Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/q3OHiJKwDrBYWRJrKS95uH0-Irk.roa
File:                     q3OHiJKwDrBYWRJrKS95uH0-Irk.roa (raw, json)
Hash identifier:          RjHVkZIKvs1GuSiPrV34vBDwkdjEOZNxC4SH8uuuxyo=
Subject key identifier:   AB:73:87:88:92:B0:0E:B0:58:59:12:6B:29:2F:79:B8:7D:3E:22:B9
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       1447
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/q3OHiJKwDrBYWRJrKS95uH0-Irk.roa
Signing time:             Mon 31 Oct 2022 14:33:00 +0000
ROA not before:           Mon 31 Oct 2022 14:33:00 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5191 (0x1447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 31 14:33:00 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=AB73878892B00EB05859126B292F79B87D3E22B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:93:4b:64:fd:14:4d:70:f4:13:e2:c5:09:50:
                    2d:6b:92:d8:78:91:94:79:1c:0b:25:36:0c:69:0c:
                    4a:01:12:19:17:68:81:65:ec:24:04:b0:0d:ea:38:
                    0d:0e:dc:2a:b7:c6:b5:33:6e:f7:db:da:f2:ea:38:
                    a6:c1:c1:9c:25:a8:a4:f6:0b:32:ea:36:f5:94:6e:
                    4d:45:b3:13:f3:0d:bc:17:e1:9b:7e:0e:c3:69:d1:
                    b4:60:40:6c:85:e5:52:1d:45:06:01:83:a7:43:66:
                    94:31:14:3a:bf:b1:8d:40:6c:e0:07:36:27:a1:81:
                    50:53:0f:83:41:d1:d2:66:e9:4c:25:81:f9:88:c8:
                    00:f2:86:f2:d5:a3:26:0e:98:56:30:9d:78:4e:d3:
                    ed:55:31:77:d9:65:aa:bf:ee:e9:ec:07:cf:21:9e:
                    8b:78:ff:9a:8d:e0:69:e8:46:d7:4a:55:45:5f:85:
                    e3:e9:74:64:92:15:96:3b:38:5f:1c:53:33:39:b4:
                    1e:64:ab:bf:bd:5c:9b:fd:17:3c:72:d9:9b:a4:fb:
                    2c:17:18:87:4d:a3:32:e7:eb:35:fb:72:38:6b:8c:
                    b6:92:43:66:bb:fe:1e:16:4e:bc:9e:83:ba:cc:26:
                    e8:18:1a:7a:bd:b9:91:cb:4f:75:03:0b:e1:0e:21:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:73:87:88:92:B0:0E:B0:58:59:12:6B:29:2F:79:B8:7D:3E:22:B9
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/q3OHiJKwDrBYWRJrKS95uH0-Irk.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         06:82:c1:f6:23:62:3f:d4:1d:51:81:33:40:25:3c:56:8b:58:
         e0:c8:cf:e7:6f:63:fd:8c:3e:9b:a0:aa:cc:b0:5a:92:75:55:
         a9:0e:48:da:7d:fb:22:ce:b9:a5:bd:97:41:cd:ba:16:86:c1:
         ea:44:62:d5:44:3e:ab:75:a4:ea:8b:bd:4b:3a:75:61:49:46:
         03:5f:b7:a5:f9:57:aa:e3:1a:b5:d5:78:b5:2e:cf:04:89:07:
         84:b4:b0:cc:82:8c:d2:17:8d:8f:cb:ea:2d:2a:ef:ee:49:16:
         2c:c4:22:41:1b:52:a4:78:22:6c:97:99:3f:e9:39:ad:fd:cb:
         07:aa:ce:b7:84:01:e4:e3:f1:1f:d0:f7:a6:06:79:96:e4:c8:
         19:a2:c6:df:49:00:ac:ac:02:63:a9:ff:94:e8:42:a3:c3:ed:
         18:d6:4d:fc:bc:8a:92:ae:e5:ca:b2:b1:9b:49:27:3a:d5:8d:
         0f:0d:1a:12:f9:93:a8:c0:d9:6c:85:9b:bf:21:35:e9:8c:28:
         5c:40:fe:45:e2:51:3c:1d:b3:2f:47:99:9b:a1:f4:94:30:14:
         67:ee:a1:04:dc:54:cf:f5:da:1c:70:1c:08:c3:1c:e3:d5:a2:
         7a:ee:75:7f:64:4a:59:3a:d5:1a:32:ca:be:f3:ed:7f:b3:86:
         6b:94:ff:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org