Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/LsEtfn3NizqsQHS9GuwWbs3M9tc.roa
File:                     LsEtfn3NizqsQHS9GuwWbs3M9tc.roa (raw, json)
Hash identifier:          H19wHyG2FL4K8IHbB+aNAi3rO9s/5eVvF/EhqxJ8sDw=
Subject key identifier:   2E:C1:2D:7E:7D:CD:8B:3A:AC:40:74:BD:1A:EC:16:6E:CD:CC:F6:D7
Certificate issuer:       /CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
Certificate serial:       1431
Authority key identifier: 2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LsEtfn3NizqsQHS9GuwWbs3M9tc.roa
Signing time:             Sun 12 Nov 2023 08:26:17 +0000
ROA not before:           Sun 12 Nov 2023 08:26:17 +0000
ROA not after:            Tue 08 Oct 2024 00:16:33 +0000
asID:                     4143
IP address blocks:        43.254.128.0/22 maxlen: 24
                          103.203.100.0/22 maxlen: 24
                          103.236.232.0/22 maxlen: 24
                          115.31.68.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5169 (0x1431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E83EB0E1CB7B4A7617A04AD7A82629D98B95B94
        Validity
            Not Before: Nov 12 08:26:17 2023 GMT
            Not After : Oct  8 00:16:33 2024 GMT
        Subject: CN=2EC12D7E7DCD8B3AAC4074BD1AEC166ECDCCF6D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fe:c9:90:7b:6f:25:80:fe:77:c8:ea:9d:20:
                    be:e8:f3:a0:c3:54:5f:c8:87:1c:c5:7f:83:f2:87:
                    2f:b8:3a:4d:dd:9a:04:51:91:ce:2c:fe:88:a1:1a:
                    ff:46:0e:ac:d8:35:7f:6b:5a:86:de:d0:3d:52:1b:
                    33:aa:c1:c3:75:06:39:04:71:6c:7a:62:df:dd:04:
                    70:ba:99:73:64:2a:03:8e:7b:45:e1:14:d3:e1:fe:
                    39:61:27:15:70:c2:66:8f:4d:b6:d3:8a:60:c7:02:
                    f0:96:db:19:16:c9:4d:8c:24:41:96:5a:92:f5:f2:
                    a7:14:04:17:4f:2a:45:cf:fa:14:40:9d:27:d0:25:
                    3d:0c:b3:49:7f:5a:79:41:31:b6:04:cb:c5:fa:e1:
                    63:28:d4:0a:19:0c:ae:d8:a1:4e:6c:d9:ae:56:fe:
                    cf:69:66:39:8e:01:de:7e:f8:56:f4:43:17:61:f6:
                    3b:01:6a:6a:be:86:d3:a8:a0:66:ef:bd:c7:cf:45:
                    b6:c9:bb:ad:9d:9f:85:f8:08:02:4e:2a:bd:e6:ff:
                    aa:27:61:c2:1a:03:1b:f1:b1:9f:7f:52:d6:f8:dc:
                    bb:06:79:93:5e:81:33:c7:1f:5a:5a:82:7b:61:d3:
                    d8:02:79:14:20:9d:3c:49:90:c6:aa:ec:6f:90:ca:
                    55:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:2D:7E:7D:CD:8B:3A:AC:40:74:BD:1A:EC:16:6E:CD:CC:F6:D7
            X509v3 Authority Key Identifier:
                keyid:2E:83:EB:0E:1C:B7:B4:A7:61:7A:04:AD:7A:82:62:9D:98:B9:5B:94

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LoPrDhy3tKdhegSteoJinZi5W5Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/LoPrDhy3tKdhegSteoJinZi5W5Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/LsEtfn3NizqsQHS9GuwWbs3M9tc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.128.0/22
                  103.203.100.0/22
                  103.236.232.0/22
                  115.31.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:d4:c7:c3:55:b8:80:49:37:74:18:5a:66:5d:87:cc:aa:67:
         d1:f1:cb:89:e9:31:97:85:cb:d4:93:70:57:8f:b7:f2:0d:ea:
         64:8b:62:38:e1:72:49:20:2e:d8:ce:df:6d:22:94:a0:3e:0a:
         d0:36:82:b7:aa:39:3a:a3:60:fb:c9:c1:9c:6e:6f:08:39:50:
         9c:94:24:a0:ab:c0:18:02:ba:f3:00:23:ca:6f:21:b0:95:17:
         43:ac:42:54:be:d0:d5:82:c8:5a:0b:39:73:d7:83:37:69:65:
         a8:2d:02:51:17:10:e3:5e:4a:bc:4d:5f:95:51:5a:fc:2e:c8:
         c9:91:0a:30:38:f2:92:6e:b5:22:1b:20:64:f9:31:5b:f8:f4:
         16:4b:8e:a5:31:84:34:a1:99:b1:65:1f:5f:91:43:4a:19:8a:
         34:9a:d9:66:52:ea:14:3f:e7:a2:61:f8:92:e2:a6:d0:ee:74:
         b4:1b:6e:28:b0:8b:60:5f:e3:1f:81:ff:1e:43:7a:46:f1:ee:
         2f:39:0e:60:84:18:cc:7a:91:90:ea:c6:4d:cf:5d:e5:b1:90:
         7d:27:1f:ec:a4:28:fb:63:d0:f1:cb:0f:c7:81:21:f8:3a:73:
         93:eb:7e:16:42:4e:6a:5f:1b:cc:eb:4d:a0:15:c2:ea:85:92:
         74:78:19:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 11:57:16 2024 by rpki-client on console-ams.rpki-client.org