Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/75SKs8cFeQemUABtA70OJ-Cd8xM.roa
File:                     75SKs8cFeQemUABtA70OJ-Cd8xM.roa (raw, json)
Hash identifier:          jo0q41myRjt/7Rxrdss8c3QpqZ7RWDzWRYizb7awujU=
Subject key identifier:   EF:94:8A:B3:C7:05:79:07:A6:50:00:6D:03:BD:0E:27:E0:9D:F3:13
Certificate issuer:       /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial:       080E
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/75SKs8cFeQemUABtA70OJ-Cd8xM.roa
Signing time:             Tue 13 Jun 2023 21:24:01 +0000
ROA not before:           Tue 13 Jun 2023 21:24:01 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     4842
IP address blocks:        43.250.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
        Validity
            Not Before: Jun 13 21:24:01 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=EF948AB3C7057907A650006D03BD0E27E09DF313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:18:1e:af:32:3c:82:ae:20:2b:9e:bf:c3:1c:
                    98:77:ee:4a:ce:46:fc:a1:6d:d9:fa:32:9a:d5:45:
                    6f:56:6a:9a:db:57:66:f3:af:1f:e0:6f:29:22:5d:
                    94:cf:1d:37:2d:ff:01:56:a3:a3:a8:62:fe:54:76:
                    d2:e3:52:9a:14:5c:bb:93:c0:94:2d:21:ec:84:aa:
                    4a:31:d1:51:cb:cd:6c:55:96:16:5f:fb:fe:e5:d4:
                    e8:7e:28:7f:d5:94:8e:bd:a1:27:55:09:d7:64:e3:
                    dc:e9:ac:4a:9b:91:a2:9a:c9:69:ab:92:7f:cf:9c:
                    ce:af:40:64:2a:c3:87:fa:1e:4d:54:64:03:75:3a:
                    a7:b3:36:c0:ea:c5:e7:9a:38:6e:e1:aa:a3:98:9c:
                    64:f9:96:e6:bc:d0:61:85:46:2b:3c:bc:70:ad:c9:
                    19:b0:b2:6b:c7:6e:fd:82:4b:af:1e:cd:84:c4:bb:
                    12:b3:fd:0e:f5:02:75:63:e0:c2:da:bd:e9:08:05:
                    3e:68:d4:ce:f4:27:87:3f:03:ed:d9:cd:e3:ae:d4:
                    6a:dd:19:ac:b9:73:2c:39:e5:58:e8:18:2a:5e:00:
                    86:0b:58:7d:99:3e:6d:52:06:35:18:f4:ed:ac:33:
                    12:ed:f9:60:8f:2d:49:f7:c6:61:f5:e9:84:5f:4f:
                    d3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:94:8A:B3:C7:05:79:07:A6:50:00:6D:03:BD:0E:27:E0:9D:F3:13
            X509v3 Authority Key Identifier:
                keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/75SKs8cFeQemUABtA70OJ-Cd8xM.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:b8:6d:44:36:e5:70:92:a7:17:ff:14:65:3f:f0:41:4c:
         33:bf:4d:ce:80:a8:c3:ca:34:75:c3:5b:0c:6b:10:35:13:73:
         a9:20:52:2d:ea:8f:e1:6d:d3:99:4f:c8:7d:a5:43:e5:bd:2b:
         47:49:8d:83:2f:1f:50:8d:92:fb:61:b3:89:18:06:0e:e7:d1:
         7b:0b:32:74:8a:ad:e8:c3:22:b5:b7:96:7d:68:93:16:f9:41:
         9a:98:93:e8:0e:25:41:88:6f:ef:bd:d7:56:ed:26:c6:75:b4:
         38:42:98:7e:16:3a:bb:23:32:d5:32:2a:ed:ba:99:9a:c1:77:
         8d:c6:c4:ba:08:d9:fb:41:9a:f6:32:35:18:0b:da:66:61:42:
         3f:f4:e6:1b:f4:0d:76:2f:69:66:e1:48:ab:d3:34:06:33:ee:
         f9:72:ea:80:34:ff:2b:8d:26:85:60:53:ed:d8:29:ef:8d:7e:
         05:e9:cf:ed:83:1e:42:a4:f3:78:26:df:59:45:dd:85:b9:76:
         35:d2:26:27:73:34:ac:28:86:7b:5b:a2:9c:7a:b4:50:06:fd:
         1c:00:e1:61:2d:80:71:d1:48:a0:eb:d9:1f:94:b1:af:37:30:
         0a:b3:f8:a7:37:fa:65:39:ac:31:25:dd:70:db:33:f5:6c:43:
         51:72:f0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org