Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e203536303436.roa
File:                     34332e3234382e3139322e302f32302d3230203d3e203536303436.roa (raw, json)
Hash identifier:          o7/MRoJXUrn+DF1zfbIBZL/95PbIQXq4UrSS7edjOM0=
Subject key identifier:   46:45:80:0A:F7:A9:E1:D3:74:2B:9C:3B:C4:F4:97:D0:A7:EC:E1:0D
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       7BA012D8AAE6ADB7C5781D8B9CF0260C6373AD04
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e203536303436.roa
Signing time:             Mon 28 Sep 2026 01:00:36 +0000
ROA not before:           Mon 28 Sep 2026 00:55:36 +0000
ROA not after:            Mon 27 Sep 2027 01:00:36 +0000
asID:                     56046
IP address blocks:        43.248.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 11:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a0:12:d8:aa:e6:ad:b7:c5:78:1d:8b:9c:f0:26:0c:63:73:ad:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Sep 28 00:55:36 2026 GMT
            Not After : Sep 27 01:00:36 2027 GMT
        Subject: CN=4645800AF7A9E1D3742B9C3BC4F497D0A7ECE10D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:18:22:1b:0e:fd:1a:cc:91:d4:9a:1b:e1:48:
                    f8:30:2e:8a:83:78:8e:96:ce:69:06:69:05:88:ef:
                    1e:3c:9f:d9:55:05:c9:64:6d:3f:3a:e7:e0:0e:a8:
                    fc:eb:85:e9:73:17:39:37:d3:a0:e1:e6:21:a9:e5:
                    80:68:bd:22:da:a7:a2:69:a5:e6:a3:64:b1:0b:28:
                    c1:1c:bf:a3:52:8d:72:fa:ac:47:79:9e:82:10:a5:
                    32:29:2c:73:85:29:ec:6c:37:e0:88:fa:e3:b8:7f:
                    4c:0f:1f:42:e7:de:ea:52:8f:50:4b:b2:80:3d:2c:
                    79:6b:65:11:d3:27:50:14:0a:ad:17:b2:05:21:f1:
                    b5:aa:3e:53:0a:bc:7d:39:70:47:c6:91:61:07:06:
                    11:02:dd:ec:8f:3c:e7:28:41:9f:bf:30:d8:fb:4a:
                    c6:a7:61:38:53:e9:8d:c7:2c:d1:d7:ea:26:ff:18:
                    50:0b:93:b4:b6:dc:3c:15:3a:e4:f5:c0:9f:91:de:
                    fc:17:fa:77:17:77:3f:85:71:b3:b9:d8:f0:e7:00:
                    da:f2:9d:72:40:d5:2c:a9:34:e3:2f:97:4d:d8:a4:
                    77:74:0e:08:1b:b8:ef:a2:11:ea:cd:4b:2f:44:d9:
                    c1:ed:bb:3d:32:53:5a:53:fa:db:9c:a5:69:55:44:
                    a7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:45:80:0A:F7:A9:E1:D3:74:2B:9C:3B:C4:F4:97:D0:A7:EC:E1:0D
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234382e3139322e302f32302d3230203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:84:fa:b2:c5:b0:df:55:a5:71:e4:b7:96:22:e5:40:b5:
         e2:97:99:a8:87:b0:77:fb:81:df:2c:b1:c8:b9:62:73:9f:16:
         1e:67:df:09:e9:6b:76:52:0b:89:14:21:e4:32:98:60:a2:1e:
         d9:98:43:cf:40:80:f4:82:0b:ef:46:f1:16:1d:5a:12:5b:9a:
         dc:5f:c6:90:69:81:34:1e:fd:51:9e:10:28:d5:3b:24:5a:74:
         04:30:a3:7d:08:a9:e0:7e:75:39:92:50:27:7b:43:19:5a:36:
         2c:67:15:df:d2:83:5a:ce:54:aa:aa:cb:71:56:f3:cd:43:ed:
         c2:cc:f0:9c:eb:0b:55:ab:86:62:11:2a:61:6c:db:b5:a1:bc:
         ab:98:3c:f1:7f:80:4a:e1:09:3f:b3:c5:03:fe:0f:55:8c:27:
         95:91:0b:52:42:47:c4:8f:f8:3c:25:d0:56:08:d2:de:fb:9b:
         ee:11:a8:4c:39:65:63:ea:8d:6f:c0:49:f1:dd:64:97:72:26:
         50:12:59:1c:2d:0d:62:a1:6f:d5:f9:75:b0:e0:0d:bb:8b:16:
         39:3b:fa:bc:ba:1d:7e:7f:67:9a:4f:3d:ac:ef:45:9f:15:b7:
         50:a1:13:62:f6:a3:ba:60:5c:ec:c6:91:3b:3b:4b:bd:c5:26:
         28:4f:58:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:11:06 2026 by rpki-client