Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/cCUod7Q8mg4uj2FQhXADSEY26hs.roa
File:                     cCUod7Q8mg4uj2FQhXADSEY26hs.roa (raw, json)
Hash identifier:          yeXXhUghzfAofQQ3Bf5/T8xSaGJrq87T7FwslciwCbw=
Subject key identifier:   70:25:28:77:B4:3C:9A:0E:2E:8F:61:50:85:70:03:48:46:36:EA:1B
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0C03
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/cCUod7Q8mg4uj2FQhXADSEY26hs.roa
Signing time:             Sun 09 Oct 2022 14:14:00 +0000
ROA not before:           Sun 09 Oct 2022 14:14:00 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3075 (0xc03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct  9 14:14:00 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=70252877B43C9A0E2E8F6150857003484636EA1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e3:45:c2:04:1a:1d:9a:2b:43:e2:a3:fc:4b:
                    a6:bb:aa:30:d3:d0:25:64:9a:84:d2:c4:ee:c9:9f:
                    02:fa:55:d0:14:80:c6:e7:18:08:b9:4a:85:6f:9f:
                    35:8b:25:b6:c1:ce:59:19:84:e8:47:17:ce:55:3d:
                    76:c1:e3:63:d2:b7:ec:45:a1:71:c5:8d:77:a5:e2:
                    6f:43:d9:83:c5:62:5b:5c:85:3f:de:3a:ba:1d:58:
                    61:4f:4c:5e:89:bf:1e:f9:ca:44:69:73:6d:06:6a:
                    f4:24:fd:82:0e:37:99:9d:87:59:ae:49:49:48:fe:
                    9f:5e:66:dc:54:76:1b:55:61:a4:03:1f:fd:25:7d:
                    d5:4f:6f:d1:fa:bd:da:f4:a7:0c:bd:db:78:fc:ac:
                    14:ee:f5:45:fa:a4:c6:20:e8:60:c6:76:e5:c3:24:
                    b7:a6:fa:1a:b9:7e:25:64:00:9b:30:3f:ac:8d:61:
                    f7:b7:4a:97:af:77:00:d5:0f:5e:c6:2d:76:06:f7:
                    60:58:bb:ee:ee:8c:55:3f:31:a3:b8:a6:0d:5a:cb:
                    43:a2:cb:0f:a9:48:43:f7:b9:59:83:c9:c9:ed:3b:
                    d6:e1:83:86:4a:2d:5f:a7:50:0a:48:1b:a0:d7:06:
                    bf:7c:de:68:22:b4:ee:ed:d8:a5:04:96:1a:65:a3:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:28:77:B4:3C:9A:0E:2E:8F:61:50:85:70:03:48:46:36:EA:1B
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/cCUod7Q8mg4uj2FQhXADSEY26hs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:e2:79:2f:fc:4e:f0:75:c0:6a:51:89:74:15:ab:c7:77:
         1e:1d:88:4c:bb:c9:12:77:da:48:b3:34:67:b6:ef:9a:f6:a8:
         8e:71:77:f3:f2:37:85:84:e5:63:6a:f1:87:a4:21:6f:f4:82:
         c5:45:23:55:18:68:9d:c1:32:05:cb:03:56:a4:23:20:6b:5a:
         bf:ba:c3:f8:8e:6d:83:2b:d2:c4:c6:f7:fd:21:7b:08:84:93:
         07:91:2f:a2:9e:35:35:37:e2:38:20:93:2f:1f:a4:42:e9:ea:
         3d:46:c4:8b:d5:79:89:98:a8:82:4b:2a:12:fb:20:6e:7b:7f:
         24:02:9a:15:ec:a5:fb:bf:8c:a1:ce:bb:4a:2c:36:e6:0d:bc:
         fd:b7:2b:63:78:40:55:ea:7e:e2:fa:7d:ae:ad:45:53:91:53:
         86:7b:f1:c6:0e:9e:42:64:d2:07:5a:cc:2c:0f:85:ba:73:a4:
         86:86:de:7e:12:61:02:1d:22:29:04:39:17:be:29:22:ae:9d:
         6b:02:67:40:26:e1:31:70:71:bc:35:ca:5c:4a:eb:c3:a0:de:
         dd:7d:e6:9a:de:a6:ab:3b:88:bb:41:8e:37:c4:d9:66:84:2a:
         fb:20:49:88:d6:47:22:f3:77:03:c1:0d:ac:c7:a1:45:97:7f:
         15:1b:ea:ef
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICDAMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMDkx
NDE0MDBaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDcwMjUyODc3QjQzQzlB
MEUyRThGNjE1MDg1NzAwMzQ4NDYzNkVBMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx40XCBBodmitD4qP8S6a7qjDT0CVkmoTSxO7JnwL6VdAUgMbn
GAi5SoVvnzWLJbbBzlkZhOhHF85VPXbB42PSt+xFoXHFjXel4m9D2YPFYltchT/e
OrodWGFPTF6Jvx75ykRpc20GavQk/YION5mdh1muSUlI/p9eZtxUdhtVYaQDH/0l
fdVPb9H6vdr0pwy923j8rBTu9UX6pMYg6GDGduXDJLem+hq5fiVkAJswP6yNYfe3
SpevdwDVD17GLXYG92BYu+7ujFU/MaO4pg1ay0Oiyw+pSEP3uVmDycntO9bhg4ZK
LV+nUApIG6DXBr983mgitO7t2KUElhplo+QnAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUcCUod7Q8mg4uj2FQhXADSEY26hswHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvY0NVb2Q3UThtZzR1
ajJGUWhYQURTRVkyNmhzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAHuG4nkv
/E7wdcBqUYl0FavHdx4diEy7yRJ32kizNGe275r2qI5xd/PyN4WE5WNq8YekIW/0
gsVFI1UYaJ3BMgXLA1akIyBrWr+6w/iObYMr0sTG9/0hewiEkweRL6KeNTU34jgg
ky8fpELp6j1GxIvVeYmYqIJLKhL7IG57fyQCmhXspfu/jKHOu0osNuYNvP23K2N4
QFXqfuL6fa6tRVORU4Z78cYOnkJk0gdazCwPhbpzpIaG3n4SYQIdIikEORe+KSKu
nWsCZ0Am4TFwcbw1ylxK68Og3t195prepqs7iLtBjjfE2WaEKvsgSYjWRyLzdwPB
DazHoUWXfxUb6u8=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org