Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/aREdZfSCp_Sp7lUThtx2qhXuyjA.roa
File:                     aREdZfSCp_Sp7lUThtx2qhXuyjA.roa (raw, json)
Hash identifier:          HqnovxyBP9ykVqlx09PVN5vcKH8gUpm1xkw6B4mqzQY=
Subject key identifier:   69:11:1D:65:F4:82:A7:F4:A9:EE:55:13:86:DC:76:AA:15:EE:CA:30
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       66
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/aREdZfSCp_Sp7lUThtx2qhXuyjA.roa
Signing time:             Sat 26 Mar 2022 11:56:32 +0000
ROA not before:           Sat 26 Mar 2022 11:56:32 +0000
ROA not after:            Fri 10 Mar 2023 09:35:39 +0000
asID:                     1239
IP address blocks:        180.223.192.0/19 maxlen: 24
                          180.223.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: Mar 26 11:56:32 2022 GMT
            Not After : Mar 10 09:35:39 2023 GMT
        Subject: CN=69111D65F482A7F4A9EE551386DC76AA15EECA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:65:c5:3f:25:30:d3:a1:74:16:6d:d5:84:
                    af:cd:76:2f:d8:4e:6a:03:46:bb:d7:cb:56:ff:9a:
                    41:8c:f3:54:21:e4:ee:eb:c5:58:8c:71:e8:2c:a7:
                    2e:e7:7d:21:16:55:fb:1a:78:33:35:0d:b8:2f:5d:
                    7d:d6:d4:d3:7c:b6:68:0c:d3:3d:ec:38:a8:cd:0e:
                    03:ad:9a:a8:b3:2c:e9:25:b2:e1:e9:b9:9e:81:64:
                    29:31:51:17:70:dd:fe:cf:22:7c:70:6b:36:e6:dc:
                    33:38:d0:f5:5f:f2:13:7c:a0:c7:90:03:a5:b7:31:
                    bf:d6:d9:08:9e:a5:19:70:18:14:71:76:f7:21:74:
                    21:fa:01:96:dd:fd:bd:91:18:e5:93:b8:46:7d:b3:
                    a6:42:8b:67:db:d1:77:ea:44:67:62:7b:f4:87:90:
                    00:26:4c:f1:05:ee:80:7e:67:d2:66:d6:e2:5e:33:
                    98:f5:73:cf:61:60:8e:23:0c:23:4d:6a:59:db:3e:
                    af:df:58:93:4b:30:c2:90:fe:69:31:8c:5f:17:33:
                    dd:ab:ed:24:9c:74:18:e5:c1:81:07:28:6b:cc:d5:
                    b7:f6:2e:8d:55:2b:a5:6d:39:3c:1f:0b:a7:d9:e0:
                    c7:57:c6:25:62:c3:c6:8d:8e:70:42:10:af:96:6f:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:11:1D:65:F4:82:A7:F4:A9:EE:55:13:86:DC:76:AA:15:EE:CA:30
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/aREdZfSCp_Sp7lUThtx2qhXuyjA.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.192.0/19
                  180.223.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:0d:0b:43:2e:e3:40:82:d6:ec:a3:e0:51:79:a1:7d:42:
         a9:aa:51:1b:c4:fd:22:67:88:f4:be:e9:3e:ce:02:84:8b:e3:
         41:80:ac:ac:82:7f:8a:a9:7e:62:03:a0:56:b8:69:af:b0:24:
         9c:5b:4e:20:26:b8:ee:89:fd:68:38:fe:0b:02:a5:e6:21:1d:
         a5:95:ef:49:45:dd:a7:6e:8e:fc:88:10:bd:fe:40:72:b0:41:
         ea:8b:e2:df:9c:c5:a0:30:a6:96:38:52:61:f7:2b:62:4f:cc:
         64:45:e6:39:b1:e7:89:41:8f:93:18:c5:90:b0:fb:47:a5:2e:
         b3:64:d9:04:6f:2e:3a:0d:7c:ca:77:23:6e:6f:61:6a:1d:9d:
         57:31:af:32:d0:b4:a5:bd:b7:a5:de:f4:95:43:a8:2f:e2:4f:
         03:00:5b:2d:95:e9:68:e2:bf:08:4f:b5:df:69:7c:b3:5c:fb:
         b9:ab:57:b1:d7:cc:13:5e:aa:87:36:c1:2d:63:88:33:58:b7:
         f2:83:5f:0f:42:c5:46:1b:cb:4e:d8:df:c4:09:dc:fa:de:23:
         c4:e2:f0:65:c7:81:5c:81:f3:f7:a1:b8:51:0b:82:84:c1:60:
         56:57:47:22:d0:62:24:3f:39:ce:e2:4a:d2:9c:e3:80:1f:d1:
         41:dc:7f:ef
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQjBD
NTA1NDJDQTg3QUEzQzEyRjMwQzMyMzIzMDYyQzg3MTAyMjIxMB4XDTIyMDMyNjEx
NTYzMloXDTIzMDMxMDA5MzUzOVowMzExMC8GA1UEAxMoNjkxMTFENjVGNDgyQTdG
NEE5RUU1NTEzODZEQzc2QUExNUVFQ0EzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALJAZcU/JTDToXQWbdWEr812L9hOagNGu9fLVv+aQYzzVCHk7uvF
WIxx6CynLud9IRZV+xp4MzUNuC9dfdbU03y2aAzTPew4qM0OA62aqLMs6SWy4em5
noFkKTFRF3Dd/s8ifHBrNubcMzjQ9V/yE3ygx5ADpbcxv9bZCJ6lGXAYFHF29yF0
IfoBlt39vZEY5ZO4Rn2zpkKLZ9vRd+pEZ2J79IeQACZM8QXugH5n0mbW4l4zmPVz
z2FgjiMMI01qWds+r99Yk0swwpD+aTGMXxcz3avtJJx0GOXBgQcoa8zVt/YujVUr
pW05PB8Lp9ngx1fGJWLDxo2OcEIQr5ZvQbECAwEAAaOCAfkwggH1MB0GA1UdDgQW
BBRpER1l9IKn9KnuVROG3HaqFe7KMDAfBgNVHSMEGDAWgBQrDFBULKh6o8EvMMMj
IwYshxAiITAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMF0GA1UdHwRWMFQwUqBQ
oE6GTHJzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC8zMTMw
L0t3eFFWQ3lvZXFQQkx6RERJeU1HTEljUUlpRS5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvS3d4UVZDeW9lcVBCTHpEREl5TUdMSWNRSWlFLmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZ0GCCsGAQUFBwELBIGQMIGNMFgGCCsGAQUFBzALhkxyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzEzMC9hUkVkWmZTQ3BfU3A3
bFVUaHR4MnFoWHV5akEucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25u
aWMuY24vcnJkcC9ub3RpZnkueG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAM
AwQFtN/AAwQAtN/yMA0GCSqGSIb3DQEBCwUAA4IBAQA34g0LQy7jQILW7KPgUXmh
fUKpqlEbxP0iZ4j0vuk+zgKEi+NBgKysgn+KqX5iA6BWuGmvsCScW04gJrjuif1o
OP4LAqXmIR2lle9JRd2nbo78iBC9/kBysEHqi+LfnMWgMKaWOFJh9ytiT8xkReY5
seeJQY+TGMWQsPtHpS6zZNkEby46DXzKdyNub2FqHZ1XMa8y0LSlvbel3vSVQ6gv
4k8DAFstlelo4r8IT7XfaXyzXPu5q1ex18wTXqqHNsEtY4gzWLfyg18PQsVGG8tO
2N/ECdz63iPE4vBlx4FcgfP3obhRC4KEwWBWV0ci0GIkPznO4krSnOOAH9FB3H/v
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org