Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2802/zB2oY4pkD2mEVFaljy0XU-ZtWtc.roa
File:                     zB2oY4pkD2mEVFaljy0XU-ZtWtc.roa (raw, json)
Hash identifier:          2btYuRyeOKxqqTLEdi/pZqQ6biHSEmA9gPbn4TalvSg=
Subject key identifier:   CC:1D:A8:63:8A:64:0F:69:84:54:56:A5:8F:2D:17:53:E6:6D:5A:D7
Certificate issuer:       /CN=15E47E4DD1125D3BAE0751754BB7DC952F67E486
Certificate serial:       30F2
Authority key identifier: 15:E4:7E:4D:D1:12:5D:3B:AE:07:51:75:4B:B7:DC:95:2F:67:E4:86
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FeR-TdESXTuuB1F1S7fclS9n5IY.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/zB2oY4pkD2mEVFaljy0XU-ZtWtc.roa
Signing time:             Sat 09 Oct 2021 20:07:15 +0000
ROA not before:           Sat 09 Oct 2021 20:07:15 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     9392
IP address blocks:        103.122.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12530 (0x30f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15E47E4DD1125D3BAE0751754BB7DC952F67E486
        Validity
            Not Before: Oct  9 20:07:15 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=CC1DA8638A640F69845456A58F2D1753E66D5AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:a1:de:af:23:58:6b:06:22:bb:8b:d7:1d:
                    5d:b3:ee:5b:35:0c:36:bc:4e:df:1c:bb:49:f2:83:
                    e7:65:87:a3:23:50:21:8d:19:fd:4e:ed:f4:7a:50:
                    c6:5d:82:d5:85:d5:36:df:9b:ff:61:9e:7c:75:a8:
                    19:ff:50:da:ac:f2:cc:f1:9a:7b:51:65:7f:16:a7:
                    9b:41:76:64:8a:32:3d:61:8b:74:46:a8:dd:56:0a:
                    a7:63:12:6d:28:1f:61:a2:34:95:fc:64:03:1e:3e:
                    0d:15:7c:ea:7b:e7:ba:15:b0:2e:e6:a9:74:84:2e:
                    b3:1e:d2:70:49:64:e9:80:1f:c0:52:d6:b8:36:4c:
                    f7:82:b8:24:e7:7b:48:2d:f6:2f:2d:47:ce:5b:7a:
                    44:85:9f:36:a9:91:fe:0d:d1:52:ab:aa:bc:49:82:
                    cd:23:ce:28:b9:89:2b:e4:03:31:79:08:bc:20:25:
                    4b:89:c4:21:c5:80:9e:9d:80:cb:02:de:41:cc:4c:
                    df:af:3d:38:62:31:85:55:30:83:33:70:8c:68:4e:
                    1a:c5:98:c2:e9:bd:87:b4:6c:60:2a:76:88:93:dc:
                    cc:3f:92:a8:46:44:d5:36:60:91:32:39:7f:7e:ef:
                    31:30:e1:e4:87:77:0c:38:81:84:ab:87:07:62:ce:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:1D:A8:63:8A:64:0F:69:84:54:56:A5:8F:2D:17:53:E6:6D:5A:D7
            X509v3 Authority Key Identifier:
                keyid:15:E4:7E:4D:D1:12:5D:3B:AE:07:51:75:4B:B7:DC:95:2F:67:E4:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/FeR-TdESXTuuB1F1S7fclS9n5IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/FeR-TdESXTuuB1F1S7fclS9n5IY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2802/zB2oY4pkD2mEVFaljy0XU-ZtWtc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e1:78:c1:a4:18:ec:5e:82:5e:22:86:37:01:c3:f1:68:a1:
         de:9a:5c:6f:ec:87:c7:af:59:99:61:6f:a4:05:90:0f:40:23:
         c6:4f:e8:55:64:8d:c5:9c:aa:a6:98:92:d4:ff:df:18:49:2c:
         cb:1c:f3:0c:4e:b2:fa:df:fa:78:cd:ee:39:00:17:f2:32:ec:
         90:7f:5a:ec:49:08:c0:61:c2:36:b5:b3:78:ea:6d:95:41:7a:
         5f:f8:b7:6b:95:35:ff:57:a6:41:11:62:51:35:5a:9b:6e:37:
         57:03:e6:23:37:90:d7:54:29:c3:d9:ca:4b:9f:52:28:7d:1f:
         12:07:53:79:10:6c:af:52:15:db:c2:a4:39:41:91:94:4b:c0:
         e2:66:bb:eb:16:7f:bc:ea:a0:ec:db:0a:56:33:7f:5b:3b:9a:
         28:d5:2b:08:3f:0a:06:da:d2:04:d8:f6:cb:ed:e6:e1:b0:46:
         98:7c:da:d5:9a:1d:e8:43:b3:c7:24:41:72:82:14:94:35:dc:
         94:5c:36:71:45:0a:c3:28:4d:06:a6:66:aa:67:82:ae:77:f1:
         56:47:c7:d3:b8:f2:51:56:56:96:80:ed:0d:a6:65:a6:cb:d0:
         7d:08:0b:e6:0c:70:01:2c:ff:78:d1:33:58:11:ef:e3:7c:73:
         b5:e7:00:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org