Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3111/zo4N6jHTMIqvFNOGY0QLZttNQeo.roa
File:                     zo4N6jHTMIqvFNOGY0QLZttNQeo.roa (raw, json)
Hash identifier:          eV2QqjNwrRi1E169pnSP1NJZa+Id+vRcOtWxFv5xtqw=
Subject key identifier:   CE:8E:0D:EA:31:D3:30:8A:AF:14:D3:86:63:44:0B:66:DB:4D:41:EA
Certificate issuer:       /CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
Certificate serial:       0710
Authority key identifier: CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zo4N6jHTMIqvFNOGY0QLZttNQeo.roa
Signing time:             Sat 27 Aug 2022 13:34:45 +0000
ROA not before:           Sat 27 Aug 2022 13:34:45 +0000
ROA not after:            Wed 19 Jul 2023 01:20:03 +0000
asID:                     146839
IP address blocks:        103.172.160.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCE83222398F6943284865DB2238FAB14FB8FCEA
        Validity
            Not Before: Aug 27 13:34:45 2022 GMT
            Not After : Jul 19 01:20:03 2023 GMT
        Subject: CN=CE8E0DEA31D3308AAF14D38663440B66DB4D41EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d4:80:6f:0d:1f:18:90:04:f0:1a:eb:8f:d3:
                    2b:a7:dd:47:98:cb:c2:1b:f0:2c:83:14:b9:bc:9e:
                    bf:08:af:31:4f:31:3a:74:e9:ae:6a:69:9f:be:37:
                    3f:f8:10:5b:b3:fb:3f:af:59:9a:f7:f6:42:4f:b5:
                    0e:9a:8b:ac:72:80:64:89:3a:b5:4a:f7:05:e1:5b:
                    1e:f6:4f:d1:5a:0a:ff:a1:fd:40:a9:e0:41:e3:b5:
                    cf:a3:82:7f:9b:74:93:e5:de:c7:21:4e:fe:1f:20:
                    bf:b9:83:1c:6f:e1:43:97:35:d9:0b:67:b3:ef:24:
                    06:52:08:cb:62:c3:cf:67:02:37:2a:58:99:4e:59:
                    cf:af:6f:84:e3:9e:44:7e:76:3d:ce:06:df:66:1e:
                    75:63:db:06:fb:04:e5:38:93:8f:98:0c:0c:e5:86:
                    91:8e:28:0d:de:a1:f4:29:52:a9:64:3a:3a:fb:72:
                    fc:e7:57:31:2f:49:9c:68:25:8b:c1:1e:ac:43:75:
                    e5:34:92:22:ea:1c:67:97:cf:12:14:d5:41:8d:ad:
                    f5:fd:0b:97:f7:19:c5:6a:77:5e:e7:b7:91:33:4c:
                    aa:7d:d8:08:41:db:84:6a:8d:fe:98:6e:7a:43:a6:
                    0e:b8:24:c4:21:30:82:ee:9d:73:70:45:2a:f4:2e:
                    eb:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8E:0D:EA:31:D3:30:8A:AF:14:D3:86:63:44:0B:66:DB:4D:41:EA
            X509v3 Authority Key Identifier:
                keyid:CC:E8:32:22:39:8F:69:43:28:48:65:DB:22:38:FA:B1:4F:B8:FC:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/zOgyIjmPaUMoSGXbIjj6sU-4_Oo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3111/zo4N6jHTMIqvFNOGY0QLZttNQeo.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:41:2d:a2:68:ac:d9:f4:95:5e:4d:58:e4:c4:c3:80:49:39:
         c0:69:af:24:7c:f7:a4:6f:2a:11:5a:d5:54:14:44:8e:10:fd:
         f6:67:e5:9d:e9:cb:fc:6a:4c:b2:8c:80:a3:98:f9:ab:a6:97:
         09:cb:ca:4d:cd:46:84:dd:db:28:1d:8b:7c:41:91:4c:a7:ff:
         f9:88:d9:7d:da:eb:2b:d3:7d:63:f0:57:f1:01:4b:d7:f7:06:
         a5:8a:cd:57:96:b1:bc:7f:1a:88:f5:1e:e5:e0:2a:9a:05:69:
         be:88:d1:fd:8d:41:68:84:04:8c:35:b6:c2:a8:e2:87:f4:60:
         38:ad:1e:12:d0:31:75:01:4d:6f:04:1c:64:5f:75:68:03:2f:
         32:b0:77:59:64:f0:70:69:9c:3e:05:90:00:2c:b7:b7:e2:6e:
         f4:ea:f6:d2:3d:68:5b:9d:72:b0:9a:88:45:97:93:b7:b6:61:
         5e:ea:0f:d0:7d:19:21:a6:f0:85:c5:7c:c1:b9:06:85:24:17:
         6a:b4:ff:dd:a3:28:ec:55:9d:e8:e8:a0:90:e9:bc:8e:6d:67:
         d1:02:67:d2:de:7e:ca:eb:d2:18:10:5d:80:a6:e6:9a:67:cf:
         6a:a0:6d:a9:15:b6:a9:eb:4f:94:e9:a9:0d:fb:16:57:5c:4f:
         78:f3:41:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org