Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
File:                     QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa (raw, json)
Hash identifier:          GQQ/P/KFbW4vdw7W2Wn3LqQFn9bjYYtoDTGG1peRg50=
Subject key identifier:   43:17:D2:88:4E:DC:ED:A4:33:59:FD:5A:2B:FC:0D:18:7B:B8:03:B2
Certificate issuer:       /CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
Certificate serial:       0915
Authority key identifier: 65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
Signing time:             Tue 07 Jun 2022 10:09:48 +0000
ROA not before:           Tue 07 Jun 2022 10:09:48 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     137797
IP address blocks:        103.116.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2325 (0x915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DA61BDCA2CC0F8CA95D24D3942BC087D8C92A6
        Validity
            Not Before: Jun  7 10:09:48 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=4317D2884EDCEDA43359FD5A2BFC0D187BB803B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:cf:c8:2f:5e:28:76:62:0f:c3:41:0c:4f:
                    48:53:f2:35:6c:aa:3f:6c:cf:fc:e6:88:7e:19:11:
                    18:5f:20:93:7c:fd:2d:23:f2:83:b6:8e:45:c3:83:
                    ef:f8:04:07:62:63:f3:dc:be:c8:5e:87:e4:4a:45:
                    82:e7:ec:e2:e5:d9:2a:f3:13:3c:7d:98:bd:24:e1:
                    5a:d1:eb:21:f0:f5:fa:17:59:d3:e1:69:3b:99:3b:
                    7d:66:0f:28:09:2c:90:32:a3:a1:b5:3b:b0:77:7c:
                    b5:6e:61:b1:31:a1:9d:b1:71:54:97:93:55:a5:b6:
                    15:fc:a4:e9:f3:54:67:4e:5a:b8:05:b1:f4:39:4b:
                    4c:82:42:70:67:30:86:d2:80:85:04:bf:f4:38:62:
                    cd:49:0f:36:5c:84:9d:12:f2:28:82:43:e8:dd:bd:
                    7e:e1:8f:cb:d3:68:71:de:c3:e8:2a:c8:8a:e3:26:
                    63:29:39:69:58:2a:75:2d:b4:71:01:e8:18:20:51:
                    76:cf:d0:ef:15:89:37:d2:04:bd:98:59:b7:7e:ea:
                    eb:2d:8c:2e:75:df:95:b0:f6:b8:d4:9c:09:61:91:
                    e0:51:89:cb:15:6f:3c:ca:7f:49:46:5e:88:79:a6:
                    b8:2d:78:8e:ef:e2:2f:a6:b5:3b:57:ec:35:19:02:
                    e2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:17:D2:88:4E:DC:ED:A4:33:59:FD:5A:2B:FC:0D:18:7B:B8:03:B2
            X509v3 Authority Key Identifier:
                keyid:65:DA:61:BD:CA:2C:C0:F8:CA:95:D2:4D:39:42:BC:08:7D:8C:92:A6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/ZdphvcoswPjKldJNOUK8CH2MkqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ZdphvcoswPjKldJNOUK8CH2MkqY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2739/QxfSiE7c7aQzWf1aK_wNGHu4A7I.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:30:b0:b5:56:3c:96:97:6e:ba:4c:f4:5b:9c:cb:47:1b:17:
         eb:dc:fc:38:88:67:5b:b5:db:ac:f4:15:29:33:21:3b:70:1a:
         e0:62:ae:99:7c:7b:c6:57:42:8b:cd:7f:ff:04:f9:d6:6b:f2:
         4b:a6:a5:14:24:54:75:35:6c:e5:05:d1:0c:e3:76:fd:b1:b7:
         e6:ea:c1:bd:12:7b:3d:cf:81:86:19:8d:43:dc:4c:bc:53:ae:
         24:e9:d1:9b:1f:f8:34:89:f5:51:ab:77:1c:e5:d6:5a:a1:81:
         1f:a8:35:8e:fd:91:35:0d:03:88:68:31:f0:e1:8d:a5:5e:f8:
         b3:09:d0:fb:07:42:d1:4f:52:6f:b7:3a:0e:9b:13:e4:ee:10:
         54:09:38:69:c4:21:70:e8:88:e9:40:d0:e0:6a:83:95:f0:42:
         c0:60:46:72:17:dd:c8:30:ed:02:4d:c5:c5:de:91:15:14:2f:
         36:fa:6b:33:32:f9:99:a1:ca:36:9c:90:c7:75:1f:91:03:f6:
         8b:4c:5a:d9:85:7c:33:ad:ef:c7:78:c1:7d:0f:e5:ce:c1:6e:
         62:5f:32:34:fe:78:6b:40:f8:65:b0:91:93:92:10:b0:e7:7d:
         07:7d:f5:2d:04:50:2b:98:f4:0c:24:b7:73:a1:4e:b5:39:3b:
         be:a0:d2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:19 2023 by rpki-client on console-fra.rpki-client.org