Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139332e302f32342d3234203d3e203632343638.roa
File:                     34332e3235342e3139332e302f32342d3234203d3e203632343638.roa (raw, json)
Hash identifier:          Go/ZsenHAZbtr+RtSg6M6dzvgKieshdZclkIATlFqGY=
Subject key identifier:   D3:07:E6:6C:B1:3B:66:DD:2F:00:82:8F:D4:93:13:95:33:E4:EE:0D
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       545DB74A816DA075B24AA6CDF541158BADD1B901
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139332e302f32342d3234203d3e203632343638.roa
Signing time:             Thu 23 Apr 2026 01:55:38 +0000
ROA not before:           Thu 23 Apr 2026 01:50:38 +0000
ROA not after:            Thu 22 Apr 2027 01:55:38 +0000
asID:                     62468
IP address blocks:        43.254.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:5d:b7:4a:81:6d:a0:75:b2:4a:a6:cd:f5:41:15:8b:ad:d1:b9:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr 23 01:50:38 2026 GMT
            Not After : Apr 22 01:55:38 2027 GMT
        Subject: CN=D307E66CB13B66DD2F00828FD493139533E4EE0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:74:56:26:b0:90:f8:79:b3:0c:02:12:9c:
                    9f:80:16:e9:c0:28:5a:fe:76:83:2f:7a:94:d8:b6:
                    65:b5:cb:79:c3:0f:31:8b:27:81:86:e5:d6:3e:9d:
                    3f:4f:f5:12:c2:a2:20:49:0c:af:e1:ea:1a:e1:3e:
                    41:de:22:08:e2:4e:07:30:b3:49:24:5b:75:15:a8:
                    7c:e9:26:cc:ca:02:ff:46:98:3f:d4:ac:99:01:03:
                    7f:77:00:76:6f:aa:37:df:8d:bd:61:21:70:6c:81:
                    0d:28:f7:9f:e4:86:f5:9c:b4:5f:91:77:6e:7a:e4:
                    5a:e1:14:6b:dc:74:ba:00:02:eb:6a:d5:6e:21:59:
                    6c:ae:18:00:99:d1:8b:dc:42:25:86:e4:35:3c:88:
                    81:dc:f9:f2:d6:3f:3e:0c:15:e9:0a:23:e1:a8:c8:
                    0f:66:f7:98:4f:bd:6d:1f:34:a3:6e:43:8d:4c:57:
                    6a:b5:6c:58:1c:a5:ae:8c:fa:3a:3e:98:1c:d0:9b:
                    d7:41:30:81:79:30:c0:d1:7a:d3:c1:8f:b3:7d:d3:
                    c1:c0:5b:c4:af:96:46:9f:81:0f:a2:c2:b4:73:bb:
                    15:f0:2d:5c:b3:05:8e:30:8f:9e:af:b9:9b:4d:42:
                    84:b7:73:df:5e:a0:27:9d:90:f8:7c:1a:c7:48:68:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:07:E6:6C:B1:3B:66:DD:2F:00:82:8F:D4:93:13:95:33:E4:EE:0D
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139332e302f32342d3234203d3e203632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:5e:3f:15:83:8d:46:f6:63:20:03:b3:00:5d:fa:ce:91:e4:
         5d:b9:c6:e3:eb:f1:24:c2:6e:0d:3e:5b:ed:81:82:c6:e3:8e:
         f1:c0:48:80:0c:1c:12:dd:b1:6f:b0:74:c7:d4:a3:7c:ca:f0:
         f0:1c:54:83:c3:c8:7f:c6:e2:6a:65:2f:76:e5:31:4b:80:7b:
         25:28:c0:a8:da:c7:60:01:9c:1f:ac:e3:1a:9b:92:2d:e1:86:
         95:59:7b:4c:22:2f:1a:29:c0:f1:3f:0f:f9:0a:f7:b2:d4:c0:
         00:3f:86:88:4a:2d:89:e2:e2:b5:ef:07:bf:df:8d:7d:de:80:
         5f:a6:34:a0:6f:76:d9:a3:eb:b3:7a:e0:3c:99:3e:1f:54:1e:
         1e:3f:66:ab:7b:a7:99:33:89:45:da:1a:e7:c2:3b:05:83:7c:
         b4:07:4b:bc:7c:b7:4d:e4:25:b1:e8:53:34:69:46:75:9f:b8:
         6a:7f:a6:9e:31:65:af:08:72:b5:d6:56:3e:05:b8:a7:3d:2e:
         2c:0d:d9:cc:04:39:ad:c5:0c:84:aa:dd:19:55:bb:56:c7:60:
         5a:47:ed:1c:58:1d:2d:b2:d4:e2:84:31:ec:91:2a:4f:ea:5b:
         f6:e0:b1:43:5f:1e:a0:15:a1:a4:04:cd:78:ec:38:67:27:8c:
         06:44:54:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:10 2026 by rpki-client