Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/xto5962_5Yz6OWGt2xc4-K3pyGU.roa
File:                     xto5962_5Yz6OWGt2xc4-K3pyGU.roa (raw, json)
Hash identifier:          wk+SIovNWfYGQ4mQcNXTrzLU9bPvn/P+FBHhcfZsvhU=
Subject key identifier:   C6:DA:39:F7:AD:BF:E5:8C:FA:39:61:AD:DB:17:38:F8:AD:E9:C8:65
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       186E
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xto5962_5Yz6OWGt2xc4-K3pyGU.roa
Signing time:             Thu 25 Apr 2024 02:53:42 +0000
ROA not before:           Thu 25 Apr 2024 02:53:42 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6254 (0x186e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 25 02:53:42 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=C6DA39F7ADBFE58CFA3961ADDB1738F8ADE9C865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:95:3d:3d:33:19:e5:8d:50:86:0a:04:85:
                    a6:c3:8b:67:c0:1c:81:9a:31:25:ef:40:8f:7a:c0:
                    d7:cb:3d:7f:e4:8a:b4:87:93:8d:fe:7b:f7:07:d6:
                    14:ec:fe:c6:de:2d:05:80:76:95:a9:3b:10:e3:9c:
                    6d:c8:ee:02:8f:0f:fb:2e:a8:9d:86:f6:95:96:12:
                    09:85:90:7d:d9:d0:d5:02:e8:0a:5b:81:13:c6:aa:
                    77:0e:f6:ac:69:3f:9b:30:4e:8a:ba:3d:11:79:c9:
                    90:26:a0:cc:dc:9e:2a:b0:88:2f:8b:13:96:5d:ec:
                    af:0b:c7:3e:df:bd:c6:86:aa:61:8a:93:58:b0:f2:
                    35:ea:6d:47:88:47:43:ad:42:ce:a8:63:c0:0c:8e:
                    12:f4:d4:37:c7:41:cc:c8:e3:3c:89:30:d7:54:b7:
                    d8:7c:d9:01:69:43:35:d4:70:dc:71:7b:db:19:3c:
                    53:b7:bb:7f:74:79:50:63:f5:a8:dc:4e:1b:e4:1a:
                    fb:6e:5a:62:b1:26:0f:4e:55:9a:49:41:93:17:ce:
                    0f:54:04:40:bf:7d:85:19:c2:8d:60:a1:a4:b3:2a:
                    0d:18:04:ee:88:e1:fc:6b:03:65:93:06:7f:f0:a7:
                    68:89:d7:ef:1c:5f:3c:ba:92:00:d6:d9:fe:f0:a0:
                    34:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:39:F7:AD:BF:E5:8C:FA:39:61:AD:DB:17:38:F8:AD:E9:C8:65
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/xto5962_5Yz6OWGt2xc4-K3pyGU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1f:c2:20:5f:65:7f:6a:3c:7f:f4:b7:56:21:54:49:1c:b9:3f:
         01:2d:d1:75:58:cd:7f:17:fa:cd:94:2a:6d:01:fa:b5:40:85:
         43:35:80:aa:b5:62:c9:34:48:c6:84:86:f5:84:96:62:67:93:
         9c:60:22:f8:cb:e7:c0:1a:e0:3e:fc:7e:f8:33:4d:7d:48:4a:
         18:33:fe:70:d8:fe:33:94:d2:ed:e1:f8:39:a7:80:97:e7:57:
         14:88:b6:55:b7:0b:41:92:ba:2f:7d:44:2f:35:00:af:dd:99:
         50:b1:1e:88:65:db:f2:f7:b3:08:31:e7:6f:bb:74:8d:1c:26:
         c3:5d:f2:2e:c5:1a:35:1d:18:f6:cb:e0:8c:ad:a8:83:65:76:
         e6:67:16:33:8b:70:98:f0:0b:d3:5c:82:13:e6:e7:1d:2e:ce:
         96:f6:4e:68:98:55:f9:9a:95:a7:c8:a7:e5:22:1d:36:d5:90:
         62:0a:0d:88:d3:fc:ac:7f:5c:4b:1b:10:34:93:3a:dd:30:4a:
         78:07:89:66:f7:56:ea:19:db:33:ee:0c:67:39:de:26:1f:6e:
         4d:bb:6e:3c:ba:bb:2f:71:52:b9:41:02:11:98:ab:3a:97:4b:
         d9:f4:56:39:57:c3:46:7a:c9:4e:97:bd:1e:3b:6d:d6:43:d6:
         4d:2d:90:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:27:23 2024 by rpki-client on console-ams.rpki-client.org