Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/wXyyGPi2oQO_0RG2mhyVa3Z-O98.roa
File:                     wXyyGPi2oQO_0RG2mhyVa3Z-O98.roa (raw, json)
Hash identifier:          JHLelJj0qGwaRQbtzsuu+IELyTOCAdsto72pqGun2I0=
Subject key identifier:   C1:7C:B2:18:F8:B6:A1:03:BF:D1:11:B6:9A:1C:95:6B:76:7E:3B:DF
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0BF7
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wXyyGPi2oQO_0RG2mhyVa3Z-O98.roa
Signing time:             Sun 09 Oct 2022 11:14:00 +0000
ROA not before:           Sun 09 Oct 2022 11:14:00 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct  9 11:14:00 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=C17CB218F8B6A103BFD111B69A1C956B767E3BDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:24:6a:3f:87:4f:f6:e7:ea:70:cc:06:57:
                    89:a1:df:ff:51:3b:3a:5e:b8:57:fe:95:8c:c2:d4:
                    3d:4a:ce:36:97:03:52:0e:96:02:30:ef:60:29:b4:
                    7e:62:d0:20:29:2d:f0:2e:fa:3d:3d:37:dd:c7:09:
                    a6:0c:d9:cd:18:e0:ff:cf:3e:4b:5e:80:bd:d7:cd:
                    78:65:7d:7f:7d:40:68:b4:64:d4:b3:9f:65:95:dd:
                    f6:f1:8c:71:73:a3:1e:d1:e5:52:1c:df:77:60:91:
                    22:7b:e6:d1:d5:3f:b0:2c:4b:5a:a9:39:0e:a6:ca:
                    cc:24:8a:65:be:85:97:28:6e:e2:e3:68:9c:14:b7:
                    60:a5:ad:49:fa:61:29:1c:7e:3d:eb:52:bb:30:ac:
                    ca:3e:fc:15:26:c1:3b:53:0c:74:4d:25:d9:62:b4:
                    19:fb:8d:05:ff:e7:26:39:7f:44:a4:fc:60:04:08:
                    17:c5:3f:3d:d6:81:b0:e7:82:4d:4f:c9:8c:c2:d0:
                    c6:42:b8:72:de:f7:50:2a:02:6e:e7:3b:a6:78:27:
                    57:89:d5:c9:72:a3:08:fb:b6:7c:57:67:6c:fa:48:
                    2d:40:7c:8c:2f:e4:cc:11:38:d8:52:3d:13:d4:28:
                    98:6a:25:b4:c4:33:5f:dc:cf:69:99:d0:62:72:9c:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7C:B2:18:F8:B6:A1:03:BF:D1:11:B6:9A:1C:95:6B:76:7E:3B:DF
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/wXyyGPi2oQO_0RG2mhyVa3Z-O98.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:be:e5:eb:20:00:45:45:ea:e8:91:1a:93:d0:1c:29:d6:
         79:90:85:e3:9a:d5:f9:0f:5b:5b:4d:bb:2c:99:9f:73:4c:e1:
         28:61:81:af:13:18:79:32:dd:e2:af:99:93:e9:ab:ce:10:d0:
         c2:6e:d1:3b:48:bb:23:22:3d:4c:f1:c3:11:26:85:87:0b:81:
         9b:ef:9f:a8:16:0b:97:0e:64:63:1d:ae:fd:73:c3:18:e1:eb:
         36:8e:50:01:c4:bf:44:83:f5:b2:1b:65:6a:38:4f:d8:22:3d:
         21:37:92:a0:00:db:54:76:d0:eb:65:c0:b5:41:bd:5c:f4:17:
         fb:28:3c:a1:85:85:c1:a0:9a:e1:4f:cd:ba:e8:0d:75:dc:6a:
         1f:b7:15:20:48:1d:e9:1c:b3:d8:80:60:cb:fa:63:8e:b4:fd:
         2e:1c:49:8f:c0:1f:6f:a5:fb:c1:8c:42:6f:fe:9b:5f:05:b5:
         d1:a7:56:de:04:37:70:c1:0c:df:40:61:a3:57:64:88:18:08:
         23:6a:c9:5e:11:a4:8c:bc:cd:eb:a8:e2:56:c7:2d:13:2d:05:
         d6:af:ed:61:59:14:97:3b:0b:a5:ab:56:7c:26:b7:e1:12:bb:
         a6:f1:b0:cc:82:6a:42:5e:74:d5:64:79:2a:67:c4:5b:d8:65:
         c2:c8:34:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:09 2023 by rpki-client on console-ams.rpki-client.org