    08:a0:f0:b7:31:3f:c5:c1:b2:ce:6d:20:85:47:ff:
                    10:5c:33:c3:02:c0:f4:fe:12:05:7f:93:7a:91:f0:
                    7f:4d:16:e8:2d:c5:90:8a:7d:43:49:d7:32:6c:8f:
                    f2:df:c4:d8:26:76:db:f3:3f:08:79:49:5a:1e:8d:
                    fd:4e:13:e6:6d:13:b3:83:e7:67:ad:2e:19:98:1a:
                    23:41:37:ea:0f:09:55:cd:55:48:22:d4:f6:aa:00:
                    c9:13:1a:da:3d:5c:9a:2b:5d:bc:23:d0:b5:11:7b:
                    e1:f2:a4:d1:70:3d:a4:68:4a:b9:41:e2:6d:81:bb:
                    37:75:1c:19:44:1f:e9:7b:d7:7c:6f:2b:b6:13:de:
                    48:f1:19:d0:49:0c:a3:73:db:88:6c:1f:a1:07:ae:
                    64:2b:94:79:a2:d5:91:f3:63:39:55:11:cb:26:75:
                    21:c5:07:ce:30:2c:50:04:80:25:5d:e2:36:78:cf:
                    e5:67:7c:86:66:1e:b4:32:86:03:52:88:2c:9d:94:
                    e2:14:67:c5:3a:e9:1b:1a:dc:b0:f5:72:64:0d:2a:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:DB:9F:90:CF:98:B0:0B:8B:09:E4:96:DB:A4:43:31:C2:0D:14
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/_jPbn5DPmLALiwnkltukQzHCDRQ.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:e0:66:e3:38:cd:e4:0a:78:25:ff:27:84:64:44:86:40:
         26:4b:21:17:74:c8:a9:b1:7c:45:48:b0:96:e8:38:55:11:f3:
         f2:c1:8b:e2:4f:6a:1f:00:a4:ad:f4:c9:21:cd:82:5a:e6:30:
         06:36:57:c9:6d:34:40:e3:ce:e5:97:6e:6a:a7:77:b9:82:33:
         c2:d7:33:34:d3:f0:ec:42:ec:b5:66:6e:0f:15:36:97:27:6f:
         8b:a6:62:b5:83:75:cf:f3:2b:f7:99:f8:64:61:db:48:11:c5:
         3c:ee:88:76:f8:13:ea:0d:0a:c2:a2:45:fc:9c:99:56:df:49:
         34:78:02:64:f3:87:c3:2f:76:9d:59:a6:8d:e8:cb:f7:21:d5:
         53:f8:28:e3:53:7e:59:5a:53:21:be:17:5b:a2:4a:fe:ab:7c:
         5f:49:b9:80:b9:4d:b3:6a:d2:90:0c:eb:a6:78:e1:63:51:f0:
         77:36:62:bb:1a:f0:8c:7f:a6:1e:65:ae:fa:f3:95:b5:a1:a5:
         23:3b:b6:5c:de:3b:43:81:82:25:45:3b:f2:fb:9f:00:24:7c:
         55:6f:84:b9:4b:c8:76:18:65:29:ca:91:c9:55:a4:85:e0:76:
         4d:52:48:74:4b:6f:3a:9c:b9:d3:f3:f0:a8:c6:8b:ec:f1:4f:
         fc:85:78:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:23 2024 by rpki-client on console-ams.rpki-client.org