Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/7JtPEw__eJ3rHvVmnEyURK-2H-w.roa
File:                     7JtPEw__eJ3rHvVmnEyURK-2H-w.roa (raw, json)
Hash identifier:          sUIqJaZse+SBwGAkHS6QaiHqwRDd+UnQ0mfPaJXGV/g=
Subject key identifier:   EC:9B:4F:13:0F:FF:78:9D:EB:1E:F5:66:9C:4C:94:44:AF:B6:1F:EC
Certificate issuer:       /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
Certificate serial:       0C
Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7JtPEw__eJ3rHvVmnEyURK-2H-w.roa
Signing time:             Wed 01 Jun 2022 07:07:36 +0000
ROA not before:           Wed 01 Jun 2022 07:07:36 +0000
ROA not after:            Thu 01 Jun 2023 06:58:54 +0000
asID:                     24373
IP address blocks:        45.252.8.0/22 maxlen: 24
                          45.252.12.0/22 maxlen: 24
                          45.252.16.0/22 maxlen: 24
                          45.252.20.0/22 maxlen: 24
                          45.252.24.0/22 maxlen: 24
                          45.252.28.0/22 maxlen: 24
                          45.252.32.0/22 maxlen: 24
                          45.252.36.0/22 maxlen: 24
                          45.252.40.0/22 maxlen: 24
                          45.252.44.0/22 maxlen: 24
                          45.252.48.0/22 maxlen: 24
                          45.252.100.0/22 maxlen: 24
                          45.252.144.0/22 maxlen: 24
                          103.220.248.0/22 maxlen: 24
                          103.220.252.0/22 maxlen: 24
                          103.221.0.0/22 maxlen: 24
                          103.221.4.0/22 maxlen: 24
                          103.221.8.0/22 maxlen: 24
                          103.221.12.0/22 maxlen: 24
                          103.221.16.0/22 maxlen: 24
                          103.221.20.0/22 maxlen: 24
                          103.221.24.0/22 maxlen: 24
                          103.221.28.0/22 maxlen: 24
                          103.221.32.0/22 maxlen: 24
                          103.221.36.0/22 maxlen: 24
                          103.221.40.0/22 maxlen: 24
                          103.221.44.0/22 maxlen: 24
                          103.221.48.0/22 maxlen: 24
                          103.221.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85
        Validity
            Not Before: Jun  1 07:07:36 2022 GMT
            Not After : Jun  1 06:58:54 2023 GMT
        Subject: CN=EC9B4F130FFF789DEB1EF5669C4C9444AFB61FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:0a:f1:de:98:0c:c0:3e:dc:de:e1:07:69:
                    68:f1:8f:48:58:12:42:83:80:6f:31:dc:7a:94:a3:
                    6a:87:10:84:0a:e8:d7:c2:db:ee:f8:f9:ce:c3:71:
                    0f:0c:69:bf:12:79:af:6a:cc:6e:d3:12:d8:5b:be:
                    66:c5:b2:d6:3c:2d:91:3a:92:f7:74:37:d2:92:ce:
                    0e:74:80:5c:74:95:32:74:96:5e:63:73:66:24:ac:
                    eb:8d:ec:fe:aa:4f:e3:2e:27:88:6d:8f:3e:4f:80:
                    fc:17:f1:4d:36:04:3d:b8:38:c1:ff:57:ce:db:50:
                    fe:56:f0:ce:e4:b8:96:dd:25:e5:8f:d0:11:96:43:
                    f1:7d:d9:45:8d:5a:69:0e:0a:d6:d5:b8:7d:13:d3:
                    6b:18:65:19:5e:0c:0e:f0:1d:6f:95:e8:61:ea:39:
                    85:27:a2:15:5f:36:a4:ba:5f:ab:10:31:80:fa:70:
                    5e:8e:67:cf:b9:16:61:7b:df:4a:7e:e3:51:fa:96:
                    a6:8b:8f:a8:c9:eb:e0:c6:65:75:99:00:0d:a7:9b:
                    35:4b:74:16:e8:58:e6:72:1d:63:04:19:32:35:00:
                    f9:19:79:d1:ec:0a:27:cb:66:90:31:6d:f1:c8:f7:
                    bd:7d:24:ce:fd:12:21:42:09:62:60:fa:3d:68:71:
                    fc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9B:4F:13:0F:FF:78:9D:EB:1E:F5:66:9C:4C:94:44:AF:B6:1F:EC
            X509v3 Authority Key Identifier:
                keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/7JtPEw__eJ3rHvVmnEyURK-2H-w.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.252.8.0-45.252.51.255
                  45.252.100.0/22
                  45.252.144.0/22
                  103.220.248.0-103.221.51.255
                  103.221.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:01:7d:d0:b2:98:81:ac:5a:09:41:7d:63:f6:f5:ce:05:54:
         27:00:f0:20:9c:85:e0:08:c6:eb:c1:91:e5:16:d4:4d:d5:ab:
         38:f7:bc:67:51:93:48:3d:83:60:db:a1:da:3a:69:2d:96:83:
         8d:03:5c:90:fe:0f:d7:ca:f9:ba:f9:33:a7:17:ea:57:a7:28:
         ec:76:c5:5c:26:e5:fc:45:1a:c2:52:1c:91:96:d7:93:c2:61:
         89:6f:ff:55:68:ab:e5:a5:6b:1e:37:57:ab:15:f5:db:aa:7d:
         98:46:cc:b3:94:c1:fc:6e:fa:31:92:97:6d:b4:b8:f4:1a:87:
         08:10:84:24:b3:62:e8:7b:49:87:f0:c0:77:70:3b:d7:bb:ea:
         83:f1:bb:f7:5f:b0:87:06:37:7b:7d:c5:77:d9:8d:91:cb:b0:
         bc:2a:ad:ef:7d:42:4f:dc:c6:d7:53:c4:c2:e3:e3:8c:d3:53:
         cd:1f:4d:d4:8d:1d:33:6a:ce:e2:f1:1a:36:0d:6c:d6:e3:ef:
         35:7d:e8:34:52:6b:85:22:c9:15:f2:a8:3c:8b:54:31:c4:3f:
         fc:85:46:cb:2b:8e:c6:eb:37:68:ee:bc:e3:5b:df:cd:ad:93:
         3b:d6:aa:aa:62:f6:ae:51:1c:ee:31:6e:97:fb:16:81:8a:d4:
         42:11:6d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:22 2023 by rpki-client on console-fra.rpki-client.org