Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/FeGfvGP_JdnLWW7pBmevC7I3Pa8.roa
File:                     FeGfvGP_JdnLWW7pBmevC7I3Pa8.roa (raw, json)
Hash identifier:          Qrj8Ve/YT9xzzhnQln17zDYb/UXN+itP1s8fMU4PpjE=
Subject key identifier:   15:E1:9F:BC:63:FF:25:D9:CB:59:6E:E9:06:67:AF:0B:B2:37:3D:AF
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       1B3A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FeGfvGP_JdnLWW7pBmevC7I3Pa8.roa
Signing time:             Thu 02 May 2024 13:54:06 +0000
ROA not before:           Thu 02 May 2024 13:54:06 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6970 (0x1b3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: May  2 13:54:06 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=15E19FBC63FF25D9CB596EE90667AF0BB2373DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:c2:c6:6c:96:bf:c0:60:e8:4b:2e:69:ce:
                    56:f1:04:04:9c:c6:ca:44:ed:56:bc:9d:b7:14:ea:
                    03:e1:58:9a:9c:a0:da:7d:de:11:29:55:e6:a9:a5:
                    72:48:8c:19:ec:db:5a:68:92:f7:86:f3:9c:7b:fd:
                    e8:a7:02:44:af:68:8e:50:52:0f:3d:03:32:16:27:
                    84:fa:1d:80:de:3a:1a:7c:ae:c5:b3:14:f5:4e:d0:
                    4c:78:fb:38:ed:5d:fb:b9:f1:68:1a:00:23:96:00:
                    a2:43:ad:f5:89:f7:69:0a:e8:87:6f:20:f3:d6:e6:
                    59:d5:41:aa:b8:3a:af:ae:df:11:a6:d5:ba:3b:6b:
                    ed:2a:3b:8d:90:b9:57:85:40:70:7b:9c:41:ea:a2:
                    cf:44:66:7d:45:dc:26:18:de:22:45:3a:1f:51:29:
                    08:d9:6b:81:d6:f2:b5:99:db:7a:0a:ce:6c:20:ca:
                    fc:fa:71:db:3f:08:87:5f:de:af:e4:c2:07:27:c6:
                    1d:18:6f:f5:db:11:81:f4:3d:cd:c1:f1:ee:08:4c:
                    7f:fa:d2:f6:2e:8e:ae:62:4c:29:b7:f3:75:d5:ab:
                    7a:34:03:1f:12:17:77:b4:5e:b5:13:ee:b7:d8:77:
                    4a:7d:5e:19:45:0c:4c:ce:aa:a9:2c:2b:fb:20:47:
                    e1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E1:9F:BC:63:FF:25:D9:CB:59:6E:E9:06:67:AF:0B:B2:37:3D:AF
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/FeGfvGP_JdnLWW7pBmevC7I3Pa8.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         dc:22:50:d8:2c:df:a0:72:91:11:58:6f:45:b8:3a:97:82:c4:
         8b:9c:9d:d9:b9:29:d8:d1:4d:5c:d1:09:4c:87:df:16:ea:0c:
         93:0f:56:12:37:26:dd:09:a0:f1:22:06:cb:13:4e:a8:f1:39:
         46:f1:53:8b:90:3e:c1:44:77:3d:40:31:8d:f9:69:01:64:4e:
         dd:ed:36:f5:88:48:4a:1f:91:18:12:ab:10:a5:cc:b1:44:6a:
         b5:8a:b9:9e:12:3f:1d:62:6b:36:25:a5:42:4d:24:c8:a3:35:
         14:df:f2:09:50:f8:e5:9b:14:6c:55:c4:2f:56:a8:20:21:05:
         fe:7a:c4:ef:80:5f:0a:00:76:38:2b:f3:af:88:36:63:eb:77:
         b8:2a:e4:dc:8d:3d:68:84:1d:9c:da:4c:a5:99:4f:0b:78:7c:
         1e:ca:7b:b1:8b:4c:bd:4a:c9:7e:3a:07:71:e4:a9:25:d9:07:
         55:ab:72:e6:a7:cd:2e:ac:01:14:5a:50:33:db:be:83:08:f9:
         6e:a9:0d:55:e2:61:e9:0e:2d:a9:14:de:5d:75:a0:ac:81:4a:
         d8:b8:fb:72:08:3d:13:9f:f6:9b:39:e1:6c:af:89:2a:8e:91:
         0a:18:8c:42:c4:40:e0:d4:71:c3:d9:79:f0:29:da:cf:5f:61:
         59:47:14:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:05:54 2024 by rpki-client on console-fra.rpki-client.org