Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/817/rAnMPaFnJannhVuMcniV9I8MHSg.roa
File:                     rAnMPaFnJannhVuMcniV9I8MHSg.roa (raw, json)
Hash identifier:          nGmppdZOV7CPGa9MSNq0L3bhW30SLruzC+g3xej7xPQ=
Subject key identifier:   AC:09:CC:3D:A1:67:25:A9:E7:85:5B:8C:72:78:95:F4:8F:0C:1D:28
Certificate issuer:       /CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
Certificate serial:       0A56
Authority key identifier: 2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rAnMPaFnJannhVuMcniV9I8MHSg.roa
Signing time:             Tue 07 Jun 2022 10:05:38 +0000
ROA not before:           Tue 07 Jun 2022 10:05:38 +0000
ROA not after:            Wed 07 Jun 2023 03:34:43 +0000
asID:                     135377
IP address blocks:        106.75.192.0/24 maxlen: 24
                          106.75.193.0/24 maxlen: 24
                          106.75.194.0/24 maxlen: 24
                          106.75.195.0/24 maxlen: 24
                          106.75.196.0/24 maxlen: 24
                          106.75.197.0/24 maxlen: 24
                          106.75.198.0/24 maxlen: 24
                          106.75.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2646 (0xa56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A711AA7DC60049B0B0D884897E015B1171F37B9
        Validity
            Not Before: Jun  7 10:05:38 2022 GMT
            Not After : Jun  7 03:34:43 2023 GMT
        Subject: CN=AC09CC3DA16725A9E7855B8C727895F48F0C1D28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:2a:6a:bf:87:3c:0c:3d:a7:05:b7:d2:b3:
                    5a:7c:62:35:a8:31:13:bc:0c:9b:07:09:86:d6:4c:
                    02:34:bd:8e:bc:c3:ab:c7:00:e2:36:72:4e:b3:33:
                    44:8c:1c:f2:24:c4:9a:38:d4:08:e0:d5:1a:d6:24:
                    77:ee:a3:db:92:b3:2e:ef:ac:d9:74:5d:dc:88:78:
                    7b:9a:09:cf:e8:09:ab:2e:e1:a4:47:45:65:5d:1c:
                    fe:88:30:11:0c:20:0a:4f:77:2c:bd:57:68:06:21:
                    c8:45:9f:dc:12:43:e6:8f:88:aa:3d:c7:03:57:af:
                    ab:8c:23:14:b1:34:b9:a6:83:00:5a:cd:f0:ae:2e:
                    56:3e:90:05:62:e1:f6:86:b3:ad:af:2c:80:9a:53:
                    91:46:df:67:b0:1a:70:88:8f:08:e8:e9:cb:3e:86:
                    a5:eb:de:ff:de:7f:9d:f7:b7:67:84:27:18:c5:47:
                    9d:1e:90:5b:02:1e:65:81:bb:db:e3:16:26:dd:7a:
                    43:fe:ff:5b:5b:33:66:ed:78:5e:37:70:cb:b4:89:
                    98:e9:9c:06:66:bd:6b:66:3f:15:ed:88:89:e8:dc:
                    7c:8e:ba:a9:e6:43:7a:f2:c1:e7:b4:dc:d7:bc:c7:
                    3e:ff:e2:75:55:e3:9e:53:89:d6:7a:a5:d4:37:87:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:09:CC:3D:A1:67:25:A9:E7:85:5B:8C:72:78:95:F4:8F:0C:1D:28
            X509v3 Authority Key Identifier:
                keyid:2A:71:1A:A7:DC:60:04:9B:0B:0D:88:48:97:E0:15:B1:17:1F:37:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/KnEap9xgBJsLDYhIl-AVsRcfN7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/KnEap9xgBJsLDYhIl-AVsRcfN7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/817/rAnMPaFnJannhVuMcniV9I8MHSg.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.75.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:82:f7:09:04:91:3c:23:77:89:98:22:00:26:1a:e6:15:
         72:8f:67:38:6b:15:db:89:f3:16:ee:cc:e6:68:70:32:01:5d:
         ff:07:b1:81:49:c2:50:60:11:48:c5:2c:08:85:dd:3e:05:f0:
         ae:09:a8:b7:ee:12:6f:08:b4:83:b8:64:90:09:9b:09:60:e0:
         97:b6:57:8a:83:60:3e:cd:66:9b:9b:5f:79:46:a5:6d:ff:f1:
         2d:37:51:57:45:dc:2a:83:eb:b9:19:8b:1a:a6:3c:8d:20:38:
         17:02:c1:54:c7:98:0f:da:69:cd:a2:a7:45:83:33:c1:7d:d8:
         38:d1:39:28:3a:b9:4b:5c:c3:be:7e:88:06:9e:e4:d1:b2:1b:
         6d:6d:03:04:0b:c3:ac:cc:db:9a:c7:4d:6a:14:c7:d6:09:ac:
         ec:0b:5b:6e:7a:63:ed:e4:e0:20:7d:d0:30:c7:84:4b:1e:8a:
         dc:8c:14:4d:a8:e1:70:a9:0a:b0:c1:af:b7:4d:cb:92:61:c0:
         01:16:fc:9b:3c:1a:92:fe:92:27:2b:5b:20:49:e5:be:57:d1:
         79:44:d1:a5:5d:b0:41:8b:95:27:7e:f7:d6:7d:2f:f0:ab:77:
         47:4a:54:be:95:ad:2b:61:39:ad:e2:65:d5:46:b7:3d:65:b9:
         d8:f8:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:24 2023 by rpki-client on console-fra.rpki-client.org