Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/lMWThKoYUI1R1O5x-pwwDR-q-ow.roa
File:                     lMWThKoYUI1R1O5x-pwwDR-q-ow.roa (raw, json)
Hash identifier:          0WiAX5BVD5vp9HFBzkzpKP7XeSqQvQObJySLuArQVyk=
Subject key identifier:   94:C5:93:84:AA:18:50:8D:51:D4:EE:71:FA:9C:30:0D:1F:AA:FA:8C
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1087
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/lMWThKoYUI1R1O5x-pwwDR-q-ow.roa
Signing time:             Fri 21 Oct 2022 15:03:05 +0000
ROA not before:           Fri 21 Oct 2022 15:03:05 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4231 (0x1087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 21 15:03:05 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=94C59384AA18508D51D4EE71FA9C300D1FAAFA8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:25:c1:26:b4:15:f4:20:64:8a:b7:2d:40:
                    b9:dc:6b:14:2e:22:51:70:26:6f:75:a3:fc:9e:33:
                    0e:55:b3:c4:f2:7c:b7:c6:6a:b2:8f:c3:4b:2e:18:
                    18:58:16:fc:df:b8:da:ac:5d:09:fb:12:02:ba:fa:
                    8d:f8:48:eb:46:28:84:8b:c7:53:a0:55:de:28:e7:
                    e9:0f:61:44:02:c7:f1:06:af:6b:8a:98:d8:a2:ce:
                    91:13:e1:4c:15:33:df:99:d3:4c:27:05:b7:12:77:
                    02:84:81:4d:ae:7a:33:ef:f6:13:91:0a:35:1e:45:
                    a6:07:df:a6:f2:62:1e:51:2f:3b:2f:89:05:cd:2c:
                    b9:dd:df:31:f8:76:91:d6:c1:a6:d1:73:57:8d:71:
                    39:4d:c5:bd:fa:e4:f4:a3:42:d2:09:72:93:95:7c:
                    ca:74:e2:71:f1:67:f0:94:ea:95:1b:89:9e:60:83:
                    d8:40:08:b5:5c:ff:1c:0c:03:6e:bb:e3:03:e9:89:
                    fd:2c:d8:da:f0:34:e9:3c:96:1e:64:32:96:a2:c0:
                    bc:a8:cb:63:cd:0e:7d:0d:fe:1e:e2:19:e6:3d:b5:
                    69:50:f7:04:de:77:27:9f:33:d0:b6:46:bf:25:7e:
                    34:f6:36:a4:59:cb:00:40:dd:e5:30:c2:b5:6e:9e:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:C5:93:84:AA:18:50:8D:51:D4:EE:71:FA:9C:30:0D:1F:AA:FA:8C
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/lMWThKoYUI1R1O5x-pwwDR-q-ow.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         43:0c:32:6e:e8:64:09:bc:c3:15:bc:8e:17:1d:22:18:4d:11:
         07:e6:8b:9e:35:9c:f7:cc:a7:11:c3:53:14:bc:1a:26:a1:5b:
         24:a5:81:64:bc:b4:cd:81:c7:eb:ba:19:8c:8b:dd:71:c2:74:
         41:b8:ce:c5:0e:bf:18:a2:ea:1c:1b:09:08:20:f8:6e:b6:4c:
         e4:80:68:fc:b0:81:29:ba:55:34:57:4f:2b:bc:a7:b0:b9:32:
         20:a5:7e:48:c9:61:ef:5f:c5:95:98:51:af:59:5f:b0:2d:31:
         4f:9e:69:d0:3f:d6:86:d3:33:ba:c4:63:eb:d3:cf:46:f3:f9:
         99:58:ed:9a:e8:cb:2a:54:58:bb:99:5f:23:eb:88:1d:9e:6b:
         eb:52:37:bd:46:8a:49:1e:dc:c5:2b:e2:b4:49:6c:36:88:d1:
         44:03:a3:41:ea:b1:33:7c:df:6c:b5:75:c1:6a:ab:92:3f:0e:
         d0:be:14:21:37:3d:c2:c7:fc:a3:9b:75:f5:4a:bd:46:4e:dd:
         04:0e:3d:2d:c4:43:29:83:2d:3c:fc:8c:22:8d:ec:98:35:7d:
         3c:fe:dc:22:ce:d9:16:39:5b:fa:3e:9f:c0:50:a9:cb:ba:ab:
         36:b3:01:71:ff:90:50:70:a1:26:97:e3:76:f0:ca:aa:bd:28:
         18:51:fc:58
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICEIcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMjEx
NTAzMDVaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKDk0QzU5Mzg0QUExODUw
OEQ1MUQ0RUU3MUZBOUMzMDBEMUZBQUZBOEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/MiXBJrQV9CBkirctQLncaxQuIlFwJm91o/yeMw5Vs8TyfLfG
arKPw0suGBhYFvzfuNqsXQn7EgK6+o34SOtGKISLx1OgVd4o5+kPYUQCx/EGr2uK
mNiizpET4UwVM9+Z00wnBbcSdwKEgU2uejPv9hORCjUeRaYH36byYh5RLzsviQXN
LLnd3zH4dpHWwabRc1eNcTlNxb365PSjQtIJcpOVfMp04nHxZ/CU6pUbiZ5gg9hA
CLVc/xwMA2674wPpif0s2NrwNOk8lh5kMpaiwLyoy2PNDn0N/h7iGeY9tWlQ9wTe
dyefM9C2Rr8lfjT2NqRZywBA3eUwwrVung7ZAgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUlMWThKoYUI1R1O5x+pwwDR+q+owwHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMvbE1XVGhLb1lVSTFS
MU81eC1wd3dEUi1xLW93LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAEMMMm7o
ZAm8wxW8jhcdIhhNEQfmi541nPfMpxHDUxS8GiahWySlgWS8tM2Bx+u6GYyL3XHC
dEG4zsUOvxii6hwbCQgg+G62TOSAaPywgSm6VTRXTyu8p7C5MiClfkjJYe9fxZWY
Ua9ZX7AtMU+eadA/1obTM7rEY+vTz0bz+ZlY7ZroyypUWLuZXyPriB2ea+tSN71G
ikke3MUr4rRJbDaI0UQDo0HqsTN832y1dcFqq5I/DtC+FCE3PcLH/KObdfVKvUZO
3QQOPS3EQymDLTz8jCKN7Jg1fTz+3CLO2RY5W/o+n8BQqcu6qzazAXH/kFBwoSaX
43bwyqq9KBhR/Fg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:24 2024 by rpki-client on console-ams.rpki-client.org