Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/fkwa8NppFWkS3G0-9HaOfftmUFU.roa
File:                     fkwa8NppFWkS3G0-9HaOfftmUFU.roa (raw, json)
Hash identifier:          60n1b/+bhr9Pl69nwIERmoFHh+1kI+y3+DQ31M5uZ9Q=
Subject key identifier:   7E:4C:1A:F0:DA:69:15:69:12:DC:6D:3E:F4:76:8E:7D:FB:66:50:55
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0DD5
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/fkwa8NppFWkS3G0-9HaOfftmUFU.roa
Signing time:             Fri 14 Oct 2022 10:44:34 +0000
ROA not before:           Fri 14 Oct 2022 10:44:34 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3541 (0xdd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 14 10:44:34 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=7E4C1AF0DA69156912DC6D3EF4768E7DFB665055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:66:f2:b0:2d:62:7c:a2:0a:52:cd:dd:78:73:
                    ec:0b:13:71:cc:5c:25:c5:6d:1f:2f:c3:64:18:d0:
                    45:6d:58:1b:8d:75:09:2e:e5:d1:64:5b:12:7a:13:
                    02:8d:77:fb:99:54:ea:ff:61:e3:e3:ef:87:8f:e6:
                    68:73:fb:2b:a8:0d:65:86:60:70:4c:59:2c:91:2b:
                    1c:35:42:1e:f2:53:06:64:d4:9f:63:dd:a0:b7:e5:
                    ea:d3:1a:c0:37:e5:38:79:48:ca:da:cf:87:a1:01:
                    3a:f6:56:0b:be:03:80:43:94:8b:f2:88:0e:e1:db:
                    99:03:ef:e4:03:9d:30:1d:75:7d:80:5b:59:25:d0:
                    c8:ae:6f:79:c7:01:ac:cb:85:3b:7f:e5:1a:2e:1d:
                    b3:70:7f:49:5a:06:b6:a5:58:cf:b9:ab:ae:d7:08:
                    14:e9:14:e2:49:7c:b5:cb:be:f4:0b:a2:52:e6:fe:
                    20:c2:70:fd:cc:50:6c:2a:2e:96:c7:ce:bb:92:a0:
                    60:d9:bf:07:95:2b:13:66:ca:f8:c3:6c:1c:df:63:
                    9b:94:dd:ae:d9:3a:59:8e:22:d3:cb:27:96:52:0c:
                    d2:64:41:c1:8f:0e:72:ec:90:7a:6b:0e:80:9c:e1:
                    15:7c:1f:58:ec:99:28:62:50:f1:01:ca:64:2e:7b:
                    b8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:4C:1A:F0:DA:69:15:69:12:DC:6D:3E:F4:76:8E:7D:FB:66:50:55
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/fkwa8NppFWkS3G0-9HaOfftmUFU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         88:20:40:0b:fc:31:ef:0c:a8:20:81:22:a1:c1:76:ae:43:15:
         01:9c:0c:bb:64:47:00:c6:23:37:f4:26:33:e3:0e:a8:b2:18:
         07:3b:4c:ba:b9:f4:4d:7d:6b:f9:44:f5:f1:98:62:82:d8:12:
         49:6c:74:16:17:1b:76:28:5e:02:c1:4c:62:90:58:85:62:b9:
         28:c2:1a:7f:27:1a:6f:ea:37:42:8c:7b:24:36:9c:10:d2:03:
         92:da:f6:03:6d:8e:65:3d:ad:bd:72:21:e1:24:c4:7d:0c:4a:
         08:76:ac:dc:7f:f9:f3:92:07:e2:be:a9:42:55:2b:c7:e8:17:
         74:f7:aa:59:13:7c:81:76:83:34:ad:5b:dd:cc:7c:99:ed:d3:
         e1:29:fe:9c:bf:00:c9:6a:39:7c:5e:d4:b0:f5:02:ee:79:51:
         3c:38:a9:82:5c:c7:87:16:1e:ed:27:16:7e:88:1e:e6:77:0f:
         e4:32:e2:16:4b:8e:3d:6e:bc:90:ad:86:1f:f2:2a:3b:e7:dd:
         4b:d0:6a:b6:b4:75:35:12:70:b4:dd:32:e4:03:71:4a:8f:1f:
         10:46:f0:08:9c:43:2b:1a:d7:a6:54:3a:55:ed:82:e4:7a:0e:
         fc:c5:2a:a1:2b:ca:05:3e:a6:23:12:9e:10:30:02:59:50:d6:
         4a:b0:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org