Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e20313331323734.roa
File:                     34332e3232392e35312e302f32342d3234203d3e20313331323734.roa (raw, json)
Hash identifier:          gPAgm0UUJHlLWfIZjGGDBM5+XSf1QRiyaG4mby4Q/pU=
Subject key identifier:   B7:B5:14:87:AB:01:1A:A4:0E:0F:8F:6A:00:31:4B:20:9F:90:BD:DF
Certificate issuer:       /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
Certificate serial:       44A23B5D4751172DE714C07802BFD0936FAAC4E6
Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e20313331323734.roa
Signing time:             Thu 07 May 2026 15:56:18 +0000
ROA not before:           Thu 07 May 2026 15:51:18 +0000
ROA not after:            Thu 06 May 2027 15:56:18 +0000
asID:                     131274
IP address blocks:        43.229.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 10:32:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a2:3b:5d:47:51:17:2d:e7:14:c0:78:02:bf:d0:93:6f:aa:c4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339
        Validity
            Not Before: May  7 15:51:18 2026 GMT
            Not After : May  6 15:56:18 2027 GMT
        Subject: CN=B7B51487AB011AA40E0F8F6A00314B209F90BDDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:af:50:f7:83:5e:1a:cd:30:28:06:78:c8:46:
                    89:87:1a:d2:1a:04:ce:e3:fd:af:46:22:03:9a:78:
                    18:5b:e0:69:bf:20:48:1f:8f:73:ab:b5:c5:e8:34:
                    19:24:46:8a:c5:5e:c3:7b:61:27:ec:6a:00:69:c8:
                    d9:cd:da:d5:ba:7e:90:74:5e:eb:4c:d2:f0:87:1a:
                    9b:62:19:03:98:aa:38:9c:92:17:60:39:43:20:e9:
                    e1:a0:1a:7a:af:4f:7a:90:c2:9a:9c:6a:85:88:3b:
                    d9:11:1a:21:90:e9:c1:12:a1:cb:d5:c2:40:c5:5f:
                    6f:7d:68:ed:9a:29:dc:cf:4a:f5:3a:65:87:44:0f:
                    a8:77:d7:88:0b:20:dc:b6:42:db:76:e1:18:13:5c:
                    5e:c7:bf:a4:ef:05:ec:ab:bc:c3:03:9c:c0:a2:32:
                    e4:f7:5e:cb:95:40:cc:68:bc:ac:df:ad:d0:c7:63:
                    f7:3b:a7:97:5e:2a:ee:ec:02:4f:b4:e7:66:b4:75:
                    a7:fd:84:ab:96:b0:c2:37:67:a0:74:87:43:f0:81:
                    33:53:db:23:23:79:36:6d:99:d1:f6:fc:54:f2:70:
                    43:5c:ff:c7:14:d5:69:1a:35:08:6e:8e:e2:bc:bd:
                    a7:55:76:ef:41:fe:5b:c2:70:29:d9:cc:00:22:b0:
                    68:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:14:87:AB:01:1A:A4:0E:0F:8F:6A:00:31:4B:20:9F:90:BD:DF
            X509v3 Authority Key Identifier:
                keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e20313331323734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.229.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:42:cf:26:fc:94:26:68:44:c5:ff:d6:09:8b:4e:ae:8b:
         11:11:28:f7:33:4c:47:93:33:19:fc:68:02:88:2f:9d:e2:33:
         fd:87:9a:ba:0f:33:3e:24:7b:63:d7:66:de:7c:1c:ce:7a:c1:
         88:78:6d:29:32:9b:63:8e:e5:b9:45:fe:01:5d:d6:31:38:b7:
         d1:68:29:e7:89:d6:a1:02:f1:0b:22:94:6d:f0:51:91:0e:68:
         64:12:73:a5:5f:1f:97:84:94:bb:ff:62:25:54:20:d6:0c:91:
         c2:2c:86:64:9e:a3:c5:30:c1:77:ad:01:dd:04:d1:a7:23:e4:
         6a:48:42:81:5d:66:c0:a0:fd:8c:01:16:8a:74:8e:9a:66:04:
         68:af:36:dd:81:a4:00:0d:7e:a3:c9:82:79:1d:e1:64:bc:0c:
         e1:94:1f:91:c8:4d:bf:ea:c4:0e:d0:87:ad:e0:e1:e8:f1:86:
         8f:bc:a2:a6:34:93:ff:36:46:5b:d3:5a:0c:5d:b0:19:08:4d:
         00:be:52:5d:e2:e6:cf:20:00:e1:96:21:2f:db:3b:22:c1:fe:
         e7:97:40:84:3c:e0:d4:d0:84:6a:18:63:db:3a:ba:b7:e7:3c:
         6e:8b:76:0c:63:16:36:a9:ea:b5:df:8e:86:a3:1d:49:9a:fe:
         7a:b3:7e:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:14:00 2026 by rpki-client