Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2930/WH56WcB2e2DKrpBIT2JW2onSScs.roa
File:                     WH56WcB2e2DKrpBIT2JW2onSScs.roa (raw, json)
Hash identifier:          G8cwMt0UANUVicyndKLt+nUGb8zpvbmwoq/l/3IuoRs=
Subject key identifier:   58:7E:7A:59:C0:76:7B:60:CA:AE:90:48:4F:62:56:DA:89:D2:49:CB
Certificate issuer:       /CN=B6BB335CF607EEE20F458E3DA1DDA8E47FAF8BF9
Certificate serial:       06ED
Authority key identifier: B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/trszXPYH7uIPRY49od2o5H-vi_k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/WH56WcB2e2DKrpBIT2JW2onSScs.roa
Signing time:             Fri 12 Nov 2021 02:45:54 +0000
ROA not before:           Fri 12 Nov 2021 02:45:54 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     398704
IP address blocks:        103.143.132.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1773 (0x6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6BB335CF607EEE20F458E3DA1DDA8E47FAF8BF9
        Validity
            Not Before: Nov 12 02:45:54 2021 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=587E7A59C0767B60CAAE90484F6256DA89D249CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:33:23:62:6d:0a:38:07:01:0b:38:9a:f7:
                    f7:79:1f:ec:17:9a:7e:1c:cc:cc:f7:d6:20:5c:bb:
                    83:ce:ea:12:55:34:0a:55:59:63:7d:b2:37:fb:7f:
                    00:2b:9b:59:50:ef:00:48:ba:be:8e:a2:14:f0:b0:
                    5c:c8:25:3a:83:1e:a3:3d:72:bb:1d:e7:fc:36:26:
                    87:07:0d:52:ce:54:89:b8:5b:9b:f1:b3:08:bc:6a:
                    ea:9c:7f:78:60:d7:21:36:8f:cc:f6:67:6e:63:d9:
                    cc:be:37:f2:29:5f:20:65:95:3d:97:38:08:9c:89:
                    8d:72:45:79:8b:d5:74:bd:a2:ff:4c:1a:2f:f4:69:
                    2c:3f:50:66:4a:66:b0:aa:3b:88:7b:8a:36:5e:04:
                    66:0f:2c:8b:c7:61:9c:2b:1e:48:a0:6c:c3:03:90:
                    85:ad:b1:9d:da:1e:a1:5d:ea:c1:ac:4e:be:ec:dc:
                    f9:08:d4:13:77:3c:c2:88:f5:36:72:c9:63:f9:8f:
                    77:8c:40:2d:e1:fe:62:55:b8:50:cb:7a:c3:47:56:
                    b7:0f:8e:74:59:7f:7d:c6:ec:62:4b:65:d3:9b:dd:
                    09:bc:00:7b:f5:ed:32:cd:1c:ed:45:b1:c4:e0:21:
                    f0:7e:c4:ed:8a:0d:df:ea:2e:b8:b7:54:aa:34:b2:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7E:7A:59:C0:76:7B:60:CA:AE:90:48:4F:62:56:DA:89:D2:49:CB
            X509v3 Authority Key Identifier:
                keyid:B6:BB:33:5C:F6:07:EE:E2:0F:45:8E:3D:A1:DD:A8:E4:7F:AF:8B:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/trszXPYH7uIPRY49od2o5H-vi_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/trszXPYH7uIPRY49od2o5H-vi_k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2930/WH56WcB2e2DKrpBIT2JW2onSScs.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:47:22:68:2d:8f:4e:0e:34:42:c2:cf:a9:3b:8d:77:b3:
         ce:65:87:70:9d:c4:e0:a7:be:c3:e1:a4:74:8c:d0:d1:bb:4b:
         3d:5a:08:5b:bd:f6:7f:69:2b:c2:97:32:d5:bb:57:8e:89:4a:
         16:b4:99:11:38:77:48:ff:a1:94:0d:f0:d3:43:5f:be:59:bc:
         12:89:3a:58:c5:be:bb:70:b7:b1:24:c9:93:7e:f7:5a:85:21:
         fe:b7:6c:c1:19:d5:96:08:91:b4:18:02:98:48:b9:8d:79:0b:
         d1:b0:99:da:d5:1b:20:1c:15:3b:b6:6b:ab:e8:44:d0:f5:4c:
         03:1f:e0:2a:b1:7f:02:68:ad:ec:b6:6c:a4:6b:a9:6d:6b:d5:
         03:80:d9:27:6f:72:9f:cc:dc:8e:15:28:56:d6:f1:80:33:55:
         46:ff:07:f5:5b:9f:e1:d8:03:8b:57:09:92:d4:f8:2b:4d:53:
         49:32:d5:e7:e8:9a:69:e5:ee:73:58:52:d1:80:99:d9:e9:5d:
         cd:b0:a4:e4:da:eb:19:00:2b:2d:05:81:20:db:e4:70:01:cf:
         50:62:05:31:51:ca:a5:75:99:bf:53:5a:88:3b:8e:d6:ed:a9:
         ec:0e:09:16:a9:7e:58:4c:30:5a:71:2d:77:c2:95:3b:3f:a7:
         fb:9f:34:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:16 2023 by rpki-client on console-ams.rpki-client.org