Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/SQsbqKIRA_1fsQJ4qL8fWRnLmw4.roa
File:                     SQsbqKIRA_1fsQJ4qL8fWRnLmw4.roa (raw, json)
Hash identifier:          9x1AlstXhlcKYF80Uqe3piwoEC5Bf7jhSPuvjqRRNBM=
Subject key identifier:   49:0B:1B:A8:A2:11:03:FD:5F:B1:02:78:A8:BF:1F:59:19:CB:9B:0E
Certificate issuer:       /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial:       0846
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/SQsbqKIRA_1fsQJ4qL8fWRnLmw4.roa
Signing time:             Wed 14 Jun 2023 04:24:06 +0000
ROA not before:           Wed 14 Jun 2023 04:24:06 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     4842
IP address blocks:        43.250.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
        Validity
            Not Before: Jun 14 04:24:06 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=490B1BA8A21103FD5FB10278A8BF1F5919CB9B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:ec:66:20:96:a6:02:1a:22:4f:95:fd:c2:
                    30:12:07:4c:b6:41:7e:7e:27:09:eb:2f:08:2c:93:
                    3f:97:5e:4e:ef:a3:6b:41:97:6b:65:a2:5e:8b:3c:
                    a4:1d:99:2e:78:6b:e6:b7:d6:c3:a9:d2:17:fe:c0:
                    a0:5f:08:37:e1:f7:58:af:9d:e1:44:7d:e1:98:aa:
                    08:20:24:eb:88:6f:70:7b:f2:ad:7c:d3:24:4b:10:
                    99:33:ba:59:cd:f4:ea:4e:29:f0:b8:c4:ae:d5:f4:
                    56:71:26:f9:7f:2c:11:82:80:d9:f9:52:dd:6d:f0:
                    e3:fb:c0:c2:d6:35:8c:14:35:4d:48:12:16:b0:e0:
                    53:b4:9d:00:74:c0:ca:e7:d7:1f:0a:b3:64:07:8a:
                    4d:70:15:53:87:22:9b:c4:98:e3:93:3d:e5:3a:7d:
                    1e:71:52:3a:9f:b3:1b:10:30:f3:71:7e:39:82:6c:
                    7b:19:b2:70:c4:06:3f:ce:fe:15:7c:83:be:73:3a:
                    fc:1d:0f:c3:1c:bb:cf:11:fc:61:f5:be:f0:ad:19:
                    c5:09:f6:e9:04:7d:99:d8:d4:cd:dd:54:25:08:7f:
                    c0:cd:cc:af:9e:bb:10:78:2d:15:f0:f4:e6:5b:c4:
                    11:e9:ad:e7:26:79:b2:49:42:7b:12:43:b3:23:fa:
                    62:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:0B:1B:A8:A2:11:03:FD:5F:B1:02:78:A8:BF:1F:59:19:CB:9B:0E
            X509v3 Authority Key Identifier:
                keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/SQsbqKIRA_1fsQJ4qL8fWRnLmw4.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:c5:bd:92:58:68:89:e0:a3:00:3f:34:a8:87:2f:42:89:7b:
         46:af:7b:9f:08:06:d0:27:83:59:d7:4a:5f:82:ea:08:48:88:
         f0:92:54:78:a6:bc:53:f3:e8:f2:98:f1:9b:4c:46:63:82:13:
         57:c2:13:a2:f5:62:20:c7:fa:68:ca:b1:94:9a:a3:ad:00:d8:
         db:bb:08:ec:cd:d8:b9:55:b2:62:ba:d5:1d:09:7d:2b:5d:db:
         f6:a1:32:bf:2d:bf:09:86:ec:c9:56:a2:55:0f:b0:7f:eb:a2:
         83:97:00:82:56:d3:45:76:cd:88:ac:d1:84:7c:d0:c5:a4:d1:
         b6:e3:b4:d7:c8:39:21:ef:f5:7e:c2:1e:a2:47:49:f7:cd:1e:
         96:fa:56:73:33:56:0b:02:b5:88:33:22:e9:ce:5f:3c:bc:7f:
         72:8b:00:0c:de:e7:64:f9:a1:da:bc:fb:67:75:5f:6c:c9:09:
         80:a0:2f:f0:9b:ba:85:d4:6f:04:97:62:98:dd:f4:a0:cb:fb:
         0f:fd:61:8c:e3:29:35:20:5a:a4:8c:b3:c2:b8:b7:ce:24:43:
         90:b4:3f:40:b1:ca:cb:4c:a1:c7:11:16:3f:09:41:6f:5e:59:
         7a:b2:f1:96:86:7e:47:2c:47:b1:53:63:f1:d2:3d:b0:cd:92:
         c0:e7:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:15:59 2024 by rpki-client on console-fra.rpki-client.org