Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/IoNzRXiLu-CzpJvYNbSQLLUxMKU.roa
File:                     IoNzRXiLu-CzpJvYNbSQLLUxMKU.roa (raw, json)
Hash identifier:          PIEy//mhnzqnAR/bxmo/k0InbtFWx0kdfpGpdb3163Y=
Subject key identifier:   22:83:73:45:78:8B:BB:E0:B3:A4:9B:D8:35:B4:90:2C:B5:31:30:A5
Certificate issuer:       /CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
Certificate serial:       46
Authority key identifier: E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/IoNzRXiLu-CzpJvYNbSQLLUxMKU.roa
Signing time:             Sat 08 May 2021 05:42:30 +0000
ROA not before:           Sat 08 May 2021 05:42:30 +0000
ROA not after:            Thu 28 Apr 2022 06:28:58 +0000
asID:                     17621
IP address blocks:        106.75.208.0/20 maxlen: 20
                          106.75.224.0/20 maxlen: 20
                          106.75.240.0/20 maxlen: 20
                          113.31.96.0/20 maxlen: 20
                          113.31.112.0/20 maxlen: 20
                          113.31.144.0/20 maxlen: 20
                          113.31.160.0/20 maxlen: 20
                          113.31.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5D7C1B0C298ED183371C9DFA49D5B5FCDDE984F
        Validity
            Not Before: May  8 05:42:30 2021 GMT
            Not After : Apr 28 06:28:58 2022 GMT
        Subject: CN=22837345788BBBE0B3A49BD835B4902CB53130A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8d:e2:c1:83:ee:4d:ab:47:07:c4:94:6e:76:
                    ef:ce:07:bd:59:6b:6c:58:e3:75:56:4b:e5:ab:a4:
                    68:ca:27:30:6f:d2:80:12:28:da:79:c0:07:8d:bb:
                    27:5d:a7:50:a7:b4:2a:e0:e9:0a:ad:31:c0:d2:5d:
                    77:98:60:48:0f:f0:e9:86:4b:d0:71:ec:84:e4:8a:
                    fa:c2:2c:d0:84:a9:e3:48:ae:74:90:e3:49:16:bb:
                    59:95:32:9a:4b:45:37:0a:85:44:e7:05:06:fb:9c:
                    75:9c:5f:aa:9e:5a:f9:98:75:d4:45:9f:db:f7:f7:
                    44:8f:c2:42:61:89:a2:6f:c2:f0:8f:17:ee:92:a7:
                    2c:9c:9d:8d:a2:df:03:11:9e:1e:8d:28:61:d1:3d:
                    23:90:33:02:7d:0f:4b:25:dd:99:6d:08:75:15:7b:
                    52:d1:11:8a:c7:f1:a8:ec:34:c4:af:f4:f0:06:a5:
                    4e:9b:73:38:0d:38:31:ac:ca:11:38:6f:e8:98:7b:
                    62:d0:07:ec:3d:db:e2:3a:72:92:19:cb:7a:a8:7e:
                    45:be:6e:5f:ea:fd:6c:80:01:77:f6:be:23:f1:92:
                    d6:69:5e:b3:cf:30:5d:e9:71:33:60:2d:5b:bc:59:
                    55:77:a3:10:d8:1a:7f:59:63:7a:3b:30:9d:ff:91:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:83:73:45:78:8B:BB:E0:B3:A4:9B:D8:35:B4:90:2C:B5:31:30:A5
            X509v3 Authority Key Identifier:
                keyid:E5:D7:C1:B0:C2:98:ED:18:33:71:C9:DF:A4:9D:5B:5F:CD:DE:98:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/5dfBsMKY7RgzccnfpJ1bX83emE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/5dfBsMKY7RgzccnfpJ1bX83emE8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/IoNzRXiLu-CzpJvYNbSQLLUxMKU.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.208.0-106.75.255.255
                  113.31.96.0/19
                  113.31.144.0-113.31.191.255

    Signature Algorithm: sha256WithRSAEncryption
         76:18:51:5d:49:a9:59:ff:39:b8:c8:f6:2a:a3:c8:47:3c:07:
         d5:ed:3b:e6:f2:91:49:28:ef:5a:be:34:a7:53:b3:88:30:54:
         8f:ec:10:9e:0d:ca:9d:56:26:8e:6b:2e:0d:36:27:08:a4:d5:
         de:58:ea:52:0e:77:e9:43:70:33:ce:84:67:b5:07:31:ef:d4:
         49:09:73:df:72:1e:4a:db:cb:a9:4c:cf:39:96:b6:f2:16:bd:
         ca:0d:73:d3:cf:7e:a3:6f:b5:e8:b5:b1:f8:1a:96:04:c7:e9:
         99:31:b1:75:24:6b:92:ff:d2:f8:06:2d:83:d3:fc:1a:de:9b:
         a6:79:78:77:12:89:a1:86:ff:f5:dd:cf:08:6b:ff:a3:24:f4:
         cf:9f:cf:3f:af:3d:d7:97:3c:6a:7e:96:6d:05:d5:de:10:fb:
         bc:b2:06:11:47:1e:eb:c6:9d:72:13:dd:6c:92:e0:5f:da:e3:
         b6:54:55:87:a4:33:86:6d:ee:80:40:c9:6f:b2:6c:fa:4e:1e:
         f2:17:b7:24:d1:b2:33:11:8a:ee:21:56:a7:5d:b3:63:59:0d:
         d4:26:14:48:b7:e8:75:0a:4c:50:41:49:4f:bd:59:f6:32:5d:
         f1:87:6c:90:6a:1a:bc:25:06:2b:17:e2:5a:43:5c:db:ec:0b:
         1a:ff:c8:ea
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNUQ3
QzFCMEMyOThFRDE4MzM3MUM5REZBNDlENUI1RkNEREU5ODRGMB4XDTIxMDUwODA1
NDIzMFoXDTIyMDQyODA2Mjg1OFowMzExMC8GA1UEAxMoMjI4MzczNDU3ODhCQkJF
MEIzQTQ5QkQ4MzVCNDkwMkNCNTMxMzBBNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJeN4sGD7k2rRwfElG52784HvVlrbFjjdVZL5aukaMonMG/SgBIo
2nnAB427J12nUKe0KuDpCq0xwNJdd5hgSA/w6YZL0HHshOSK+sIs0ISp40iudJDj
SRa7WZUymktFNwqFROcFBvucdZxfqp5a+Zh11EWf2/f3RI/CQmGJom/C8I8X7pKn
LJydjaLfAxGeHo0oYdE9I5AzAn0PSyXdmW0IdRV7UtERisfxqOw0xK/08AalTptz
OA04MazKEThv6Jh7YtAH7D3b4jpykhnLeqh+Rb5uX+r9bIABd/a+I/GS1mles88w
XelxM2AtW7xZVXejENgaf1ljejswnf+RRDECAwEAAaOCAgwwggIIMB0GA1UdDgQW
BBQig3NFeIu74LOkm9g1tJAstTEwpTAfBgNVHSMEGDAWgBTl18GwwpjtGDNxyd+k
nVtfzd6YTzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFwGA1UdHwRVMFMwUaBP
oE2GS3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MTcv
NWRmQnNNS1k3Umd6Y2NuZnBKMWJYODNlbUU4LmNybDBjBggrBgEFBQcBAQRXMFUw
UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE
MDAwMC81ZGZCc01LWTdSZ3pjY25mcEoxYlg4M2VtRTguY2VyMA4GA1UdDwEB/wQE
AwIHgDCBnAYIKwYBBQUHAQsEgY8wgYwwVwYIKwYBBQUHMAuGS3JzeW5jOi8vcnBr
aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC84MTcvSW9OelJYaUx1LUN6cEp2
WU5iU1FMTFV4TUtVLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNubmlj
LmNuL3JyZHAvbm90aWZ5LnhtbDA6BggrBgEFBQcBBwEB/wQrMCkwJwQCAAEwITAL
AwQEakvQAwMCakgDBAVxH2AwDAMEBHEfkAMEBnEfgDANBgkqhkiG9w0BAQsFAAOC
AQEAdhhRXUmpWf85uMj2KqPIRzwH1e075vKRSSjvWr40p1OziDBUj+wQng3KnVYm
jmsuDTYnCKTV3ljqUg536UNwM86EZ7UHMe/USQlz33IeStvLqUzPOZa28ha9yg1z
089+o2+16LWx+BqWBMfpmTGxdSRrkv/S+AYtg9P8Gt6bpnl4dxKJoYb/9d3PCGv/
oyT0z5/PP68915c8an6WbQXV3hD7vLIGEUce68adchPdbJLgX9rjtlRVh6Qzhm3u
gEDJb7Js+k4e8he3JNGyMxGK7iFWp12zY1kN1CYUSLfodQpMUEFJT71Z9jJd8Yds
kGoavCUGKxfiWkNc2+wLGv/I6g==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:19 2023 by rpki-client on console-ams.rpki-client.org