Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa
File:                     34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa (raw, json)
Hash identifier:          AX01uCm8CDciBHnXn32mLyK7Hk19LcdY/Ab+pDwwEl0=
Subject key identifier:   B7:51:B1:C7:E4:1B:39:4C:77:3D:EF:06:86:53:C5:36:9A:82:C7:B4
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       0C9900AB45F4C6030DCB3760634670D7261363B7
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa
Signing time:             Wed 22 Jul 2026 06:15:44 +0000
ROA not before:           Wed 22 Jul 2026 06:10:44 +0000
ROA not after:            Wed 21 Jul 2027 06:15:44 +0000
asID:                     151300
IP address blocks:        43.248.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:99:00:ab:45:f4:c6:03:0d:cb:37:60:63:46:70:d7:26:13:63:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Jul 22 06:10:44 2026 GMT
            Not After : Jul 21 06:15:44 2027 GMT
        Subject: CN=B751B1C7E41B394C773DEF068653C5369A82C7B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7f:78:78:19:e7:69:08:2b:ac:a9:f3:23:3c:
                    67:3b:7b:04:03:b1:fc:c9:61:24:91:77:e2:f3:0a:
                    86:3f:33:8e:fe:48:d0:9b:fb:54:d8:2f:76:49:7d:
                    95:65:70:4a:f3:72:9d:7b:2c:9d:cd:8b:d9:fb:3a:
                    bf:ed:4e:6c:5f:8c:81:bc:35:e8:d6:b6:e9:31:30:
                    18:aa:46:1c:fa:a9:5e:6d:ee:e9:fb:9c:c9:2e:7f:
                    c2:36:87:4d:ff:8d:29:7f:40:42:bf:c6:81:9d:8b:
                    b4:46:1a:0e:24:a8:19:bb:be:85:a7:44:a9:61:1a:
                    97:ad:74:4a:81:91:8b:46:f6:24:5a:4c:9e:c0:10:
                    22:ff:1f:45:10:1b:62:38:01:07:5e:9d:74:36:7f:
                    a5:52:19:f2:24:ad:7b:9b:bc:df:d8:62:6d:b8:63:
                    3a:81:2e:dd:e7:1a:e1:4e:69:b8:bc:9d:e1:77:76:
                    ea:ff:f7:ac:5f:8c:8e:6e:67:85:bf:ac:cd:83:c3:
                    92:8f:4a:3b:78:4e:05:ab:f7:0b:23:b8:6b:72:56:
                    28:51:19:9b:cb:0e:db:fb:9b:f6:de:9e:53:a0:6f:
                    21:d6:35:43:cb:7c:5b:12:2a:3b:a5:78:b2:11:52:
                    0a:f8:1f:8d:a5:75:e0:28:b4:11:4b:ca:be:ed:28:
                    96:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:51:B1:C7:E4:1B:39:4C:77:3D:EF:06:86:53:C5:36:9A:82:C7:B4
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e20313531333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8d:09:e0:02:7b:e5:85:69:ef:9b:74:6e:06:df:74:7b:fc:8a:
         ae:73:2e:a3:eb:b2:46:f1:ac:34:fd:df:6f:aa:8b:db:8b:b8:
         de:10:e2:ba:fc:fa:ee:41:41:48:02:35:88:5e:4d:7f:31:4b:
         b6:dc:9d:28:2f:4e:57:b2:b5:cf:fd:c7:47:dd:9e:23:15:2a:
         22:0e:22:ed:e1:f2:98:7b:13:1c:72:8b:d7:f1:2e:dd:a1:52:
         a2:07:a0:e1:52:a9:e2:72:00:13:0e:0c:c6:24:06:87:8d:2d:
         4e:3d:d3:f3:c0:12:25:9f:36:b2:ec:27:61:7c:c7:ad:17:19:
         3f:b3:16:12:7b:6d:95:60:e8:a1:43:48:9d:d9:ff:8e:d4:f7:
         4e:ee:56:94:3a:bd:9c:5f:84:e0:d5:23:bc:8b:20:af:1d:e9:
         53:05:b2:33:be:4b:07:d1:fb:b2:e1:25:e7:9e:6f:40:53:f9:
         0c:cb:a4:e4:35:63:0f:64:f6:e1:38:b9:f0:da:7e:31:ab:ba:
         30:14:8a:45:e3:12:b4:b3:5a:b7:47:83:fe:b7:ab:78:5b:92:
         9d:2b:c7:15:d3:b2:01:95:49:ba:42:b3:4d:55:ba:ec:0b:32:
         b5:86:46:cd:f5:64:c9:46:53:92:69:17:51:bb:f5:7f:b7:98:
         74:65:cb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:21 2026 by rpki-client