Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2075/AsHx2IEymvyT3pGyalxy4_0p48w.roa
File:                     AsHx2IEymvyT3pGyalxy4_0p48w.roa (raw, json)
Hash identifier:          xgYGlXOdjrit7jD3YWczyazZA95mhyPd3PHDUDAP5qE=
Subject key identifier:   02:C1:F1:D8:81:32:9A:FC:93:DE:91:B2:6A:5C:72:E3:FD:29:E3:CC
Certificate issuer:       /CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
Certificate serial:       094A
Authority key identifier: E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/AsHx2IEymvyT3pGyalxy4_0p48w.roa
Signing time:             Tue 07 Jun 2022 02:11:22 +0000
ROA not before:           Tue 07 Jun 2022 02:11:22 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     131530
IP address blocks:        103.72.120.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E98A5958665F34A26A3DCAF94C63B33A07059A53
        Validity
            Not Before: Jun  7 02:11:22 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=02C1F1D881329AFC93DE91B26A5C72E3FD29E3CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a6:41:e0:0b:45:d8:16:ee:bd:85:47:01:e9:
                    63:5d:17:80:a2:0c:c6:61:ec:44:51:70:9f:ef:aa:
                    30:11:8d:ef:f8:91:d0:fb:6c:26:d9:91:cb:05:d7:
                    1a:f6:14:f5:62:a3:0c:9b:28:1a:54:b5:9b:cb:d7:
                    49:06:c8:3f:f2:16:c0:a3:03:0d:be:e3:fb:65:56:
                    7e:4c:9c:9c:ed:38:51:b2:60:74:f5:e8:60:35:74:
                    3c:03:7f:ff:a8:48:dc:7a:91:1b:15:c1:41:07:d6:
                    dd:36:3d:e1:a5:ab:aa:26:94:81:71:c6:79:7d:fe:
                    73:be:61:03:44:f9:3b:bd:61:f2:a6:a1:7a:66:ab:
                    13:48:30:78:09:13:04:88:1c:26:a6:59:d7:d2:d0:
                    99:36:8a:de:69:8c:ac:28:46:be:d1:1f:d7:c2:3c:
                    33:49:39:93:3c:b6:13:16:02:94:87:ca:9b:50:1b:
                    dd:2b:39:ab:34:c8:cc:ea:a2:bc:d7:3f:17:df:a8:
                    d1:21:cd:8c:f6:11:e0:46:5f:a0:0c:2c:d9:49:04:
                    91:c9:f0:a5:32:ae:cd:1c:4c:80:b8:16:b2:e5:07:
                    5d:5a:36:05:54:87:8b:6c:89:32:87:b7:53:dd:8a:
                    c4:c9:d0:ae:23:c5:9f:a6:71:df:83:f1:53:78:b2:
                    e1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C1:F1:D8:81:32:9A:FC:93:DE:91:B2:6A:5C:72:E3:FD:29:E3:CC
            X509v3 Authority Key Identifier:
                keyid:E9:8A:59:58:66:5F:34:A2:6A:3D:CA:F9:4C:63:B3:3A:07:05:9A:53

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/6YpZWGZfNKJqPcr5TGOzOgcFmlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/6YpZWGZfNKJqPcr5TGOzOgcFmlM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2075/AsHx2IEymvyT3pGyalxy4_0p48w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:77:2e:1e:f8:d9:9c:f2:82:ca:31:e0:b0:f3:b4:0d:06:0d:
         5f:63:65:7d:e7:c8:05:fb:c4:7b:d5:e5:6c:55:43:c5:aa:19:
         0c:c0:4e:49:3f:4d:a2:60:0f:48:40:bd:73:2c:71:a5:f8:41:
         b7:27:a1:90:0a:e9:40:ba:33:56:50:fc:34:c7:e4:ec:ac:d0:
         d6:c7:1e:91:23:7b:1a:b6:74:d7:19:73:dc:ea:95:3d:6d:29:
         c9:11:a5:b8:03:17:24:e3:63:81:43:8e:d1:56:80:0a:79:8b:
         bb:92:69:ef:a4:58:21:98:37:30:36:2f:26:fb:75:40:d4:73:
         ad:5a:23:22:a1:c9:fa:35:59:79:92:05:f3:29:f9:3d:64:c4:
         a4:1b:b0:a3:3e:8f:0c:1d:30:cc:d1:11:36:f5:96:08:9d:7b:
         91:6f:b7:99:6a:80:f8:5c:e5:49:4c:ab:ef:09:a0:5f:e4:07:
         ac:a0:9a:88:a3:41:d1:fa:1b:c9:47:a3:57:93:19:33:c6:4f:
         12:ae:74:bd:59:fa:a5:05:05:3c:a6:17:70:c2:cd:05:1b:ca:
         e5:cb:1d:8c:e2:46:0d:77:d6:a1:54:76:21:8b:2c:5f:00:49:
         4c:70:79:ec:a7:51:0a:a4:cf:e1:40:76:5d:de:45:0c:13:76:
         fb:84:94:d4
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICCUowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRTk4
QTU5NTg2NjVGMzRBMjZBM0RDQUY5NEM2M0IzM0EwNzA1OUE1MzAeFw0yMjA2MDcw
MjExMjJaFw0yMzA2MDIwNTMwMjZaMDMxMTAvBgNVBAMTKDAyQzFGMUQ4ODEzMjlB
RkM5M0RFOTFCMjZBNUM3MkUzRkQyOUUzQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCrpkHgC0XYFu69hUcB6WNdF4CiDMZh7ERRcJ/vqjARje/4kdD7
bCbZkcsF1xr2FPViowybKBpUtZvL10kGyD/yFsCjAw2+4/tlVn5MnJztOFGyYHT1
6GA1dDwDf/+oSNx6kRsVwUEH1t02PeGlq6omlIFxxnl9/nO+YQNE+Tu9YfKmoXpm
qxNIMHgJEwSIHCamWdfS0Jk2it5pjKwoRr7RH9fCPDNJOZM8thMWApSHyptQG90r
Oas0yMzqorzXPxffqNEhzYz2EeBGX6AMLNlJBJHJ8KUyrs0cTIC4FrLlB11aNgVU
h4tsiTKHt1PdisTJ0K4jxZ+mcd+D8VN4suHDAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUAsHx2IEymvyT3pGyalxy4/0p48wwHwYDVR0jBBgwFoAU6YpZWGZfNKJqPcr5
TGOzOgcFmlMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjA3
NS82WXBaV0daZk5LSnFQY3I1VEdPek9nY0ZtbE0uY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwLzZZcFpXR1pmTktKcVBjcjVUR096T2djRm1sTS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzIwNzUvQXNIeDJJRXltdnlU
M3BHeWFseHk0XzBwNDh3LnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdIeDANBgkqhkiG9w0BAQsFAAOCAQEAcncuHvjZnPKCyjHgsPO0DQYNX2Nl
fefIBfvEe9XlbFVDxaoZDMBOST9NomAPSEC9cyxxpfhBtyehkArpQLozVlD8NMfk
7KzQ1scekSN7GrZ01xlz3OqVPW0pyRGluAMXJONjgUOO0VaACnmLu5Jp76RYIZg3
MDYvJvt1QNRzrVojIqHJ+jVZeZIF8yn5PWTEpBuwoz6PDB0wzNERNvWWCJ17kW+3
mWqA+FzlSUyr7wmgX+QHrKCaiKNB0fobyUejV5MZM8ZPEq50vVn6pQUFPKYXcMLN
BRvK5csdjOJGDXfWoVR2IYssXwBJTHB57KdRCqTP4UB2Xd5FDBN2+4SU1A==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:58 2024 by rpki-client on console-fra.rpki-client.org