Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35302e302f32342d3234203d3e20313331323734.roa
File:                     34332e3232392e35302e302f32342d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          a3u/LhA+DGLAdFqs0aTuSFzpipPQzEkkemy7dhA9ivk=
Subject key identifier:   11:45:CD:07:79:BB:98:0C:96:84:BE:C0:EB:83:A8:20:26:4C:7A:F5
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       218EBF1753E74DAC665D8693F9F1EF10D8A1E3A6
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35302e302f32342d3234203d3e20313331323734.roa
Signing time:             Thu 07 May 2026 15:56:17 +0000
ROA not before:           Thu 07 May 2026 15:51:17 +0000
ROA not after:            Thu 06 May 2027 15:56:17 +0000
asID:                     131274
IP address blocks:        43.229.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:37:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8e:bf:17:53:e7:4d:ac:66:5d:86:93:f9:f1:ef:10:d8:a1:e3:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:51:17 2026 GMT
            Not After : May  6 15:56:17 2027 GMT
        Subject: CN=1145CD0779BB980C9684BEC0EB83A820264C7AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ee:05:08:2e:9f:45:c9:6f:f6:98:0f:cd:68:
                    e0:67:a1:3e:f2:70:e9:00:7c:df:75:fb:bc:1a:07:
                    b2:a8:47:b3:0f:8e:4f:31:dc:ca:0f:27:7b:ee:87:
                    41:c5:ba:e6:0f:29:57:77:8f:70:c1:4d:a2:d8:c5:
                    32:c9:a9:02:38:0a:5a:17:16:df:93:30:dc:98:a5:
                    4b:90:93:4c:9a:fd:45:f0:69:fa:84:0d:c5:31:16:
                    77:a3:ba:bc:19:68:cd:70:fa:35:fb:cc:f1:d4:76:
                    1f:ec:f0:b8:28:69:09:ba:58:2d:3e:c3:82:04:0a:
                    d3:fb:51:44:50:20:ce:63:05:22:51:16:c7:08:07:
                    b6:e1:7d:05:3f:ec:fa:d7:e5:2d:e1:e2:74:f3:e1:
                    ee:a0:8b:4a:a7:0b:1d:d7:66:df:7b:74:4b:4a:62:
                    b9:89:81:8d:96:c5:ae:2a:ac:f4:74:7b:ee:19:25:
                    7f:1e:ba:3d:09:46:ad:a8:5e:d1:75:04:b3:fa:fe:
                    32:32:52:24:ee:af:08:86:13:06:6c:00:af:31:d4:
                    7f:73:7c:08:4e:2b:c5:e7:cc:83:a0:f3:f7:58:e0:
                    04:42:e2:8f:75:3e:a8:d2:84:2b:fc:78:b9:ad:05:
                    1f:c6:85:17:f7:1e:ad:f1:94:55:05:4c:57:b1:23:
                    38:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:CD:07:79:BB:98:0C:96:84:BE:C0:EB:83:A8:20:26:4C:7A:F5
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35302e302f32342d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:88:dc:a9:97:cb:d0:be:fa:01:0b:66:38:f7:b4:a5:47:a7:
         42:fc:42:07:8a:26:3a:c2:f1:7e:48:cb:d3:f8:3b:db:1c:5e:
         a0:cd:e8:31:94:29:86:dc:43:10:06:2c:f8:a1:bc:2c:1c:1f:
         55:bc:b7:e4:cf:75:f5:fb:ad:e4:96:9f:f8:7d:c7:a5:02:a7:
         a5:86:16:91:d9:fb:61:72:90:10:0a:af:4c:22:be:bf:5f:dd:
         60:77:89:92:26:e2:a0:4d:ce:cc:61:6a:af:e7:cd:63:ab:f8:
         5f:98:75:c9:d0:9a:7a:86:ba:9d:e3:1d:97:17:ab:5e:87:f5:
         bc:de:f4:63:ed:d7:bf:a2:c2:7d:bb:cb:3a:9f:3b:88:eb:30:
         34:68:cc:69:76:32:9d:b2:e7:da:46:4f:ad:a7:0d:d5:7a:8d:
         32:94:ba:de:5d:98:3e:05:6b:3d:2b:bb:9a:ce:92:e7:0f:bc:
         66:10:f0:dc:c6:33:48:df:b2:13:c0:e2:06:72:e8:36:d2:e5:
         3a:dc:3b:03:e8:dd:bb:98:86:ed:12:b3:55:15:b3:5b:67:99:
         5c:ea:69:b4:cb:35:1b:64:96:64:87:cf:e2:a3:aa:96:d7:91:
         32:68:b4:80:6a:0f:d2:17:3e:a0:1d:6c:6d:35:60:df:37:ef:
         9d:4b:2b:79
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 10:20:12 2026 by rpki-client