Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3332203d3e20313339313138.roa
File:                     34332e3234322e39362e302f32322d3332203d3e20313339313138.roa (raw, json)
Hash identifier:          VDMcp5l8FistRmUvRq8PMpiAPTDY6t5oa9rYeoWoY2o=
Subject key identifier:   7C:2B:68:D5:B7:07:BD:93:72:DB:5B:85:44:36:BB:FF:E1:2C:14:47
Certificate issuer:       /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial:       282E1B0464E42EF712693E5BCAF61072937335BD
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3332203d3e20313339313138.roa
Signing time:             Mon 20 Apr 2026 04:59:01 +0000
ROA not before:           Mon 20 Apr 2026 04:54:01 +0000
ROA not after:            Mon 19 Apr 2027 04:59:01 +0000
asID:                     139118
IP address blocks:        43.242.96.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 09:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:1b:04:64:e4:2e:f7:12:69:3e:5b:ca:f6:10:72:93:73:35:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
        Validity
            Not Before: Apr 20 04:54:01 2026 GMT
            Not After : Apr 19 04:59:01 2027 GMT
        Subject: CN=7C2B68D5B707BD9372DB5B854436BBFFE12C1447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:eb:93:4e:5f:5a:91:4f:4b:26:85:54:ee:
                    36:f9:23:3a:c8:53:91:b5:50:41:23:f4:e2:50:81:
                    d1:17:4d:5a:d0:b8:ba:78:5e:0f:7c:b3:ec:1e:b2:
                    a8:d9:91:76:a4:39:9a:a0:81:11:3c:3c:04:92:36:
                    0a:ce:3a:e6:b1:9b:9d:93:3f:c0:d9:b0:b6:73:5c:
                    fd:2e:ea:ae:e9:b7:44:43:9c:1c:04:fa:3f:4a:93:
                    41:69:06:d0:80:3b:fe:13:a2:5e:76:a6:e0:bd:18:
                    ad:be:87:4b:03:50:29:e9:f9:46:23:1c:a7:69:ca:
                    fb:27:e5:39:bb:2c:55:dd:99:ae:31:5e:67:68:21:
                    3e:5b:b6:98:8d:43:60:62:6f:96:92:65:c9:82:3a:
                    64:a8:41:03:15:d4:11:81:06:de:e9:71:1d:bf:ed:
                    d3:1b:0a:6f:61:63:7c:41:d5:16:de:db:b1:c7:7c:
                    29:35:e4:ad:34:75:22:1f:0d:59:8d:f3:cb:bd:28:
                    04:5a:54:a8:de:24:1f:ab:e2:42:1f:d9:8a:14:e4:
                    04:2f:20:9c:92:21:c0:b1:62:b0:7c:d7:af:0a:e1:
                    df:d7:3c:b1:0e:d2:3a:31:bf:11:54:1e:e5:7b:d5:
                    bf:1a:b1:0b:69:ae:ae:72:87:e3:2f:b9:33:f2:60:
                    4c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2B:68:D5:B7:07:BD:93:72:DB:5B:85:44:36:BB:FF:E1:2C:14:47
            X509v3 Authority Key Identifier:
                keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3332203d3e20313339313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:a9:34:1e:c6:1d:2f:8b:ba:2e:fc:9e:38:04:8e:4e:88:75:
         e5:23:e9:59:02:3c:c5:18:93:f1:f0:18:28:86:87:bc:24:1e:
         47:3d:1c:d3:d9:c9:ef:af:2f:5a:8a:14:f0:28:53:51:8c:94:
         6f:f5:33:a2:4c:09:0b:f8:c1:d3:ad:f2:70:69:56:d2:d4:c5:
         a2:34:a3:71:41:77:00:36:98:c7:1e:4c:e3:d8:f9:5b:42:1b:
         73:05:ce:02:55:8c:1e:47:46:d2:f1:2a:59:ae:f8:60:43:52:
         dd:5e:a1:65:7f:a1:e5:88:a5:b2:dd:98:35:2a:83:2c:01:2f:
         9d:90:17:a0:07:43:5c:57:f9:75:63:f1:cf:15:fa:c6:13:77:
         d1:75:78:77:89:d5:2f:c8:af:4a:5d:0c:b0:c1:16:d9:44:a8:
         5c:03:c5:41:c1:1c:35:49:6d:51:14:55:57:95:95:8f:f7:e4:
         30:83:e6:8b:74:56:c7:15:47:1f:58:44:56:d2:fb:46:f7:da:
         93:d2:3c:16:db:d0:03:4b:92:4a:51:de:4f:50:93:11:5a:44:
         76:10:41:fb:05:69:28:eb:fc:c2:ce:23:d7:5b:d8:ba:01:35:
         3c:84:dd:9f:6f:aa:5b:ea:1c:f3:e4:a8:40:bd:83:b7:21:fd:
         c1:31:f4:c2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 21:32:16 2026 by rpki-client