Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/bqClu0UvZCLrGRdqJCUodQZhVk0.roa
File:                     bqClu0UvZCLrGRdqJCUodQZhVk0.roa (raw, json)
Hash identifier:          Z0oVxKD1nwBhUGnkEwMQFrnRrMvQIm+ozwvQ0GHItsE=
Subject key identifier:   6E:A0:A5:BB:45:2F:64:22:EB:19:17:6A:24:25:28:75:06:61:56:4D
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0F09
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/bqClu0UvZCLrGRdqJCUodQZhVk0.roa
Signing time:             Mon 17 Oct 2022 15:44:17 +0000
ROA not before:           Mon 17 Oct 2022 15:44:17 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3849 (0xf09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 17 15:44:17 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=6EA0A5BB452F6422EB19176A242528750661564D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:87:b2:ff:a7:34:3a:29:a7:dc:dd:56:29:
                    92:f3:5d:b6:61:48:be:cf:e6:83:d3:cb:0d:92:6e:
                    63:e4:4f:2f:e2:d2:30:dd:08:20:37:22:20:dd:e4:
                    4b:29:80:e6:31:75:f0:4c:aa:5f:f1:97:65:b0:c5:
                    3c:81:e1:91:cb:63:21:2d:5f:0d:c6:73:a8:26:ba:
                    be:61:03:da:94:8f:03:2c:a7:8a:3f:11:e1:1b:1c:
                    00:e5:e7:ab:c8:75:06:77:42:dd:27:b6:31:df:e3:
                    32:f7:a1:bf:b7:35:93:48:43:bc:8d:a3:70:3c:a8:
                    71:74:be:d0:38:84:e7:a9:44:e1:80:8b:e9:e3:5b:
                    b9:2c:d3:df:c9:e4:7a:73:13:3d:d8:5f:89:93:f7:
                    3a:52:24:99:a5:1e:c1:3d:a9:51:2b:43:ac:07:df:
                    ee:29:cc:3c:8b:d4:51:b2:00:e8:d5:fc:c4:67:72:
                    35:f6:07:ad:19:f9:c1:af:cb:bb:88:09:8f:97:b9:
                    fb:45:71:8d:de:04:4f:4f:3e:12:84:17:7c:ed:4b:
                    93:7c:b0:04:b7:fc:70:68:97:d9:a0:63:e3:e3:c3:
                    be:56:67:09:ff:20:b5:ed:b9:e7:67:25:d1:74:33:
                    63:d4:15:38:af:c8:9f:f4:ad:18:c8:41:f2:96:e3:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A0:A5:BB:45:2F:64:22:EB:19:17:6A:24:25:28:75:06:61:56:4D
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/bqClu0UvZCLrGRdqJCUodQZhVk0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:a1:23:a8:c0:69:d7:0a:c1:01:63:36:47:4a:e6:fd:47:7e:
         ca:50:94:73:62:0f:6d:8d:82:72:59:8b:84:49:f5:83:e0:db:
         8e:b2:e5:db:6a:7b:a5:40:25:b6:5c:cb:c1:ae:f5:7c:6b:d0:
         eb:b7:f0:b9:9b:86:4a:d1:e7:9e:20:f9:7f:7f:a6:5a:f8:92:
         a1:48:35:c1:2d:30:4b:e3:ed:65:53:0b:e9:aa:0e:7b:5f:1c:
         fd:68:50:e7:4c:f6:90:f7:e7:ed:13:49:f7:c4:16:e9:c9:d8:
         93:e0:f6:be:bc:78:ca:9f:58:e9:e1:36:84:9d:ff:23:6a:dc:
         03:40:d2:ee:fb:9d:5b:4a:d4:52:51:fa:e7:20:af:d4:46:65:
         4b:ee:30:1d:5f:2e:6c:47:d8:40:df:9c:11:ed:0a:3a:09:bf:
         03:d5:53:bd:bb:96:41:d5:f2:af:36:9e:05:c2:47:eb:58:d7:
         dd:95:f6:4a:c5:e3:4b:56:f8:8f:1c:02:b3:74:68:ef:2b:58:
         5a:be:74:e7:df:76:c9:0c:29:ca:c2:e7:83:0f:f7:d9:ba:91:
         a0:11:eb:4c:b5:74:e2:9a:95:96:ff:4f:c6:27:c8:d3:64:ff:
         a3:b1:0f:17:f5:3d:4c:98:d2:20:28:76:bd:9b:b7:d6:79:04:
         0d:c8:6d:a6
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICDwkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMTcx
NTQ0MTdaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDZFQTBBNUJCNDUyRjY0
MjJFQjE5MTc2QTI0MjUyODc1MDY2MTU2NEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+K4ey/6c0Oimn3N1WKZLzXbZhSL7P5oPTyw2SbmPkTy/i0jDd
CCA3IiDd5EspgOYxdfBMql/xl2WwxTyB4ZHLYyEtXw3Gc6gmur5hA9qUjwMsp4o/
EeEbHADl56vIdQZ3Qt0ntjHf4zL3ob+3NZNIQ7yNo3A8qHF0vtA4hOepROGAi+nj
W7ks09/J5HpzEz3YX4mT9zpSJJmlHsE9qVErQ6wH3+4pzDyL1FGyAOjV/MRncjX2
B60Z+cGvy7uICY+XuftFcY3eBE9PPhKEF3ztS5N8sAS3/HBol9mgY+Pjw75WZwn/
ILXtuednJdF0M2PUFTivyJ/0rRjIQfKW4+zHAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUbqClu0UvZCLrGRdqJCUodQZhVk0wHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvYnFDbHUwVXZaQ0xy
R1JkcUpDVW9kUVpoVmswLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAGqhI6jA
adcKwQFjNkdK5v1HfspQlHNiD22NgnJZi4RJ9YPg246y5dtqe6VAJbZcy8Gu9Xxr
0Ou38LmbhkrR554g+X9/plr4kqFINcEtMEvj7WVTC+mqDntfHP1oUOdM9pD35+0T
SffEFunJ2JPg9r68eMqfWOnhNoSd/yNq3ANA0u77nVtK1FJR+ucgr9RGZUvuMB1f
LmxH2EDfnBHtCjoJvwPVU727lkHV8q82ngXCR+tY192V9krF40tW+I8cArN0aO8r
WFq+dOffdskMKcrC54MP99m6kaAR60y1dOKalZb/T8YnyNNk/6OxDxf1PUyY0iAo
dr2bt9Z5BA3IbaY=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:08 2023 by rpki-client on console-ams.rpki-client.org