Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3054/EEOHKM_SiEKRSNZdHbTaSs7VoNY.roa
File:                     EEOHKM_SiEKRSNZdHbTaSs7VoNY.roa (raw, json)
Hash identifier:          DmpWPw456HWUJHEWc4vRIndrueNZNuX2qpOiTAUC5KE=
Subject key identifier:   10:43:87:28:CF:D2:88:42:91:48:D6:5D:1D:B4:DA:4A:CE:D5:A0:D6
Certificate issuer:       /CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
Certificate serial:       0718
Authority key identifier: 93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/EEOHKM_SiEKRSNZdHbTaSs7VoNY.roa
Signing time:             Tue 21 Jun 2022 01:54:29 +0000
ROA not before:           Tue 21 Jun 2022 01:54:29 +0000
ROA not after:            Fri 09 Jun 2023 06:51:49 +0000
asID:                     146845
IP address blocks:        103.160.244.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E749E654B2A9DCC5BFB34C2CA9AE75FD830BDD
        Validity
            Not Before: Jun 21 01:54:29 2022 GMT
            Not After : Jun  9 06:51:49 2023 GMT
        Subject: CN=10438728CFD288429148D65D1DB4DA4ACED5A0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:cd:da:49:56:5b:72:ee:e4:bd:f8:b0:b6:
                    5b:8e:80:81:d0:99:20:70:50:74:bf:2c:4a:3e:ba:
                    4a:c5:56:14:43:e4:cc:a6:1d:05:65:df:d0:27:db:
                    3a:b1:1c:03:eb:7f:0e:cb:aa:7c:1a:69:3c:d6:c1:
                    97:95:2e:14:72:c9:9b:80:64:38:9f:ee:94:c8:86:
                    b6:09:81:36:48:9a:27:b8:05:da:f7:84:df:15:3c:
                    ad:3a:1e:4d:56:c3:ba:a6:8e:9f:71:fc:af:87:e5:
                    dc:4c:12:c0:5a:96:da:c7:91:41:59:55:0c:46:e7:
                    a3:7d:95:ea:08:0a:40:8a:a0:dc:93:28:d5:1d:85:
                    d5:af:18:9a:67:f7:ec:34:50:34:30:45:3e:e6:a8:
                    0b:cc:ca:08:62:fd:5a:4c:04:88:bd:60:f1:34:cf:
                    48:ad:4e:6c:9b:8b:6a:ba:3a:29:5c:d3:0c:da:8b:
                    02:00:ca:7a:ef:a7:fe:84:b8:7e:e1:55:71:5b:a1:
                    86:a9:c1:34:a9:19:6d:5a:71:31:d8:bd:1f:9d:9b:
                    a5:22:b3:07:a5:28:a0:e2:55:51:fd:8d:f6:db:82:
                    c7:2e:df:ee:4d:aa:79:e5:22:0a:b5:b9:11:46:da:
                    79:ad:4e:c2:ba:55:3d:c8:d4:de:b1:d3:6a:26:5f:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:43:87:28:CF:D2:88:42:91:48:D6:5D:1D:B4:DA:4A:CE:D5:A0:D6
            X509v3 Authority Key Identifier:
                keyid:93:E7:49:E6:54:B2:A9:DC:C5:BF:B3:4C:2C:A9:AE:75:FD:83:0B:DD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/k-dJ5lSyqdzFv7NMLKmudf2DC90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/k-dJ5lSyqdzFv7NMLKmudf2DC90.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3054/EEOHKM_SiEKRSNZdHbTaSs7VoNY.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:04:50:23:d5:d1:90:7f:96:02:dc:6d:f2:74:92:5d:fe:c4:
         57:89:fc:e0:08:0d:88:da:a4:cb:88:5c:cd:29:2f:a4:69:54:
         87:b5:ea:2e:a8:68:ab:6d:ce:d6:87:11:91:54:9d:98:05:1f:
         1d:58:55:5d:38:26:80:98:54:ba:22:0b:ce:db:16:eb:4c:91:
         24:f6:4b:ab:f9:1c:d6:c7:4b:15:21:dc:c4:9f:e0:0b:42:0d:
         5c:09:8b:3a:84:2a:f1:dc:1f:86:32:38:52:8f:13:fa:57:2e:
         7d:0c:c5:eb:0c:9c:0e:7e:ac:27:58:e2:37:fb:2b:a3:d0:7f:
         5b:43:9a:96:d2:04:15:bf:3f:ab:8b:2d:16:88:7a:34:89:ef:
         e2:fe:ab:18:b2:7b:df:49:de:8b:df:9b:c4:60:c0:5f:4d:5b:
         89:ec:2f:7f:a6:e3:d0:da:e9:06:6d:0c:5b:8c:fe:05:63:95:
         1d:17:d7:64:b1:24:61:5c:bc:f8:de:e1:7d:e0:8b:68:e4:4e:
         fa:90:fe:4b:86:be:33:12:00:fc:1a:b8:15:db:a9:cb:f2:eb:
         d3:33:c4:83:0d:f2:03:b3:90:ab:8a:a9:7f:e0:0e:64:6c:7c:
         71:9d:c3:99:e4:52:0c:df:67:21:1f:86:c4:56:9b:25:2c:04:
         19:bf:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org