Route Origin Authorization

$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/513/vlcsIiqWDHBCpmXWFez6rBF8ef0.roa
File:                     vlcsIiqWDHBCpmXWFez6rBF8ef0.roa (raw, json)
Hash identifier:          6TKjnjBBeNSj+NlV1G0htTy56tzxQt8dcu85ladLZzY=
Subject key identifier:   BE:57:2C:22:2A:96:0C:70:42:A6:65:D6:15:EC:FA:AC:11:7C:79:FD
Certificate issuer:       /CN=EFCA4677F321F4DF2317391F98E223646745E7EE
Certificate serial:       0FE0
Authority key identifier: EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE
Authority info access:    rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer
Subject info access:      rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vlcsIiqWDHBCpmXWFez6rBF8ef0.roa
Signing time:             Tue 02 Apr 2024 07:22:39 +0000
ROA not before:           Tue 02 Apr 2024 07:22:38 +0000
ROA not after:            Fri 31 Jan 2025 01:13:46 +0000
asID:                     55995
IP address blocks:        112.75.0.0/16 maxlen: 24
                          112.75.104.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4064 (0xfe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFCA4677F321F4DF2317391F98E223646745E7EE
        Validity
            Not Before: Apr  2 07:22:38 2024 GMT
            Not After : Jan 31 01:13:46 2025 GMT
        Subject: CN=BE572C222A960C7042A665D615ECFAAC117C79FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:67:5c:3f:23:5b:74:b9:04:12:e3:23:97:9a:
                    fa:89:79:06:ec:38:96:20:87:da:dd:2d:f6:1b:63:
                    31:bb:49:5d:fc:c9:dd:26:52:62:36:15:a2:5d:60:
                    68:4d:1c:e7:5a:78:3a:29:d9:22:bc:f4:7c:e2:26:
                    02:d2:01:fc:66:1e:0d:c3:a4:05:0e:13:0e:5e:23:
                    ef:02:61:28:b3:51:70:93:c4:ca:5b:e6:81:45:d1:
                    5f:6a:07:5b:8a:4e:f2:d6:6f:cd:f1:32:74:dc:d6:
                    e4:ec:be:36:91:c9:b9:d1:12:87:6e:e1:91:41:18:
                    43:f4:25:61:35:ea:f9:26:93:35:03:df:ec:1a:24:
                    d4:6a:ed:31:05:88:9b:a6:20:a4:fc:03:c4:1f:51:
                    65:9e:32:7d:81:62:75:2c:fc:12:62:17:4f:01:76:
                    36:4b:62:db:2c:d3:71:3d:a5:4a:c8:12:f6:b2:cf:
                    31:04:e9:cb:6f:6b:5e:87:9a:19:01:11:40:d4:be:
                    8e:3a:60:88:37:92:fb:bb:a8:74:c4:cf:3b:48:50:
                    50:98:b7:d6:b6:46:81:3b:3c:c5:e8:65:10:a5:e7:
                    d8:f3:41:01:b3:c2:f0:f3:d5:74:4a:21:45:5c:04:
                    b1:a4:38:48:5e:f5:b9:06:a9:17:9e:6b:60:22:c9:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:57:2C:22:2A:96:0C:70:42:A6:65:D6:15:EC:FA:AC:11:7C:79:FD
            X509v3 Authority Key Identifier:
                keyid:EF:CA:46:77:F3:21:F4:DF:23:17:39:1F:98:E2:23:64:67:45:E7:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/78pGd_Mh9N8jFzkfmOIjZGdF5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/78pGd_Mh9N8jFzkfmOIjZGdF5-4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/513/vlcsIiqWDHBCpmXWFez6rBF8ef0.roa
                RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.75.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:2c:dc:43:8b:6b:c3:7e:b5:cb:48:97:2e:28:64:e8:b8:
         33:58:85:3e:8f:81:08:44:9a:be:df:e6:6c:61:77:c6:14:50:
         2f:f7:be:1f:4a:23:d6:e8:0d:d4:2a:85:cb:9e:32:e0:04:4f:
         1f:64:a4:47:6a:54:e4:2c:b7:f7:86:59:8b:29:7a:4a:45:88:
         67:a8:19:c7:02:05:0f:22:80:62:0e:bd:8b:e8:3b:41:ad:af:
         79:28:a4:5e:99:ef:2b:90:ad:2b:48:06:03:5c:79:b6:a0:27:
         6d:31:f0:41:69:18:20:5b:c6:e6:51:b9:d6:12:85:53:73:0f:
         bc:70:60:ff:64:42:fa:67:8c:7b:9a:12:db:27:1c:37:d4:15:
         19:20:31:5b:86:ab:11:ba:7d:99:6f:89:ce:1d:20:26:1b:fe:
         bd:8a:42:55:68:d6:b8:a3:86:99:54:6b:7a:e2:3f:c0:33:f8:
         df:27:5c:33:ee:22:7e:ac:6b:24:55:b1:29:d7:e5:b7:12:a9:
         87:e7:38:7c:aa:43:b6:ba:bd:e5:5b:e9:42:be:08:f6:7c:90:
         26:92:c2:2c:7c:de:75:15:58:d6:fb:a5:f2:d7:ec:68:71:60:
         94:b7:47:fe:74:7c:d2:ee:e1:3c:42:0f:89:5a:18:35:50:dc:
         f2:06:b3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:04:03 2024 by rpki-client on console.sobornost.net