Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
File:                     qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa (raw, json)
Hash identifier:          e/puBWEeXzBqhk8rku2mUyWkqJiYFbgu8f4Wu92pG5E=
Subject key identifier:   A9:AA:75:90:BB:26:27:E1:5E:D9:52:C1:B4:EE:42:63:74:DD:D4:42
Certificate issuer:       /CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
Certificate serial:       07AA
Authority key identifier: 07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
Signing time:             Tue 13 Jun 2023 08:54:01 +0000
ROA not before:           Tue 13 Jun 2023 08:54:01 +0000
ROA not after:            Fri 07 Jun 2024 02:16:11 +0000
asID:                     4842
IP address blocks:        43.250.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07A608409B251BCB1A6C030A1C21BA41CDBCBF56
        Validity
            Not Before: Jun 13 08:54:01 2023 GMT
            Not After : Jun  7 02:16:11 2024 GMT
        Subject: CN=A9AA7590BB2627E15ED952C1B4EE426374DDD442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:62:9f:65:15:d7:28:1c:5e:1f:fe:9e:0a:2b:
                    84:e1:71:9d:cd:57:c2:4b:3d:9e:9a:4d:ac:11:bd:
                    d8:be:7b:87:51:86:b6:c1:9c:ea:79:38:22:00:86:
                    42:8a:66:44:fa:cd:0b:5f:e2:f9:74:6b:80:37:b6:
                    22:e5:9f:45:b9:44:9e:14:99:f0:24:83:9d:12:59:
                    64:5c:50:98:fc:aa:fb:6e:09:69:2a:f0:af:db:3a:
                    9e:64:9b:3a:3a:c7:34:cc:88:0e:6c:2b:10:b1:a1:
                    ea:1c:94:11:92:7c:09:ca:14:ac:3f:3b:a1:c0:bf:
                    d3:e0:13:a4:b9:f3:e8:b7:93:b4:17:9c:1a:98:79:
                    71:91:51:86:23:a5:5f:10:75:c0:94:ef:14:c9:c4:
                    e9:62:e4:be:a1:85:fe:1f:62:55:b3:42:70:e2:c7:
                    b5:b5:a5:0b:e6:47:c5:7a:c7:e5:b9:84:e5:07:4f:
                    6b:02:eb:7f:ec:d9:31:f7:22:b0:56:23:0d:95:d8:
                    53:19:c0:c9:fc:d4:0a:e1:41:97:16:c7:c3:8c:3b:
                    37:08:1e:9d:f0:ed:b3:8a:5a:f9:c6:ef:b2:0f:82:
                    8a:4a:01:0b:c5:2c:35:48:f3:36:cf:b4:49:4f:b6:
                    57:f4:ab:0b:38:5f:f6:39:9d:77:9f:7b:fd:c8:68:
                    85:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:75:90:BB:26:27:E1:5E:D9:52:C1:B4:EE:42:63:74:DD:D4:42
            X509v3 Authority Key Identifier:
                keyid:07:A6:08:40:9B:25:1B:CB:1A:6C:03:0A:1C:21:BA:41:CD:BC:BF:56

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/B6YIQJslG8sabAMKHCG6Qc28v1Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/B6YIQJslG8sabAMKHCG6Qc28v1Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2391/qap1kLsmJ-Fe2VLBtO5CY3Td1EI.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:46:6a:d3:21:7c:c9:c5:e7:9e:ff:da:b9:97:25:79:08:e3:
         8e:a2:22:b6:a3:a0:32:d9:e2:f3:00:31:91:6b:5e:eb:35:c3:
         67:da:fb:5e:df:37:60:92:f8:1a:2e:63:85:4a:cb:6e:b8:a9:
         a2:1d:2b:b5:50:83:78:56:74:6f:99:bf:6f:1a:d8:fa:d1:cd:
         7d:3a:54:c2:cc:9a:50:79:d6:9f:cc:ba:e3:0e:0d:06:14:9d:
         28:26:80:d4:86:c8:52:7a:ef:41:e7:17:42:66:09:d6:c6:17:
         a2:d4:45:84:70:ca:a0:65:f4:1c:99:1c:b3:a3:a3:74:19:34:
         6b:15:aa:4c:4b:65:da:6b:53:d7:ee:a2:51:e9:ef:46:56:ee:
         d8:f5:d4:88:d2:b3:c2:5a:e2:7b:3c:92:9d:01:f8:e2:00:4b:
         68:14:9f:68:09:31:fe:5e:88:89:4e:04:39:80:2b:3a:78:d4:
         54:30:93:7c:05:f4:e0:77:6a:40:8f:f2:7e:86:ad:e2:36:40:
         30:94:f9:4f:dd:d3:a0:96:7e:d0:35:30:3d:c4:f5:1c:05:fe:
         6d:d7:94:52:d4:73:e8:52:74:4b:f6:b2:a3:69:1c:14:f5:5b:
         bc:f3:a1:36:49:9b:83:36:5c:93:77:5b:f5:dd:ac:fe:d4:c9:
         6c:95:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:25 2024 by rpki-client on console-ams.rpki-client.org