Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3067/4W5qrR4MRwXTRIy1xjWbFuW8D7Q.roa
File:                     4W5qrR4MRwXTRIy1xjWbFuW8D7Q.roa (raw, json)
Hash identifier:          h+LZ8zqvDfoLs5gxPXpIn8FwVtI1dVhw95mJs9GxE9c=
Subject key identifier:   E1:6E:6A:AD:1E:0C:47:05:D3:44:8C:B5:C6:35:9B:16:E5:BC:0F:B4
Certificate issuer:       /CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
Certificate serial:       0B1A
Authority key identifier: FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/4W5qrR4MRwXTRIy1xjWbFuW8D7Q.roa
Signing time:             Tue 07 Jun 2022 02:12:10 +0000
ROA not before:           Tue 07 Jun 2022 02:12:10 +0000
ROA not after:            Fri 02 Jun 2023 05:30:26 +0000
asID:                     24409
IP address blocks:        103.163.28.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC69367A4AB2D1799993A03C9ABC87F415C47693
        Validity
            Not Before: Jun  7 02:12:10 2022 GMT
            Not After : Jun  2 05:30:26 2023 GMT
        Subject: CN=E16E6AAD1E0C4705D3448CB5C6359B16E5BC0FB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:20:2b:a8:0c:fc:24:d6:d3:e4:00:5c:44:
                    e7:03:55:ac:c8:cc:39:b6:a4:64:16:41:56:71:21:
                    20:9e:9c:32:00:07:b7:dd:42:14:4c:f1:ee:10:ea:
                    10:95:f9:ae:e4:8b:6e:94:e9:55:e7:9e:9f:02:f4:
                    b8:2c:2f:87:7e:50:ab:49:70:ac:0f:0f:a1:f8:49:
                    83:21:a6:07:92:55:71:09:68:7c:db:0a:1f:0c:6e:
                    de:71:be:b0:3a:53:e0:b5:d5:4e:d1:30:93:5d:4e:
                    eb:08:b1:0f:8f:ca:b7:98:4c:8a:13:6c:e7:21:c8:
                    5d:d4:59:fa:ed:be:e1:ae:e4:95:97:fe:67:fc:ba:
                    b7:f1:b0:7c:39:a7:e9:cb:eb:ee:0a:cb:b9:d1:29:
                    de:a6:cc:3e:26:a3:59:e5:6b:03:df:15:99:2d:b4:
                    8a:fe:fc:ec:41:bd:f5:f3:22:d7:fc:e1:d0:44:34:
                    92:59:c1:7d:1a:1e:b2:cd:08:fe:8a:63:37:25:a8:
                    92:8d:2b:f3:80:ab:b1:3e:cd:da:9c:ac:8e:33:5c:
                    6e:fe:9b:d3:a9:c7:c0:60:e2:ad:dd:1e:dd:ab:2e:
                    81:10:41:37:5a:64:09:22:1d:96:a8:25:2f:86:17:
                    27:8b:6d:c9:97:48:28:25:20:ff:2f:31:ad:b2:36:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:6A:AD:1E:0C:47:05:D3:44:8C:B5:C6:35:9B:16:E5:BC:0F:B4
            X509v3 Authority Key Identifier:
                keyid:FC:69:36:7A:4A:B2:D1:79:99:93:A0:3C:9A:BC:87:F4:15:C4:76:93

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/_Gk2ekqy0XmZk6A8mryH9BXEdpM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/_Gk2ekqy0XmZk6A8mryH9BXEdpM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3067/4W5qrR4MRwXTRIy1xjWbFuW8D7Q.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:b3:23:bb:fc:57:c3:bb:98:cb:ba:0b:01:99:61:7d:4d:de:
         37:2e:60:f6:cd:cf:db:5c:9b:61:b7:c5:2e:b8:7e:a5:a8:05:
         ae:ff:19:b5:79:0a:4e:37:1d:3c:18:d6:17:5f:98:40:a8:1f:
         c4:42:db:bd:b4:8e:69:d8:78:41:f0:c3:5b:cb:f7:14:e3:a8:
         6c:fd:3b:ac:84:63:fd:26:c7:64:20:0a:5f:37:e0:11:4a:46:
         ea:4e:e4:bc:b3:43:64:66:34:59:89:b0:2d:b4:26:99:8b:53:
         0e:ba:48:71:4b:33:1e:57:61:06:fd:2d:e3:93:89:ce:6f:67:
         d4:b9:89:fe:40:fa:c7:bd:5f:4c:31:7b:37:3e:2d:ab:e7:07:
         e5:a4:ce:a6:a1:91:84:95:6a:1a:c0:e9:5d:9e:ec:3b:81:51:
         9a:bb:61:b0:d1:48:6e:23:63:3b:69:06:ec:43:04:8d:57:55:
         ff:a9:24:ca:e5:68:ef:9e:50:49:a2:95:09:6b:ae:c6:d2:a6:
         c0:d4:c5:7f:0d:59:df:f9:e8:20:79:e2:14:38:e3:f5:33:64:
         7b:9a:c6:02:0c:bc:7e:d8:27:f1:c7:58:ae:7c:a2:40:60:6e:
         64:83:56:eb:65:a3:c6:24:fe:7e:ba:72:4c:c1:b6:b0:be:d3:
         0c:2a:8a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:20 2023 by rpki-client on console-fra.rpki-client.org