Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3232203d3e20313337363937.roa
File:                     34332e3235342e3139322e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          4emqqfImul+mN7M6Rk1loISSJ+IYfusYAjEeu9dNmtg=
Subject key identifier:   6A:55:A1:19:3C:9C:9C:25:AE:73:55:1E:AE:90:71:6D:A6:16:64:73
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       23BC5A4690F077D2C84975D69A7205339C0D4F1E
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3232203d3e20313337363937.roa
Signing time:             Tue 12 May 2026 06:57:12 +0000
ROA not before:           Tue 12 May 2026 06:52:12 +0000
ROA not after:            Tue 11 May 2027 06:57:12 +0000
asID:                     137697
IP address blocks:        43.254.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bc:5a:46:90:f0:77:d2:c8:49:75:d6:9a:72:05:33:9c:0d:4f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 12 06:52:12 2026 GMT
            Not After : May 11 06:57:12 2027 GMT
        Subject: CN=6A55A1193C9C9C25AE73551EAE90716DA6166473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:c1:b6:5c:7e:8d:8f:61:96:35:ba:cb:99:
                    97:4e:c5:ab:a9:c5:0f:b0:e4:90:af:a8:af:bd:26:
                    7c:0f:37:ba:c8:a5:06:1a:5d:00:92:6b:7a:55:fa:
                    b0:03:fc:60:21:5d:64:52:13:13:bf:54:60:d3:7b:
                    48:b4:1c:77:2c:0d:54:da:2a:d6:c6:06:e2:55:1a:
                    74:4d:89:44:20:10:8f:e4:01:a3:fc:04:23:9e:cf:
                    f1:96:34:ac:e3:c7:61:ca:22:a7:8d:f8:74:61:84:
                    72:04:06:0b:a9:03:61:d0:c1:ca:16:85:a6:fb:a8:
                    d9:80:31:ef:51:86:c9:f4:a9:19:03:66:4b:b8:64:
                    c6:15:6a:de:b6:79:7d:58:f5:03:f9:32:10:78:90:
                    51:47:34:f5:88:c3:ca:da:66:bb:0d:cc:b4:e8:0f:
                    30:ec:bc:fa:65:bd:fa:65:0d:f2:24:f7:56:19:ee:
                    41:82:2a:48:4f:be:5e:0a:04:7d:9e:81:4b:ba:5d:
                    19:0b:76:46:80:60:0d:2f:75:98:6e:ac:31:a5:7e:
                    29:66:0c:d8:a1:e0:ec:34:b5:76:d3:06:ee:de:e2:
                    9a:50:91:a7:f5:b2:4c:29:b7:62:b9:7d:41:a9:e0:
                    e7:78:84:60:4b:ca:ac:09:7d:c0:87:93:d9:30:20:
                    5e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:55:A1:19:3C:9C:9C:25:AE:73:55:1E:AE:90:71:6D:A6:16:64:73
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:4e:40:b0:f0:dd:31:8e:55:56:6f:46:78:a1:f9:b8:5b:
         8c:ea:b9:ef:8b:78:44:22:4e:31:49:a1:fa:93:e0:8c:d7:3f:
         bc:9b:4a:54:6d:39:a9:9b:fc:f2:68:91:ae:60:9d:62:58:9e:
         d2:74:25:18:6d:b3:9f:11:45:d3:b7:bc:66:dd:27:ef:41:9f:
         f0:3c:07:a1:6a:ba:75:aa:ca:75:3b:3b:11:70:f3:b8:c5:8e:
         fe:84:bb:81:23:4d:f2:ab:8b:2a:29:cd:47:23:b4:17:8c:a1:
         6f:62:03:c7:63:de:09:49:54:29:99:00:d5:04:2e:ec:3b:96:
         c9:c3:95:f3:f0:b3:a5:c7:90:4c:69:61:ea:36:14:ae:cd:35:
         36:6a:e3:e1:23:a0:9f:b3:b4:5a:85:4f:d0:ad:0e:a7:2b:5d:
         7b:58:8b:17:75:e8:76:70:90:4e:0e:a2:05:d5:79:3a:74:b9:
         0f:c1:74:ae:24:b4:eb:6b:5b:4d:ea:f0:9e:17:6e:0d:5b:6f:
         82:e4:59:ca:4a:f5:d6:0b:83:48:81:34:b1:b2:e4:75:cf:77:
         bb:f9:69:09:83:bf:0a:df:2e:cf:5e:93:fa:4c:96:67:11:45:
         99:8b:ce:ac:5d:b1:45:54:66:5c:60:b5:2a:7c:e6:e2:3e:9b:
         b9:44:da:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:36:18 2026 by rpki-client