Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ksh5GuEBRxhriCZ2erEFbkmAdBI.roa
File:                     ksh5GuEBRxhriCZ2erEFbkmAdBI.roa (raw, json)
Hash identifier:          LW17cmp6Y1C5qzuHxZT4O/gWJcicDfJASsnaRyfovbQ=
Subject key identifier:   92:C8:79:1A:E1:01:47:18:6B:88:26:76:7A:B1:05:6E:49:80:74:12
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0E71
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ksh5GuEBRxhriCZ2erEFbkmAdBI.roa
Signing time:             Sun 16 Oct 2022 01:44:14 +0000
ROA not before:           Sun 16 Oct 2022 01:44:14 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3697 (0xe71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 16 01:44:14 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=92C8791AE10147186B8826767AB1056E49807412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9e:b3:3b:3a:bd:e2:26:8b:a4:8c:40:bd:56:
                    07:33:89:04:e3:58:d2:77:fc:cd:dd:e7:6c:f9:e7:
                    78:c7:57:51:13:c4:75:7e:bd:f2:97:08:a0:a1:84:
                    89:b2:48:ec:66:69:b9:20:89:a1:13:bf:f3:e2:cd:
                    47:24:8f:5f:58:a1:d6:2a:1f:ac:d8:c3:d2:5c:eb:
                    b1:2c:50:7a:c4:b1:4f:fd:76:a9:62:17:0c:6e:a8:
                    0b:ce:bc:94:06:ca:81:e9:f5:ef:de:d2:87:1e:b5:
                    1f:f8:62:9c:7e:3e:e9:7e:e2:3c:9f:f3:35:a8:dc:
                    dd:ca:a7:69:c5:08:bb:2b:cc:46:d1:83:f8:36:66:
                    f3:9a:e7:2c:15:76:af:8a:f0:40:a4:38:1a:4f:f9:
                    06:c4:e4:e5:3c:c3:48:27:af:ad:16:1d:26:a7:40:
                    22:53:66:d9:b6:92:81:98:6a:43:de:06:96:7a:a9:
                    83:82:16:c4:50:b7:b8:8e:ab:69:3d:c4:1c:4f:04:
                    6b:dd:66:d1:0d:0d:d5:53:a1:8b:28:89:9b:2c:49:
                    4a:4b:05:b0:be:a0:23:df:4f:dc:b0:94:18:de:32:
                    d9:97:bb:e8:2b:f2:71:32:3a:70:ac:ab:45:36:00:
                    c5:f9:f5:2f:88:25:d6:f3:2c:81:88:ac:d4:19:df:
                    d2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C8:79:1A:E1:01:47:18:6B:88:26:76:7A:B1:05:6E:49:80:74:12
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ksh5GuEBRxhriCZ2erEFbkmAdBI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         79:35:8c:d5:db:a8:84:54:e7:8e:86:35:08:ef:37:72:8c:27:
         c2:b4:83:28:a6:07:63:5f:53:e4:54:18:ff:7e:64:95:15:b9:
         6a:ce:77:3c:ed:9f:3a:29:02:fa:17:39:fc:76:ce:0c:1a:ff:
         2a:84:22:4f:61:81:25:06:02:af:f9:9d:dd:4d:80:0b:ab:ba:
         3e:6c:0b:cb:d0:0a:8f:9e:a2:11:30:3e:0b:24:53:f7:e7:5f:
         25:0c:c7:61:0e:37:2f:6b:3d:56:f6:c1:16:0f:b5:a5:4b:4e:
         c5:a4:2a:19:f0:3f:57:2e:5e:7c:5a:ba:b0:74:30:e7:ae:33:
         22:0d:77:d5:d4:0e:59:06:e5:fc:03:9e:5f:38:8d:08:bf:11:
         c6:89:01:b9:79:e0:f7:6b:a3:c7:e6:2f:17:d2:60:19:a3:00:
         f5:69:39:96:ac:40:3b:ed:c4:8a:10:a7:b2:07:91:40:92:b6:
         52:d7:d5:61:cd:bb:3c:62:c3:5a:55:21:2b:e9:c9:b8:48:48:
         b6:53:ad:41:12:38:e2:f3:95:47:15:47:cd:99:9e:88:a3:3a:
         3e:77:22:15:21:cb:5b:4e:4b:a4:ec:15:7e:d2:37:c8:9d:ee:
         cb:69:e0:76:26:9e:59:1d:b7:f1:66:3e:83:49:c3:a2:7c:e9:
         47:5d:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:06 2023 by rpki-client on console-fra.rpki-client.org