Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/7WkoS3Le3rztyC_IJd9GFGQlz_M.roa
File:                     7WkoS3Le3rztyC_IJd9GFGQlz_M.roa (raw, json)
Hash identifier:          9SiKi5sjp4PbzEMK8zOCU1uKu0dmMxgIVSq61RJetBI=
Subject key identifier:   ED:69:28:4B:72:DE:DE:BC:ED:C8:2F:C8:25:DF:46:14:64:25:CF:F3
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       143A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7WkoS3Le3rztyC_IJd9GFGQlz_M.roa
Signing time:             Sat 13 Apr 2024 21:53:15 +0000
ROA not before:           Sat 13 Apr 2024 21:53:15 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5178 (0x143a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr 13 21:53:15 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=ED69284B72DEDEBCEDC82FC825DF46146425CFF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d2:4d:dd:3a:8f:6d:99:3f:5b:83:e1:dd:d6:
                    54:af:43:73:56:24:82:66:fb:9b:61:7a:97:27:9c:
                    fe:6e:b0:75:8f:f0:eb:78:e2:37:72:12:23:38:49:
                    3c:5d:1e:9e:d8:a5:45:a3:f7:63:e2:05:3b:0a:bb:
                    45:b4:62:2b:10:74:9c:c5:96:91:6e:89:6f:43:b6:
                    c8:a2:dd:a5:85:73:23:fc:1d:4f:76:18:06:ea:00:
                    80:87:49:61:4e:9d:2c:6e:52:e4:65:df:a3:0b:5b:
                    89:82:04:4d:62:5e:b7:6a:44:c8:f6:f0:1a:c0:13:
                    50:5b:55:45:05:e8:5a:81:3e:c2:19:7e:fc:cb:0d:
                    e3:61:d8:96:ed:79:e5:aa:d9:54:81:83:42:2e:ea:
                    bb:ce:77:04:ec:b3:d9:a6:f7:be:b1:6f:b1:29:47:
                    af:b4:2e:9e:49:d7:54:12:8b:13:fe:45:8c:ff:33:
                    a6:74:5b:a4:a5:f3:30:cd:b6:af:fc:82:80:ed:37:
                    c1:b7:f8:c5:1b:cb:86:f1:fa:7a:15:3d:72:77:5f:
                    ea:e4:0d:a9:37:83:56:e1:12:61:79:9a:75:9a:23:
                    98:db:2d:09:f3:e4:59:c3:d8:e3:24:b8:57:b7:3c:
                    d1:72:ca:7a:0a:e8:d4:0d:11:9a:fa:e8:e6:73:42:
                    ae:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:69:28:4B:72:DE:DE:BC:ED:C8:2F:C8:25:DF:46:14:64:25:CF:F3
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/7WkoS3Le3rztyC_IJd9GFGQlz_M.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:a3:e5:bf:e1:59:e9:ff:ce:68:5d:12:af:f1:ff:bc:65:
         50:39:7a:e3:0d:00:1c:c7:ea:65:fd:06:ed:d0:19:80:9a:52:
         5d:a3:86:4d:2b:10:9c:44:e8:7c:b1:79:95:32:2c:3d:e9:bc:
         bb:c5:1d:35:65:da:00:24:a7:7f:20:78:4f:b3:d7:df:ce:d5:
         b4:62:94:72:9e:05:cf:4d:41:04:82:72:e7:e1:58:c9:ff:58:
         da:11:35:c4:98:f8:69:15:09:93:67:41:bc:07:a8:fe:c1:ce:
         5b:3a:ed:7f:90:69:87:f7:d8:81:bd:1e:c0:e0:b2:78:03:11:
         c8:60:30:29:04:75:f6:ea:ec:b2:07:1c:a5:f4:ad:aa:f7:22:
         d0:4f:52:ba:04:56:72:07:62:a4:b1:f5:52:64:29:ee:d0:50:
         e9:bb:f5:1b:7d:ae:8c:a5:dd:a9:c2:e2:a4:4c:e5:78:73:ea:
         b0:68:b4:71:f4:3a:f5:3e:56:f6:f5:e6:fc:1d:c3:73:b8:01:
         86:3f:61:06:50:e2:76:a2:d1:cd:14:21:7c:73:a8:7c:3d:0e:
         cb:c7:6a:c6:eb:7e:fd:a6:2b:6a:0f:d0:94:5a:13:db:5c:d6:
         9d:70:1f:18:c4:ad:a1:aa:e1:76:57:15:d0:7f:f4:f2:9a:86:
         51:fa:15:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 14 06:02:48 2024 by rpki-client on console.sobornost.net