Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/Qns_XvnKHaua43gwhrJ39MK6Nxc.roa
File:                     Qns_XvnKHaua43gwhrJ39MK6Nxc.roa (raw, json)
Hash identifier:          SkTtrMVlEWvhh+hmfNo+uMkMmtwI+zOsY9mAoVpDD8s=
Subject key identifier:   42:7B:3F:5E:F9:CA:1D:AB:9A:E3:78:30:86:B2:77:F4:C2:BA:37:17
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       101A
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Qns_XvnKHaua43gwhrJ39MK6Nxc.roa
Signing time:             Tue 02 Apr 2024 21:52:44 +0000
ROA not before:           Tue 02 Apr 2024 21:52:44 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4122 (0x101a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr  2 21:52:44 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=427B3F5EF9CA1DAB9AE3783086B277F4C2BA3717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:38:74:ef:89:ac:d0:1d:5c:fc:12:2a:78:
                    93:18:7d:37:f8:f0:f2:7c:97:ab:09:41:ce:25:5e:
                    48:ab:d5:5c:c2:bc:99:2e:64:eb:6b:5d:6c:5f:72:
                    25:79:8c:77:60:95:da:79:aa:09:ba:b4:16:72:3f:
                    31:13:7b:13:41:2b:8d:6f:0d:81:08:53:d4:bc:d0:
                    51:61:a8:e7:ac:e2:22:8d:3c:38:80:83:a6:b6:6c:
                    cf:a3:19:f0:e8:d8:4e:fe:98:57:19:16:d4:7b:3f:
                    5c:ff:65:4d:a7:74:66:48:6b:9f:7c:f3:e2:0a:ef:
                    ea:44:47:1f:82:9a:56:40:ac:2c:87:0f:ba:c3:c1:
                    85:e0:b2:e9:27:42:c4:f2:ac:97:b2:06:0d:5c:69:
                    55:9a:43:83:d1:d1:e5:c5:ee:31:a1:5c:aa:ef:ee:
                    bc:f9:08:31:75:2c:38:24:70:8e:d4:85:dc:c0:65:
                    0f:41:7b:a1:5a:06:6c:48:e9:78:f4:ba:b7:19:71:
                    7b:a5:76:95:df:ae:fe:ff:97:60:f9:25:a0:3b:a2:
                    b4:dc:cc:39:a5:07:aa:ea:4c:b9:37:d0:fe:f7:44:
                    5f:9f:91:b6:db:8c:29:61:e9:71:fd:8d:7a:9a:04:
                    6f:ce:58:0a:2d:df:a6:b9:1c:26:79:4e:3a:85:ec:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7B:3F:5E:F9:CA:1D:AB:9A:E3:78:30:86:B2:77:F4:C2:BA:37:17
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/Qns_XvnKHaua43gwhrJ39MK6Nxc.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:c9:f1:38:d6:7a:0c:bd:78:26:09:13:67:04:99:24:3f:62:
         71:49:36:cc:c8:ee:9a:a2:df:de:cc:86:11:55:26:74:5d:72:
         12:80:17:71:1e:6d:3b:9a:b7:15:18:d4:97:eb:b0:c1:bd:2d:
         87:32:8d:d7:c2:4b:06:d9:35:af:8f:72:a8:e4:30:ec:f3:a4:
         54:f9:3a:ad:6e:6a:63:39:c8:b4:03:c1:1b:2f:0d:e6:27:3f:
         e8:01:ec:b2:12:f6:2d:02:af:64:5f:a2:50:05:00:e5:16:52:
         f1:af:44:82:2d:ae:3b:f4:82:c2:45:62:02:a8:58:01:b5:ce:
         3e:24:67:ea:b5:df:f9:68:78:4b:3a:e9:6b:8c:89:58:0c:f4:
         33:4f:cb:83:e3:20:4f:88:ab:5d:14:4b:51:26:b2:8b:8d:76:
         f8:cd:99:e3:0b:90:65:db:4b:11:e5:07:9b:dd:51:79:4c:75:
         18:14:de:ec:d6:f4:bd:7f:82:18:a6:a6:d7:85:d6:a9:6c:2b:
         ca:cb:d2:06:ba:52:67:bc:03:fc:87:53:57:35:06:04:80:90:
         b4:06:68:e9:9d:0d:10:47:00:16:2c:26:4f:b9:a1:a6:33:20:
         f9:c7:12:27:39:2c:a8:84:7b:9a:c2:89:c2:ff:8b:74:7f:77:
         fa:3d:c9:fc
-----BEGIN CERTIFICATE-----
MIIE1DCCA7ygAwIBAgICEBowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUZD
QTQ2NzdGMzIxRjRERjIzMTczOTFGOThFMjIzNjQ2NzQ1RTdFRTAeFw0yNDA0MDIy
MTUyNDRaFw0yNTAxMzEwMTEzNDZaMDMxMTAvBgNVBAMTKDQyN0IzRjVFRjlDQTFE
QUI5QUUzNzgzMDg2QjI3N0Y0QzJCQTM3MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDnhjh074ms0B1c/BIqeJMYfTf48PJ8l6sJQc4lXkir1VzCvJku
ZOtrXWxfciV5jHdgldp5qgm6tBZyPzETexNBK41vDYEIU9S80FFhqOes4iKNPDiA
g6a2bM+jGfDo2E7+mFcZFtR7P1z/ZU2ndGZIa5988+IK7+pERx+CmlZArCyHD7rD
wYXgsuknQsTyrJeyBg1caVWaQ4PR0eXF7jGhXKrv7rz5CDF1LDgkcI7UhdzAZQ9B
e6FaBmxI6Xj0urcZcXuldpXfrv7/l2D5JaA7orTczDmlB6rqTLk30P73RF+fkbbb
jClh6XH9jXqaBG/OWAot36a5HCZ5TjqF7KTPAgMBAAGjggHwMIIB7DAdBgNVHQ4E
FgQUQns/XvnKHaua43gwhrJ39MK6NxcwHwYDVR0jBBgwFoAU78pGd/Mh9N8jFzkf
mOIjZGdF5+4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEz
Lzc4cEdkX01oOU44akZ6a2ZtT0lqWkdkRjUtNC5jcmwwYwYIKwYBBQUHAQEEVzBV
MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz
RDAwMDAvNzhwR2RfTWg5TjhqRnprZm1PSWpaR2RGNS00LmNlcjAOBgNVHQ8BAf8E
BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw
a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTEzL1Fuc19Ydm5LSGF1YTQz
Z3dockozOU1LNk54Yy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p
Yy5jbi9ycmRwL25vdGlmeS54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBwSzANBgkqhkiG9w0BAQsFAAOCAQEA1MnxONZ6DL14JgkTZwSZJD9icUk2zMju
mqLf3syGEVUmdF1yEoAXcR5tO5q3FRjUl+uwwb0thzKN18JLBtk1r49yqOQw7POk
VPk6rW5qYznItAPBGy8N5ic/6AHsshL2LQKvZF+iUAUA5RZS8a9Egi2uO/SCwkVi
AqhYAbXOPiRn6rXf+Wh4Szrpa4yJWAz0M0/Lg+MgT4irXRRLUSayi412+M2Z4wuQ
ZdtLEeUHm91ReUx1GBTe7Nb0vX+CGKam14XWqWwrysvSBrpSZ7wD/IdTVzUGBICQ
tAZo6Z0NEEcAFiwmT7mhpjMg+ccSJzksqIR7msKJwv+LdH93+j3J/A==
-----END CERTIFICATE-----
Generated at Wed Apr 3 06:11:29 2024 by rpki-client on console.sobornost.net