Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3130/sSWrLX8aPC_e_qgYh65GyG2bjx0.roa
File:                     sSWrLX8aPC_e_qgYh65GyG2bjx0.roa (raw, json)
Hash identifier:          WGRNSjaYWwD3lp5EUDK3SbYFdW86Co7sO7gOcEn7eY0=
Subject key identifier:   B1:25:AB:2D:7F:1A:3C:2F:DE:FE:A8:18:87:AE:46:C8:6D:9B:8F:1D
Certificate issuer:       /CN=2B0C50542CA87AA3C12F30C32323062C87102221
Certificate serial:       01AE
Authority key identifier: 2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/sSWrLX8aPC_e_qgYh65GyG2bjx0.roa
Signing time:             Sat 28 May 2022 02:22:50 +0000
ROA not before:           Sat 28 May 2022 02:22:50 +0000
ROA not after:            Fri 10 Mar 2023 09:35:39 +0000
asID:                     1239
IP address blocks:        180.223.0.0/17 maxlen: 24
                          180.223.128.0/18 maxlen: 24
                          180.223.192.0/19 maxlen: 24
                          180.223.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0C50542CA87AA3C12F30C32323062C87102221
        Validity
            Not Before: May 28 02:22:50 2022 GMT
            Not After : Mar 10 09:35:39 2023 GMT
        Subject: CN=B125AB2D7F1A3C2FDEFEA81887AE46C86D9B8F1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:6d:cb:c5:12:b8:15:45:9c:00:91:af:fe:
                    9a:77:63:68:eb:28:a5:a1:49:33:d8:6d:81:44:29:
                    30:da:97:41:97:4f:96:a2:8b:0d:3c:e9:fc:59:69:
                    b9:27:36:8e:d3:c2:46:2d:a9:66:13:a0:df:a4:4c:
                    a7:87:5f:15:aa:cc:7d:6d:d4:2a:e1:88:9d:b1:18:
                    89:cc:b8:00:74:2d:43:ea:73:c5:dd:23:4b:3a:1f:
                    56:ba:89:b1:20:47:0e:f6:9c:0c:1f:e2:e2:8b:39:
                    7d:8d:0a:59:7a:57:17:cd:3a:45:59:bd:ef:3f:3e:
                    a1:cd:63:18:34:e0:5a:36:ec:4b:ce:41:4b:e6:de:
                    30:25:32:86:20:ca:08:55:46:c9:b5:6a:58:b0:05:
                    ce:d6:cd:f8:4d:83:82:97:06:e2:4c:52:36:63:79:
                    4e:a7:9a:7b:7a:b5:f9:5f:90:11:1e:e1:e9:35:20:
                    6c:d5:ca:c1:74:ec:65:39:2e:8a:58:95:65:c3:bf:
                    35:9f:24:10:8f:0a:de:07:04:c1:f1:e2:2e:3b:08:
                    59:4f:a1:63:aa:98:d7:d2:e8:78:d0:fa:08:fc:ae:
                    3a:b5:5f:e9:90:de:35:03:ab:0f:47:8e:59:8d:fc:
                    52:fb:86:02:b1:45:66:0e:9f:b8:04:50:ae:e5:8f:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:25:AB:2D:7F:1A:3C:2F:DE:FE:A8:18:87:AE:46:C8:6D:9B:8F:1D
            X509v3 Authority Key Identifier:
                keyid:2B:0C:50:54:2C:A8:7A:A3:C1:2F:30:C3:23:23:06:2C:87:10:22:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/KwxQVCyoeqPBLzDDIyMGLIcQIiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KwxQVCyoeqPBLzDDIyMGLIcQIiE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3130/sSWrLX8aPC_e_qgYh65GyG2bjx0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.223.0.0-180.223.223.255
                  180.223.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d5:de:69:06:d4:51:f5:ae:b2:2f:26:14:36:9a:93:9b:4e:1b:
         99:9d:f1:95:fe:fc:49:6b:4b:58:af:11:d1:39:e8:b8:a1:a9:
         da:3a:54:48:5f:94:12:89:90:8b:f1:f7:61:c1:3c:6e:ba:bd:
         68:16:c9:04:cd:18:56:c9:66:99:cd:1c:2e:7b:0a:33:37:a4:
         b8:9e:7a:58:cd:23:ad:ca:8b:10:c2:ec:34:e7:d7:4b:c3:bf:
         67:99:d6:f3:da:73:1a:d2:b1:a7:59:00:eb:0f:1d:c7:ef:91:
         36:63:6b:dd:e3:38:bc:2d:95:0b:43:27:55:4b:4e:b7:8c:79:
         1c:85:c3:a2:1a:4c:43:ac:ce:96:9c:49:56:06:94:65:e1:4f:
         b4:ee:63:42:ec:ad:68:51:bb:48:9d:7c:58:82:37:c9:cd:73:
         f4:2b:42:13:05:2f:15:d5:2f:f8:9c:21:bc:7b:fd:78:fd:79:
         b1:77:10:d2:2d:78:9a:43:9b:71:cc:fc:f6:49:70:9a:b6:4b:
         81:e2:04:23:c2:b3:15:0f:71:b8:e0:5d:b7:6d:53:c5:48:d7:
         b2:cc:07:9e:1f:a6:58:3d:21:f2:9f:51:71:06:aa:ac:58:36:
         4d:23:9a:fb:78:4b:9b:5a:aa:0b:68:79:76:c4:62:61:86:40:
         79:a9:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:21 2023 by rpki-client on console-fra.rpki-client.org