Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa
File:                     34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier:          UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=
Subject key identifier:   F8:10:38:15:B6:86:10:06:02:F7:B1:78:9D:06:ED:8F:25:A3:2A:F3
Certificate issuer:       /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial:       5ECC6FECB889B69956E0587F696DE5B3936B79E0
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa
Signing time:             Wed 13 May 2026 08:00:38 +0000
ROA not before:           Wed 13 May 2026 07:55:38 +0000
ROA not after:            Wed 12 May 2027 08:00:38 +0000
asID:                     4808
IP address blocks:        43.243.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 08:17:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:cc:6f:ec:b8:89:b6:99:56:e0:58:7f:69:6d:e5:b3:93:6b:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
        Validity
            Not Before: May 13 07:55:38 2026 GMT
            Not After : May 12 08:00:38 2027 GMT
        Subject: CN=F8103815B686100602F7B1789D06ED8F25A32AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:01:f4:2c:a6:eb:90:67:54:b8:41:fd:3b:b5:
                    9a:10:c6:fc:0d:bc:9a:e8:d4:93:8e:18:aa:bd:78:
                    4c:c0:82:5b:83:da:74:e1:00:cd:11:92:6e:dd:b5:
                    5d:ac:35:b7:91:5a:8c:cb:b3:8d:a4:c4:e9:45:e0:
                    15:11:ca:95:c0:fc:fb:b3:be:08:f8:b1:f4:b4:56:
                    de:e6:85:b1:76:66:2a:4c:b9:42:b4:bf:c0:20:3f:
                    70:d9:2c:f8:0b:48:1d:11:2d:28:fb:db:6a:e9:ff:
                    95:ac:be:94:f5:1b:bc:51:2d:87:60:91:8d:0c:33:
                    ca:29:f5:a9:a1:05:ee:c8:4b:98:9b:62:c5:92:80:
                    77:6f:68:d7:3b:67:1c:69:96:b8:94:ad:72:30:e0:
                    13:1e:1b:2d:6f:9c:6e:d5:00:d1:dc:2b:de:37:24:
                    1e:43:be:6a:12:de:9b:1c:35:18:08:f2:33:82:ca:
                    eb:71:73:8b:18:0e:12:20:39:c5:09:be:8e:63:d9:
                    92:ca:b7:90:b3:93:c0:e3:f2:01:71:06:ce:5f:1d:
                    14:7c:58:af:90:1e:03:47:3c:3c:bb:8a:31:eb:ad:
                    13:e4:92:ed:91:4e:23:68:39:a8:3d:13:58:c7:e4:
                    ee:01:a2:48:6e:d1:d1:04:95:17:63:c8:6b:10:b3:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:10:38:15:B6:86:10:06:02:F7:B1:78:9D:06:ED:8F:25:A3:2A:F3
            X509v3 Authority Key Identifier:
                keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:bf:78:a6:67:41:a8:ba:d3:30:40:4c:3d:29:2e:3b:3d:fe:
         c9:eb:f9:5c:a1:15:a8:6c:3a:15:1a:7d:e3:c4:60:6a:0b:e6:
         20:5d:2a:40:ec:1d:51:ce:e1:32:e8:34:15:3f:55:4c:8d:38:
         00:e0:35:72:cf:70:42:1a:af:c2:31:55:57:b8:e3:b2:62:d2:
         a8:fa:ee:9a:11:d4:54:cd:b6:39:34:39:d1:5f:5b:a8:3b:65:
         32:17:66:ff:69:c2:c4:25:94:73:98:af:c5:15:c1:69:d1:ab:
         12:87:11:b0:b6:61:01:c6:85:b1:17:14:c8:cd:74:75:7e:7b:
         7c:91:f6:49:ef:11:84:f2:dc:c3:28:c2:6d:0d:e0:63:45:ef:
         d7:97:f5:0b:8d:69:b4:7a:42:6b:f7:d6:7f:fa:89:a3:7b:da:
         3d:6f:eb:40:f7:4e:4c:0e:b9:b8:f3:80:ad:99:63:5d:54:ca:
         1e:75:f9:3c:9b:22:7c:6d:46:50:c1:3e:cb:27:32:6c:68:5e:
         fe:7b:98:86:38:ad:6d:ee:d5:8b:2b:3b:e9:a8:0a:ef:6b:c7:
         9e:76:16:f4:76:a1:e9:3d:b8:82:46:98:6a:15:c3:45:fb:3e:
         f8:37:4a:2f:11:d3:bc:fd:f6:a2:63:e4:49:0d:1e:14:59:eb:
         3f:8f:87:24
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUXsxv7LiJtplW4Fh/aW3ls5NreeAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA1MTMwNzU1MzhaFw0yNzA1MTIwODAwMzhaMDMxMTAvBgNV
BAMTKEY4MTAzODE1QjY4NjEwMDYwMkY3QjE3ODlEMDZFRDhGMjVBMzJBRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAfQspuuQZ1S4Qf07tZoQxvwN
vJro1JOOGKq9eEzAgluD2nThAM0Rkm7dtV2sNbeRWozLs42kxOlF4BURypXA/Puz
vgj4sfS0Vt7mhbF2ZipMuUK0v8AgP3DZLPgLSB0RLSj722rp/5WsvpT1G7xRLYdg
kY0MM8op9amhBe7IS5ibYsWSgHdvaNc7ZxxplriUrXIw4BMeGy1vnG7VANHcK943
JB5DvmoS3pscNRgI8jOCyutxc4sYDhIgOcUJvo5j2ZLKt5Czk8Dj8gFxBs5fHRR8
WK+QHgNHPDy7ijHrrRPkku2RTiNoOag9E1jH5O4Bokhu0dEElRdjyGsQs77zAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU+BA4FbaGEAYC97F4nQbtjyWjKvMwHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNTA4NjczLzAvMzQzMzJlMzIzNDMz
MmUzMTMzMzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEASvzijANBgkqhkiG9w0BAQsFAAOCAQEAXL94pmdBqLrTMEBMPSkuOz3+yev5
XKEVqGw6FRp948RgagvmIF0qQOwdUc7hMug0FT9VTI04AOA1cs9wQhqvwjFVV7jj
smLSqPrumhHUVM22OTQ50V9bqDtlMhdm/2nCxCWUc5ivxRXBadGrEocRsLZhAcaF
sRcUyM10dX57fJH2Se8RhPLcwyjCbQ3gY0Xv15f1C41ptHpCa/fWf/qJo3vaPW/r
QPdOTA65uPOArZljXVTKHnX5PJsifG1GUME+yycybGhe/nuYhjitbe7Viys76agK
72vHnnYW9Hah6T24gkaYahXDRfs++DdKLxHTvP32omPkSQ0eFFnrP4+HJA==
-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client