Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/1663/ymc6a_KhnNQDUsVp27axspkZats.roa
File:                     ymc6a_KhnNQDUsVp27axspkZats.roa (raw, json)
Hash identifier:          OEZjRz1kTQPBouQ4Y/Vwde3QaAHPmj48Ozh2lvWnBm4=
Subject key identifier:   CA:67:3A:6B:F2:A1:9C:D4:03:52:C5:69:DB:B6:B1:B2:99:19:6A:DB
Certificate issuer:       /CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
Certificate serial:       0DDF
Authority key identifier: 8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ymc6a_KhnNQDUsVp27axspkZats.roa
Signing time:             Fri 14 Oct 2022 13:14:09 +0000
ROA not before:           Fri 14 Oct 2022 13:14:09 +0000
ROA not after:            Mon 28 Aug 2023 04:15:34 +0000
asID:                     63612
IP address blocks:        43.226.112.0/22 maxlen: 24
                          43.226.112.0/24 maxlen: 24
                          43.226.113.0/24 maxlen: 24
                          43.226.114.0/24 maxlen: 24
                          43.226.115.0/24 maxlen: 24
                          43.227.56.0/21 maxlen: 24
                          43.227.56.0/24 maxlen: 24
                          43.227.57.0/24 maxlen: 24
                          43.227.58.0/24 maxlen: 24
                          43.227.59.0/24 maxlen: 24
                          43.227.60.0/24 maxlen: 24
                          43.227.61.0/24 maxlen: 24
                          43.227.62.0/24 maxlen: 24
                          43.227.63.0/24 maxlen: 24
                          43.248.104.0/22 maxlen: 24
                          43.248.104.0/24 maxlen: 24
                          43.248.105.0/24 maxlen: 24
                          43.248.106.0/24 maxlen: 24
                          43.248.107.0/24 maxlen: 24
                          43.248.120.0/21 maxlen: 24
                          43.248.120.0/24 maxlen: 24
                          43.248.121.0/24 maxlen: 24
                          43.248.122.0/24 maxlen: 24
                          43.248.123.0/24 maxlen: 24
                          43.248.124.0/24 maxlen: 24
                          43.248.125.0/24 maxlen: 24
                          43.248.126.0/24 maxlen: 24
                          43.248.127.0/24 maxlen: 24
                          43.248.144.0/22 maxlen: 24
                          43.248.144.0/24 maxlen: 24
                          43.248.145.0/24 maxlen: 24
                          43.248.146.0/24 maxlen: 24
                          43.248.147.0/24 maxlen: 24
                          43.248.208.0/22 maxlen: 24
                          43.248.208.0/24 maxlen: 24
                          43.248.209.0/24 maxlen: 24
                          43.248.210.0/24 maxlen: 24
                          43.248.211.0/24 maxlen: 24
                          103.40.16.0/20 maxlen: 24
                          103.40.16.0/24 maxlen: 24
                          103.40.17.0/24 maxlen: 24
                          103.40.18.0/24 maxlen: 24
                          103.40.19.0/24 maxlen: 24
                          103.40.20.0/24 maxlen: 24
                          103.40.21.0/24 maxlen: 24
                          103.40.22.0/24 maxlen: 24
                          103.40.23.0/24 maxlen: 24
                          103.40.24.0/24 maxlen: 24
                          103.40.25.0/24 maxlen: 24
                          103.40.26.0/24 maxlen: 24
                          103.40.27.0/24 maxlen: 24
                          103.40.28.0/24 maxlen: 24
                          103.40.29.0/24 maxlen: 24
                          103.40.30.0/24 maxlen: 24
                          103.40.31.0/24 maxlen: 24
                          103.40.32.0/20 maxlen: 24
                          103.40.32.0/24 maxlen: 24
                          103.40.33.0/24 maxlen: 24
                          103.40.34.0/24 maxlen: 24
                          103.40.35.0/24 maxlen: 24
                          103.40.36.0/24 maxlen: 24
                          103.40.37.0/24 maxlen: 24
                          103.40.38.0/24 maxlen: 24
                          103.40.39.0/24 maxlen: 24
                          103.40.40.0/24 maxlen: 24
                          103.40.41.0/24 maxlen: 24
                          103.40.42.0/24 maxlen: 24
                          103.40.43.0/24 maxlen: 24
                          103.40.44.0/24 maxlen: 24
                          103.40.45.0/24 maxlen: 24
                          103.40.46.0/24 maxlen: 24
                          103.40.47.0/24 maxlen: 24
                          103.45.0.0/24 maxlen: 24
                          103.45.1.0/24 maxlen: 24
                          103.45.2.0/24 maxlen: 24
                          103.45.3.0/24 maxlen: 24
                          103.45.4.0/24 maxlen: 24
                          103.45.5.0/24 maxlen: 24
                          103.45.6.0/24 maxlen: 24
                          103.45.7.0/24 maxlen: 24
                          103.45.8.0/24 maxlen: 24
                          103.45.9.0/24 maxlen: 24
                          103.45.10.0/24 maxlen: 24
                          103.45.11.0/24 maxlen: 24
                          103.45.12.0/24 maxlen: 24
                          103.45.13.0/24 maxlen: 24
                          103.45.14.0/24 maxlen: 24
                          103.45.15.0/24 maxlen: 24
                          103.45.16.0/24 maxlen: 24
                          103.45.17.0/24 maxlen: 24
                          103.45.18.0/24 maxlen: 24
                          103.45.19.0/24 maxlen: 24
                          103.45.20.0/24 maxlen: 24
                          103.45.21.0/24 maxlen: 24
                          103.45.22.0/24 maxlen: 24
                          103.45.23.0/24 maxlen: 24
                          103.45.24.0/24 maxlen: 24
                          103.45.25.0/24 maxlen: 24
                          103.45.26.0/24 maxlen: 24
                          103.45.27.0/24 maxlen: 24
                          103.45.28.0/24 maxlen: 24
                          103.45.29.0/24 maxlen: 24
                          103.45.30.0/24 maxlen: 24
                          103.45.31.0/24 maxlen: 24
                          103.45.32.0/24 maxlen: 24
                          103.45.33.0/24 maxlen: 24
                          103.45.34.0/24 maxlen: 24
                          103.45.35.0/24 maxlen: 24
                          103.45.36.0/24 maxlen: 24
                          103.45.37.0/24 maxlen: 24
                          103.45.38.0/24 maxlen: 24
                          103.45.39.0/24 maxlen: 24
                          103.45.40.0/24 maxlen: 24
                          103.45.41.0/24 maxlen: 24
                          103.45.42.0/24 maxlen: 24
                          103.45.43.0/24 maxlen: 24
                          103.45.44.0/24 maxlen: 24
                          103.45.45.0/24 maxlen: 24
                          103.45.46.0/24 maxlen: 24
                          103.45.47.0/24 maxlen: 24
                          103.45.48.0/24 maxlen: 24
                          103.45.49.0/24 maxlen: 24
                          103.45.50.0/24 maxlen: 24
                          103.45.51.0/24 maxlen: 24
                          103.45.52.0/24 maxlen: 24
                          103.45.53.0/24 maxlen: 24
                          103.45.54.0/24 maxlen: 24
                          103.45.55.0/24 maxlen: 24
                          103.45.56.0/24 maxlen: 24
                          103.45.57.0/24 maxlen: 24
                          103.45.58.0/24 maxlen: 24
                          103.45.59.0/24 maxlen: 24
                          103.45.60.0/24 maxlen: 24
                          103.45.61.0/24 maxlen: 24
                          103.45.62.0/24 maxlen: 24
                          103.45.63.0/24 maxlen: 24
                          103.45.96.0/19 maxlen: 24
                          103.45.96.0/24 maxlen: 24
                          103.45.97.0/24 maxlen: 24
                          103.45.98.0/24 maxlen: 24
                          103.45.99.0/24 maxlen: 24
                          103.45.100.0/24 maxlen: 24
                          103.45.101.0/24 maxlen: 24
                          103.45.102.0/24 maxlen: 24
                          103.45.103.0/24 maxlen: 24
                          103.45.104.0/24 maxlen: 24
                          103.45.105.0/24 maxlen: 24
                          103.45.106.0/24 maxlen: 24
                          103.45.107.0/24 maxlen: 24
                          103.45.108.0/24 maxlen: 24
                          103.45.109.0/24 maxlen: 24
                          103.45.110.0/24 maxlen: 24
                          103.45.111.0/24 maxlen: 24
                          103.45.112.0/24 maxlen: 24
                          103.45.113.0/24 maxlen: 24
                          103.45.114.0/24 maxlen: 24
                          103.45.115.0/24 maxlen: 24
                          103.45.116.0/24 maxlen: 24
                          103.45.117.0/24 maxlen: 24
                          103.45.118.0/24 maxlen: 24
                          103.45.119.0/24 maxlen: 24
                          103.45.120.0/24 maxlen: 24
                          103.45.121.0/24 maxlen: 24
                          103.45.122.0/24 maxlen: 24
                          103.45.123.0/24 maxlen: 24
                          103.45.124.0/24 maxlen: 24
                          103.45.125.0/24 maxlen: 24
                          103.45.126.0/24 maxlen: 24
                          103.45.127.0/24 maxlen: 24
                          103.45.128.0/19 maxlen: 24
                          103.45.128.0/24 maxlen: 24
                          103.45.129.0/24 maxlen: 24
                          103.45.130.0/24 maxlen: 24
                          103.45.131.0/24 maxlen: 24
                          103.45.132.0/24 maxlen: 24
                          103.45.133.0/24 maxlen: 24
                          103.45.134.0/24 maxlen: 24
                          103.45.135.0/24 maxlen: 24
                          103.45.136.0/24 maxlen: 24
                          103.45.137.0/24 maxlen: 24
                          103.45.138.0/24 maxlen: 24
                          103.45.139.0/24 maxlen: 24
                          103.45.140.0/24 maxlen: 24
                          103.45.141.0/24 maxlen: 24
                          103.45.142.0/24 maxlen: 24
                          103.45.143.0/24 maxlen: 24
                          103.45.144.0/24 maxlen: 24
                          103.45.145.0/24 maxlen: 24
                          103.45.146.0/24 maxlen: 24
                          103.45.147.0/24 maxlen: 24
                          103.45.148.0/24 maxlen: 24
                          103.45.149.0/24 maxlen: 24
                          103.45.150.0/24 maxlen: 24
                          103.45.151.0/24 maxlen: 24
                          103.45.152.0/24 maxlen: 24
                          103.45.153.0/24 maxlen: 24
                          103.45.154.0/24 maxlen: 24
                          103.45.155.0/24 maxlen: 24
                          103.45.156.0/24 maxlen: 24
                          103.45.157.0/24 maxlen: 24
                          103.45.158.0/24 maxlen: 24
                          103.45.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3551 (0xddf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AE4CF78B49DF0B2C1D29D32E48A943AE4F41ACC
        Validity
            Not Before: Oct 14 13:14:09 2022 GMT
            Not After : Aug 28 04:15:34 2023 GMT
        Subject: CN=CA673A6BF2A19CD40352C569DBB6B1B299196ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1d:63:7d:da:67:a3:59:32:e4:f8:ad:ca:0b:
                    d4:e4:39:18:0a:32:c3:5d:f1:95:6c:e4:91:f1:80:
                    1d:c0:e3:26:ad:30:85:dd:43:90:e7:ca:62:b2:62:
                    e9:2e:30:8e:90:9e:00:14:72:9d:f1:a9:ab:5a:43:
                    fa:d8:70:26:24:e4:53:31:92:4c:2a:12:3a:2b:e1:
                    20:37:ef:a3:d4:7f:a6:f8:3b:21:a7:6e:69:f4:e2:
                    ae:25:5b:eb:c2:2f:c4:8d:62:43:58:b9:17:b7:ed:
                    cb:9a:7c:90:f9:e3:e0:dd:88:a4:32:26:2b:15:e0:
                    56:62:94:50:4f:b4:15:56:c9:4a:23:00:2e:87:fc:
                    39:3f:73:18:cd:91:06:b3:5f:99:04:85:ac:8c:19:
                    14:31:bb:d8:3d:e1:5d:dc:05:82:9c:30:bf:a1:e1:
                    f0:47:82:13:ec:f7:ec:56:47:a4:ae:c0:4d:10:c1:
                    50:d9:bf:d9:5f:b0:65:10:a7:32:ad:0b:c3:c1:f2:
                    68:b3:6a:a0:27:d9:02:e2:ab:81:40:cc:a8:7a:4d:
                    4e:43:ab:a3:df:9c:fb:08:93:97:2b:5e:ed:70:cd:
                    26:54:9d:f0:02:1f:f2:c8:ff:15:4d:dc:58:bd:e9:
                    d1:40:45:84:36:70:68:5b:a0:ce:1d:8b:51:69:9c:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:67:3A:6B:F2:A1:9C:D4:03:52:C5:69:DB:B6:B1:B2:99:19:6A:DB
            X509v3 Authority Key Identifier:
                keyid:8A:E4:CF:78:B4:9D:F0:B2:C1:D2:9D:32:E4:8A:94:3A:E4:F4:1A:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/iuTPeLSd8LLB0p0y5IqUOuT0Gsw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1663/ymc6a_KhnNQDUsVp27axspkZats.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.112.0/22
                  43.227.56.0/21
                  43.248.104.0/22
                  43.248.120.0/21
                  43.248.144.0/22
                  43.248.208.0/22
                  103.40.16.0-103.40.47.255
                  103.45.0.0/18
                  103.45.96.0-103.45.159.255

    Signature Algorithm: sha256WithRSAEncryption
         72:14:f6:7b:61:32:e7:cc:90:ee:47:b5:95:7a:b6:4a:b5:31:
         a2:e1:4c:fd:02:e4:79:fc:5f:e0:4a:f0:ba:d5:e0:15:ed:ec:
         a0:d3:b9:82:e7:14:4e:1b:88:28:9f:44:d3:7d:85:8f:61:a4:
         b0:08:3b:5f:c2:4c:a0:70:61:3d:f3:8c:f1:50:8b:93:17:bc:
         40:c6:08:16:f0:0d:05:34:31:4f:7f:9a:42:63:07:35:6c:09:
         6d:6d:43:d9:25:25:91:6d:02:cb:2e:60:ff:e6:1e:36:27:da:
         51:59:13:c9:1b:fa:60:86:50:6f:a0:0c:94:e5:8b:a5:28:2e:
         f8:c9:ad:b5:ef:70:9b:38:28:a4:5b:43:20:05:1a:58:0e:48:
         3a:a1:9c:c9:8c:e3:75:8f:aa:8c:9e:7b:bf:30:e5:4f:82:86:
         7c:2d:b7:18:42:46:d8:11:55:41:d4:28:1a:54:ba:05:e1:0a:
         bb:81:5c:fa:c4:c7:61:12:50:27:09:71:4a:03:83:f5:b3:44:
         36:9d:81:5d:9f:61:a7:ce:94:ae:15:61:71:c6:c9:36:53:d2:
         25:25:5b:d1:64:41:38:27:12:e5:32:13:fc:25:40:70:88:d1:
         27:47:f6:0c:9b:cb:6d:ec:8c:54:5b:3b:0d:38:cc:c8:a8:68:
         4a:12:4b:61
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgICDd8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOEFF
NENGNzhCNDlERjBCMkMxRDI5RDMyRTQ4QTk0M0FFNEY0MUFDQzAeFw0yMjEwMTQx
MzE0MDlaFw0yMzA4MjgwNDE1MzRaMDMxMTAvBgNVBAMTKENBNjczQTZCRjJBMTlD
RDQwMzUyQzU2OURCQjZCMUIyOTkxOTZBREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6HWN92mejWTLk+K3KC9TkORgKMsNd8ZVs5JHxgB3A4yatMIXd
Q5DnymKyYukuMI6QngAUcp3xqataQ/rYcCYk5FMxkkwqEjor4SA376PUf6b4OyGn
bmn04q4lW+vCL8SNYkNYuRe37cuafJD54+DdiKQyJisV4FZilFBPtBVWyUojAC6H
/Dk/cxjNkQazX5kEhayMGRQxu9g94V3cBYKcML+h4fBHghPs9+xWR6SuwE0QwVDZ
v9lfsGUQpzKtC8PB8mizaqAn2QLiq4FAzKh6TU5Dq6PfnPsIk5crXu1wzSZUnfAC
H/LI/xVN3Fi96dFARYQ2cGhboM4di1FpnDE3AgMBAAGjggIzMIICLzAdBgNVHQ4E
FgQUymc6a/KhnNQDUsVp27axspkZatswHwYDVR0jBBgwFoAUiuTPeLSd8LLB0p0y
5IqUOuT0GswwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMTY2
My9pdVRQZUxTZDhMTEIwcDB5NUlxVU91VDBHc3cuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL2l1VFBlTFNkOExMQjBwMHk1SXFVT3VUMEdzdy5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzE2NjMveW1jNmFfS2huTlFE
VXNWcDI3YXhzcGtaYXRzLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDBfBggrBgEFBQcBBwEB/wRQME4wTAQCAAEw
RgMEAivicAMEAyvjOAMEAiv4aAMEAyv4eAMEAiv4kAMEAiv40DAMAwQEZygQAwQE
ZyggAwQGZy0AMAwDBAVnLWADBAVnLYAwDQYJKoZIhvcNAQELBQADggEBAHIU9nth
MufMkO5HtZV6tkq1MaLhTP0C5Hn8X+BK8LrV4BXt7KDTuYLnFE4biCifRNN9hY9h
pLAIO1/CTKBwYT3zjPFQi5MXvEDGCBbwDQU0MU9/mkJjBzVsCW1tQ9klJZFtAssu
YP/mHjYn2lFZE8kb+mCGUG+gDJTli6UoLvjJrbXvcJs4KKRbQyAFGlgOSDqhnMmM
43WPqoyee78w5U+ChnwttxhCRtgRVUHUKBpUugXhCruBXPrEx2ESUCcJcUoDg/Wz
RDadgV2fYafOlK4VYXHGyTZT0iUlW9FkQTgnEuUyE/wlQHCI0SdH9gyby23sjFRb
Ow04zMioaEoSS2E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org