Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e20313331323734.roa
File:                     34332e3232392e34382e302f32342d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          XmZinmtgbfH/cG4VGLO8rS0y7I9DQ23y/0PEtfA0f0M=
Subject key identifier:   1E:FA:1B:3E:8C:F3:5B:49:95:E5:2E:D1:30:2C:2A:A7:DD:FE:D0:B9
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       511CA9B64516F124797EA47A5EC43D0EBDC0208C
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e20313331323734.roa
Signing time:             Thu 07 May 2026 15:56:17 +0000
ROA not before:           Thu 07 May 2026 15:51:17 +0000
ROA not after:            Thu 06 May 2027 15:56:17 +0000
asID:                     131274
IP address blocks:        43.229.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:1c:a9:b6:45:16:f1:24:79:7e:a4:7a:5e:c4:3d:0e:bd:c0:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:51:17 2026 GMT
            Not After : May  6 15:56:17 2027 GMT
        Subject: CN=1EFA1B3E8CF35B4995E52ED1302C2AA7DDFED0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6f:c8:96:80:79:8e:4a:48:50:2a:c5:e0:b0:
                    11:87:79:bb:d5:53:5e:c8:36:de:21:d7:79:95:22:
                    6c:42:ff:f7:31:ca:29:01:41:18:94:06:10:99:66:
                    db:8f:27:4a:d1:ad:00:c0:17:14:0b:b2:7b:d2:8b:
                    ee:aa:13:68:8e:5f:8e:5d:70:1b:9d:71:8f:1c:b5:
                    16:c9:9f:ae:76:49:36:60:26:6e:8e:db:45:25:69:
                    2c:24:99:76:65:f7:99:f1:46:6f:4b:11:fa:fb:a5:
                    ec:e0:ca:03:04:f8:5b:f9:3b:74:12:d3:79:36:10:
                    6e:09:56:eb:9a:5c:90:69:2e:59:7d:d5:70:08:72:
                    56:ac:8a:1c:54:b3:06:bb:67:a6:b2:b0:bc:18:34:
                    9a:23:67:94:44:ae:99:24:e5:7b:d5:93:c7:19:ea:
                    ab:a6:06:f2:8b:37:13:ce:04:f7:7f:de:06:ba:42:
                    f6:23:d3:75:7b:bf:e3:13:69:f2:96:c3:5e:da:c0:
                    2a:9e:65:44:e9:4d:09:c6:93:12:80:61:9b:a2:2a:
                    04:52:c2:0a:42:5b:2b:b1:db:bf:e6:0d:ff:da:b6:
                    19:5e:6f:29:ca:d3:ed:64:66:45:91:fc:a5:af:db:
                    09:79:77:36:43:1a:49:bf:31:a4:52:b7:b8:01:f8:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FA:1B:3E:8C:F3:5B:49:95:E5:2E:D1:30:2C:2A:A7:DD:FE:D0:B9
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:b5:ca:58:9e:db:38:55:fa:00:73:be:d4:32:e0:1a:af:
         44:74:8a:c1:31:d9:c9:9f:c7:27:95:03:4e:1e:a3:99:d6:c1:
         b3:b8:6b:e6:d2:6a:4d:17:48:cd:3a:65:aa:d9:43:fc:0e:3c:
         37:98:04:a4:e2:c4:c8:b7:d8:da:7b:f5:a2:32:d5:f0:cd:05:
         e2:6b:9a:02:06:6c:35:5d:49:40:b9:b4:e0:7e:63:68:ad:7a:
         f0:b3:6d:62:d2:f3:13:d5:a2:f6:9e:75:fc:24:22:d7:f6:9a:
         5a:65:04:86:98:1f:80:e1:57:eb:12:b5:5a:21:c6:03:54:fa:
         5e:fa:5f:82:13:3d:33:8e:a7:96:ec:d3:ee:d9:7e:8c:17:88:
         28:54:33:0e:5f:c1:a8:ac:ee:36:bf:e8:8e:20:57:08:a7:08:
         79:67:4b:d4:f8:77:1a:96:b9:15:ec:12:60:45:e0:87:ef:3b:
         88:96:30:16:77:4e:ea:df:f6:e9:45:4b:46:20:90:04:36:e5:
         89:42:79:b4:33:58:e9:0c:b1:db:fd:d9:5c:6a:6a:d2:90:a9:
         b9:7b:86:3b:49:e4:88:72:b4:a6:40:a4:7e:d8:68:11:1b:79:
         4a:54:ce:3e:01:c2:49:c3:fb:b0:c1:52:69:5d:d4:91:87:63:
         fc:63:2c:cd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:18:50 2026 by rpki-client