Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/r_lN33jB236HFukFqb_bgTRdQ3I.roa
File:                     r_lN33jB236HFukFqb_bgTRdQ3I.roa (raw, json)
Hash identifier:          OjJX/bwNoVHEJMFvIXF7X273p1XAFjYtHmefmd4J4co=
Subject key identifier:   AF:F9:4D:DF:78:C1:DB:7E:87:16:E9:05:A9:BF:DB:81:34:5D:43:72
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       12CF
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/r_lN33jB236HFukFqb_bgTRdQ3I.roa
Signing time:             Thu 27 Oct 2022 17:02:54 +0000
ROA not before:           Thu 27 Oct 2022 17:02:54 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4815 (0x12cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 27 17:02:54 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=AFF94DDF78C1DB7E8716E905A9BFDB81345D4372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c5:56:3e:41:30:49:94:f3:91:0d:63:6b:81:
                    4b:41:dc:d9:08:69:a0:82:da:6e:aa:48:e4:f6:99:
                    03:97:0b:ba:61:e8:c8:f1:13:e1:47:1e:29:f6:48:
                    7f:c9:8d:17:a8:56:05:7f:18:07:e0:a5:51:0a:22:
                    ea:38:47:62:7a:10:49:ca:2f:a3:08:dc:bc:30:b3:
                    2c:62:36:2a:2f:aa:97:59:2b:b0:50:08:6d:ed:3e:
                    71:48:b1:b5:dd:fb:96:f9:2d:34:62:e8:9d:98:8e:
                    48:58:e3:1b:65:81:1d:92:e5:7c:1d:77:35:80:ec:
                    0a:d6:79:5f:51:c5:0c:c8:9b:99:36:30:fa:95:96:
                    09:88:03:ec:a8:7e:1e:1a:bf:9b:1e:31:4e:a0:4c:
                    29:cc:1f:b4:4e:85:35:17:e7:16:31:45:dc:ed:52:
                    0b:dc:99:a4:2b:1d:ea:7d:27:f9:9b:19:fc:e4:0f:
                    76:58:6b:f0:79:3e:b7:8f:8f:85:1d:c9:d4:97:cd:
                    5d:01:d1:e0:ad:3e:c5:ab:55:54:ee:39:93:78:6a:
                    e7:e4:d2:e3:03:c6:b3:44:9b:c6:c1:49:da:da:a1:
                    58:3a:d6:25:41:06:ac:36:58:1d:86:53:3c:d2:80:
                    58:e8:46:e0:b2:eb:a3:89:ef:89:05:9d:3d:39:05:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F9:4D:DF:78:C1:DB:7E:87:16:E9:05:A9:BF:DB:81:34:5D:43:72
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/r_lN33jB236HFukFqb_bgTRdQ3I.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         64:8f:b8:7d:8f:d9:83:44:18:21:be:8e:40:ea:4f:ac:82:52:
         6c:fa:2a:a1:ea:8e:97:d8:5a:e1:8a:47:ae:09:bf:43:1e:e3:
         11:d2:ea:a9:02:cb:61:cb:1a:df:62:4f:8f:74:15:1b:cd:a0:
         2f:59:05:e0:cd:46:8a:73:e1:4e:5e:92:f3:42:38:e1:ff:0d:
         f3:90:f9:33:8c:ed:ec:ef:6f:9b:9f:30:7c:42:b5:b3:84:6f:
         94:0a:78:7d:dc:57:b9:6c:6f:57:12:25:b2:7a:77:15:f3:f2:
         4f:6d:15:9e:46:29:fd:ef:7b:cc:30:78:98:77:ef:06:15:a1:
         cf:6e:a5:f0:7c:98:6d:32:08:82:a8:e3:ef:f5:e5:55:bd:5c:
         ba:b8:a0:61:19:0d:97:74:ae:7d:4f:43:c4:7a:75:83:5d:d8:
         39:16:c6:29:1c:30:8d:2a:d5:8f:5e:04:3f:50:dd:db:92:24:
         21:f8:a1:59:f6:d4:f5:9b:b6:b3:63:90:d3:b7:86:a8:7c:57:
         1e:3b:7d:1f:e4:97:33:45:a4:54:26:23:49:01:e2:58:dd:2c:
         2f:87:b9:40:d0:af:a6:bf:f6:5e:22:c7:12:c4:9a:7f:13:5b:
         8c:ae:77:e3:96:b3:69:8b:b1:c6:7b:69:1b:b3:b5:e1:27:0d:
         06:8e:01:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-ams.rpki-client.org