Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/kkBv0fMq07m554SW2IxSkeG2Eog.roa
File:                     kkBv0fMq07m554SW2IxSkeG2Eog.roa (raw, json)
Hash identifier:          u2XJbioiLVTwmivsb242Vq0OiL0vJSBjrnq0axqJbtA=
Subject key identifier:   92:40:6F:D1:F3:2A:D3:B9:B9:E7:84:96:D8:8C:52:91:E1:B6:12:88
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0C67
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kkBv0fMq07m554SW2IxSkeG2Eog.roa
Signing time:             Mon 10 Oct 2022 15:14:02 +0000
ROA not before:           Mon 10 Oct 2022 15:14:02 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3175 (0xc67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 10 15:14:02 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=92406FD1F32AD3B9B9E78496D88C5291E1B61288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:5f:41:44:bc:e9:ec:03:31:ec:0a:f8:86:
                    87:d0:d8:8f:59:a4:79:7c:04:e3:c7:f2:cf:37:8b:
                    92:44:1f:59:6b:7c:12:7f:db:62:50:7d:3a:57:cf:
                    28:e4:6a:ba:b7:c4:82:32:77:c0:43:8c:15:a1:62:
                    89:ac:9d:22:a5:0b:b0:a6:98:57:38:c1:8f:f1:fa:
                    11:f3:13:09:f8:43:0c:16:24:82:c7:d4:31:f5:39:
                    a1:47:65:e0:23:b0:22:88:35:b7:2e:73:8d:e7:b5:
                    7d:21:5f:61:92:ad:f6:11:35:94:a7:6c:7e:bd:91:
                    b4:24:47:f0:f1:19:21:24:8f:b8:b7:ec:2f:15:70:
                    c4:73:9d:e0:15:88:9f:4e:35:d3:cb:90:95:9f:79:
                    87:85:56:b6:fe:10:98:2f:2b:d9:4d:9e:e2:de:e3:
                    80:d2:22:8f:c8:48:55:d3:f2:77:84:7d:22:90:bf:
                    3a:ac:9c:6c:34:db:ab:d0:ee:47:51:3b:6a:eb:6e:
                    82:ce:af:08:ee:80:d4:29:f1:7b:f1:86:d1:a2:35:
                    7b:54:56:e7:46:e7:13:32:b4:a1:7d:59:66:f7:ed:
                    78:9b:19:6d:67:70:96:68:b9:54:39:b5:68:6e:6a:
                    03:9f:39:c6:7d:b6:30:d4:2a:ea:0b:f9:d7:da:e4:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:40:6F:D1:F3:2A:D3:B9:B9:E7:84:96:D8:8C:52:91:E1:B6:12:88
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/kkBv0fMq07m554SW2IxSkeG2Eog.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:64:d1:ae:ca:95:56:e2:f9:6e:8a:a8:64:32:c5:8d:c3:
         23:f3:3d:4a:d9:7c:5e:ff:11:59:e0:6f:6e:93:7a:45:ee:45:
         09:8f:b7:d2:15:d2:6c:de:be:02:3d:d5:78:4b:5d:45:34:dd:
         02:71:2f:78:71:9c:01:6a:50:11:5f:e6:22:54:5b:85:1e:6d:
         03:4b:69:80:d7:65:be:7d:8c:58:3a:8e:bd:09:eb:53:28:fd:
         89:86:54:b3:ab:06:87:37:3c:a9:e6:be:70:90:04:1b:48:5a:
         04:6a:7f:1e:9a:0d:a4:a5:1c:5b:9c:e7:3e:58:96:ea:c6:6b:
         c0:8c:03:16:de:b4:49:15:c6:23:74:2c:ee:83:43:14:e2:17:
         53:2c:5c:b6:87:18:e2:12:11:f4:14:c4:9e:ff:8e:a7:f1:33:
         66:f3:23:17:3a:e3:47:93:81:9e:6f:ec:ca:d4:18:4b:c8:53:
         0d:7f:2c:cc:03:3b:6b:ca:40:07:5f:01:a6:eb:bf:26:1d:c0:
         6c:f1:5e:52:7b:d8:12:2d:17:81:01:5d:08:7b:5c:44:ff:05:
         5a:fb:34:22:cd:38:d4:f8:26:0b:13:50:6c:12:1f:67:65:2c:
         09:c7:8a:40:bc:c6:a0:eb:45:ea:d3:b3:a1:56:27:d6:5d:71:
         e5:e2:f7:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org