Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa
File:                     34332e3234382e39362e302f32312d3234203d3e20313531333030.roa (raw, json)
Hash identifier:          9lQhY1UIq3FLiptRI3EXq8KONNhqBq6tdBI9BfGvI8Y=
Subject key identifier:   12:80:1E:02:42:66:7A:5F:9B:A1:13:8A:B4:33:74:8B:23:C2:1B:FA
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       4991C98410F29B6F93D1E01DFD0D04BA44389835
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa
Signing time:             Wed 22 Jul 2026 06:15:44 +0000
ROA not before:           Wed 22 Jul 2026 06:10:44 +0000
ROA not after:            Wed 21 Jul 2027 06:15:44 +0000
asID:                     151300
IP address blocks:        43.248.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Jul 2026 04:12:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:91:c9:84:10:f2:9b:6f:93:d1:e0:1d:fd:0d:04:ba:44:38:98:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Jul 22 06:10:44 2026 GMT
            Not After : Jul 21 06:15:44 2027 GMT
        Subject: CN=12801E0242667A5F9BA1138AB433748B23C21BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:09:bd:13:b9:cc:7e:45:18:f4:dc:de:08:c1:
                    41:bd:42:82:c4:8e:dc:34:bf:a7:a9:2e:ee:ae:bf:
                    3b:eb:5a:03:3a:1f:65:e6:52:1d:c9:0d:98:b5:66:
                    ac:17:4a:57:a6:de:00:ce:2e:ba:e8:95:f9:09:48:
                    0e:1c:1e:65:b3:e2:d6:8e:00:f5:09:38:84:cf:25:
                    8a:5a:a1:54:00:68:6a:ac:00:b9:80:ff:64:a6:18:
                    e1:65:41:3c:77:f6:d5:98:b6:b4:6b:9a:0a:d3:d6:
                    dc:e7:3a:4b:6b:a5:ea:ac:2b:b3:b5:27:ea:53:9f:
                    13:7f:ec:57:b0:f2:19:24:ad:4b:98:20:e5:6c:d6:
                    ae:77:59:05:c8:aa:6f:e6:65:b0:8d:83:e1:86:8b:
                    bb:e9:d3:97:d2:5a:3a:d7:e8:d5:f6:4c:ee:09:45:
                    e0:e0:60:88:95:7f:ac:2d:2e:dd:05:f3:83:4c:d4:
                    ef:cd:4b:37:17:70:d2:e9:e9:83:a1:98:7e:ce:30:
                    8a:60:e2:79:71:de:9c:d5:51:a9:59:36:88:5c:0c:
                    29:7c:41:f4:7e:72:ec:65:f6:50:d0:cd:a3:17:d9:
                    30:bb:63:05:42:f0:48:b1:7a:dc:61:f9:8c:05:ce:
                    af:bf:06:f7:07:56:fd:b8:8a:87:e1:52:a4:cb:46:
                    d6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:1E:02:42:66:7A:5F:9B:A1:13:8A:B4:33:74:8B:23:C2:1B:FA
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3f:f9:f9:bb:d9:ef:7c:78:01:95:a1:a6:aa:86:3f:d0:9e:d3:
         a9:72:ae:fe:d0:0e:1e:0c:1f:8b:93:92:6f:d9:c9:fe:96:1f:
         bf:a0:a7:89:20:42:7b:ce:ac:05:7a:d6:99:23:18:63:a0:e1:
         3b:6a:b8:4f:3e:35:f0:09:d9:12:8d:9f:88:e9:22:8f:5f:f2:
         29:49:a5:94:77:be:b3:80:ee:8d:32:1e:65:2f:07:d7:78:bf:
         ec:70:ee:4c:a8:40:b6:90:05:de:a2:3d:4c:0c:44:fb:35:ce:
         3a:a9:3e:e1:d6:19:74:ba:76:8c:f6:91:18:e6:b0:19:c3:16:
         ae:a5:b6:d1:88:64:cc:38:31:ba:5b:2b:df:48:5f:b2:1b:fe:
         f3:26:37:15:91:83:39:1d:a8:1a:df:e1:08:cf:3a:78:f1:de:
         25:7e:ba:ac:1c:28:04:f5:77:d0:99:44:96:ff:75:34:f9:56:
         a3:ce:a3:49:fe:20:9a:1c:5f:4c:04:b4:d6:15:2f:f5:98:5a:
         5a:16:b5:2a:7a:0b:39:79:89:79:c5:2a:89:9c:21:4e:cf:41:
         6a:0c:e9:79:0e:e0:04:3b:70:d0:32:c6:f5:bc:82:74:5b:27:
         69:3f:66:08:2d:da:ab:39:44:b2:5a:c4:fc:00:1a:40:75:53:
         ed:c7:13:cb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSZHJhBDym2+T0eAd/Q0EukQ4mDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG
RUJCQkJCNjAeFw0yNjA3MjIwNjEwNDRaFw0yNzA3MjEwNjE1NDRaMDMxMTAvBgNV
BAMTKDEyODAxRTAyNDI2NjdBNUY5QkExMTM4QUI0MzM3NDhCMjNDMjFCRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCb0Tucx+RRj03N4IwUG9QoLE
jtw0v6epLu6uvzvrWgM6H2XmUh3JDZi1ZqwXSlem3gDOLrrolfkJSA4cHmWz4taO
APUJOITPJYpaoVQAaGqsALmA/2SmGOFlQTx39tWYtrRrmgrT1tznOktrpeqsK7O1
J+pTnxN/7Few8hkkrUuYIOVs1q53WQXIqm/mZbCNg+GGi7vp05fSWjrX6NX2TO4J
ReDgYIiVf6wtLt0F84NM1O/NSzcXcNLp6YOhmH7OMIpg4nlx3pzVUalZNohcDCl8
QfR+cuxl9lDQzaMX2TC7YwVC8Eixetxh+YwFzq+/BvcHVv24iofhUqTLRtZ1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUEoAeAkJmel+boROKtDN0iyPCG/owHwYDVR0j
BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5
ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzQzMzc4OTc4Njc1MDk3Ny8wLzM0MzMyZTMyMzQz
ODJlMzkzNjJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAyv4YDANBgkqhkiG9w0BAQsFAAOCAQEAP/n5u9nvfHgBlaGmqoY/0J7T
qXKu/tAOHgwfi5OSb9nJ/pYfv6CniSBCe86sBXrWmSMYY6DhO2q4Tz418AnZEo2f
iOkij1/yKUmllHe+s4DujTIeZS8H13i/7HDuTKhAtpAF3qI9TAxE+zXOOqk+4dYZ
dLp2jPaRGOawGcMWrqW20YhkzDgxulsr30hfshv+8yY3FZGDOR2oGt/hCM86ePHe
JX66rBwoBPV30JlElv91NPlWo86jSf4gmhxfTAS01hUv9ZhaWha1KnoLOXmJecUq
iZwhTs9BagzpeQ7gBDtw0DLG9byCdFsnaT9mCC3aqzlEslrE/AAaQHVT7ccTyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:21 2026 by rpki-client