Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/613/b1ToWCXbt3_1plW1gt5eUTHTF5k.roa
File:                     b1ToWCXbt3_1plW1gt5eUTHTF5k.roa (raw, json)
Hash identifier:          70uXvfBVfaeYsc1V8K9CyZ7BzvnxxNMJT6dv3Ho6de0=
Subject key identifier:   6F:54:E8:58:25:DB:B7:7F:F5:A6:55:B5:82:DE:5E:51:31:D3:17:99
Certificate issuer:       /CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
Certificate serial:       06CD
Authority key identifier: 7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/b1ToWCXbt3_1plW1gt5eUTHTF5k.roa
Signing time:             Wed 04 May 2022 13:21:41 +0000
ROA not before:           Wed 04 May 2022 13:21:41 +0000
ROA not after:            Fri 27 May 2022 04:59:52 +0000
asID:                     19120
IP address blocks:        101.49.64.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F16EC61D214A7400D0064A187A13DCCC1E7854A
        Validity
            Not Before: May  4 13:21:41 2022 GMT
            Not After : May 27 04:59:52 2022 GMT
        Subject: CN=6F54E85825DBB77FF5A655B582DE5E5131D31799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:52:1f:07:90:67:d5:84:91:86:f1:df:74:a4:
                    74:34:93:f5:29:f2:13:71:d5:d5:b2:dd:2c:d3:97:
                    ba:bb:97:62:38:c0:e6:85:34:86:3b:c8:f7:f7:2b:
                    3b:a6:d5:61:97:c7:fd:be:58:c6:0d:17:9b:14:24:
                    98:e1:32:2c:8c:b4:7b:51:31:7b:ea:b7:8e:95:48:
                    15:1d:19:75:a2:44:71:d6:1a:ae:60:31:9b:df:1b:
                    17:95:7a:23:81:25:58:f7:c4:27:0a:6d:a6:46:38:
                    c7:74:25:6d:9e:85:95:c3:c0:b9:bc:05:03:47:d1:
                    c8:5b:03:0c:d7:f4:21:85:60:7a:f6:6d:b4:8f:84:
                    d3:f7:92:5c:95:89:df:86:1d:74:2d:f7:b3:6c:e7:
                    2e:27:da:94:5e:1e:fd:32:b8:70:d6:e3:ad:c1:83:
                    00:91:cd:fc:05:90:be:37:66:b7:f1:05:b6:96:f5:
                    a8:bb:e7:0e:bf:54:6d:87:7d:cd:66:e0:d6:0b:4c:
                    35:23:7c:07:6f:8a:8c:e1:15:57:ab:a9:25:4b:28:
                    aa:0c:5c:25:97:93:d1:70:89:62:3f:49:b5:31:d2:
                    ba:a2:a7:d3:1e:4e:b6:d0:ce:c3:21:f3:7d:96:ef:
                    e2:89:85:db:39:e8:48:a8:93:4e:1b:00:65:26:4d:
                    fc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:54:E8:58:25:DB:B7:7F:F5:A6:55:B5:82:DE:5E:51:31:D3:17:99
            X509v3 Authority Key Identifier:
                keyid:7F:16:EC:61:D2:14:A7:40:0D:00:64:A1:87:A1:3D:CC:C1:E7:85:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/fxbsYdIUp0ANAGShh6E9zMHnhUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/fxbsYdIUp0ANAGShh6E9zMHnhUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/613/b1ToWCXbt3_1plW1gt5eUTHTF5k.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.49.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:c5:e8:bc:8a:8a:ad:99:13:f1:b6:14:2d:af:2c:dc:ef:
         b2:71:67:2a:3f:53:3e:c3:6f:ee:3d:ea:27:99:3a:c7:0d:c0:
         66:7b:24:13:94:cc:22:6e:72:8f:9d:60:64:db:03:64:04:e5:
         10:cd:bf:0c:8a:ff:af:7e:47:56:33:b2:ab:44:d1:21:9e:f8:
         80:95:ce:ad:ac:eb:e9:c7:00:ac:b9:d9:fb:5f:6a:df:eb:0d:
         e3:36:82:bd:c3:21:b2:9b:67:55:23:33:09:b4:ed:c3:2c:0c:
         b6:e0:71:dd:f6:34:ec:d6:ce:9c:98:d6:64:68:a8:46:1c:da:
         fe:46:27:fd:1b:e9:52:c4:d3:ef:09:08:74:35:a8:18:68:92:
         86:40:bf:6d:bf:28:2e:a6:ad:52:96:77:2c:83:b7:83:75:0d:
         7f:52:07:91:fa:c1:d9:f8:9e:ff:0e:96:71:dd:c8:32:9b:e3:
         e3:13:a7:ed:25:82:ee:48:2a:93:a5:34:0a:f3:22:68:35:f9:
         b4:3d:ce:c5:a3:fd:38:ab:ec:6e:c5:a3:f9:22:e3:13:f2:32:
         6f:07:75:e8:43:6e:4a:7a:cf:a7:51:32:94:ac:d5:d5:54:59:
         71:4e:cf:93:f6:ee:c8:9b:cf:e8:e2:4d:da:23:4c:fb:8d:96:
         40:d1:3a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org