Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa
File:                     34322e36322e32342e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier:          mbZ+YjXkjFmr8YzoGkThHkwjrBkCUSznYwBKdgXOT0w=
Subject key identifier:   E8:A4:7A:BD:35:FD:11:37:90:F0:9E:22:FC:2B:9A:BE:1C:E3:4E:A8
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       55D543F7419C4839F078F285DDDDFDD6A405EFF9
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa
Signing time:             Mon 20 Apr 2026 07:23:09 +0000
ROA not before:           Mon 20 Apr 2026 07:18:09 +0000
ROA not after:            Mon 19 Apr 2027 07:23:09 +0000
asID:                     9808
IP address blocks:        42.62.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 02:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:43:f7:41:9c:48:39:f0:78:f2:85:dd:dd:fd:d6:a4:05:ef:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: Apr 20 07:18:09 2026 GMT
            Not After : Apr 19 07:23:09 2027 GMT
        Subject: CN=E8A47ABD35FD113790F09E22FC2B9ABE1CE34EA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:28:08:a6:bc:20:71:5a:2a:30:d8:a1:32:df:
                    eb:f2:fb:2b:fc:2a:37:0a:fb:13:bb:42:4f:a8:4b:
                    48:f2:c1:e6:91:0e:b8:f7:74:d7:ec:98:07:77:4b:
                    f4:97:4a:61:9d:f7:06:a5:ba:75:7e:18:f1:ea:0a:
                    b6:e0:17:2f:d5:b5:5f:65:9e:bc:c8:ca:bc:dd:0e:
                    4e:18:ac:9a:90:e6:9c:34:0e:8d:15:40:66:65:fd:
                    c1:7a:a0:19:02:0c:be:d2:f2:75:55:a1:77:26:d0:
                    7c:94:fb:e0:20:6e:0f:e4:4d:53:43:59:05:e7:73:
                    c6:46:22:7f:d7:e3:9b:68:69:fc:d9:54:ee:48:62:
                    6e:40:e2:f5:93:0c:97:be:ce:80:1b:8d:f1:b1:b4:
                    78:f1:43:13:32:b9:03:c3:c2:10:fe:96:43:6c:49:
                    0e:2a:49:07:7c:20:8e:7c:ff:3b:75:fd:ee:27:9e:
                    96:1a:af:d3:c9:4b:d2:71:3c:e1:cb:26:01:da:d4:
                    0f:2d:56:bb:fd:aa:62:8f:8e:de:0b:9d:d3:f0:42:
                    23:c9:9b:ca:26:94:61:92:00:65:bf:a8:62:52:8e:
                    a3:3b:f5:74:8d:8e:da:96:29:9a:86:a2:db:40:d2:
                    f0:22:7c:23:7c:9c:00:b1:15:f0:fc:16:05:76:50:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A4:7A:BD:35:FD:11:37:90:F0:9E:22:FC:2B:9A:BE:1C:E3:4E:A8
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:f0:21:bf:10:d4:7e:4e:f2:24:9a:4e:91:d1:04:80:e3:c1:
         40:ad:f0:59:c0:6d:5c:03:79:9e:5b:15:bd:66:80:51:92:56:
         07:a2:f8:13:a2:25:21:2a:bd:d3:1b:48:a4:38:7a:d8:70:11:
         67:17:b9:9f:92:b7:75:75:72:7a:14:24:3f:26:97:3b:48:ed:
         fa:d0:1b:dd:66:45:f8:96:a1:a2:88:2d:e6:f4:ce:3b:c5:9a:
         0f:b5:a0:f0:3a:7e:c2:d7:ee:ed:e0:ea:4b:3b:46:58:a5:e6:
         5f:d2:11:8e:42:bf:6f:12:6e:a4:6e:25:0c:d7:02:ba:4f:51:
         4d:dc:ec:b0:75:c3:0f:60:10:24:88:b6:70:ff:04:cd:98:93:
         3a:3a:d4:1d:a0:97:f8:d4:64:ba:13:90:f1:46:06:92:35:56:
         b1:28:4e:60:74:86:a6:8c:ea:48:b1:ea:30:38:6b:62:6e:cf:
         6a:9f:13:02:a6:93:98:8f:6a:b0:88:9e:d8:84:ce:fd:7a:b3:
         1d:d9:65:fd:3e:fa:c9:22:f9:c9:b7:79:65:8a:83:76:93:d6:
         5c:82:1c:d1:fc:c7:9b:ba:30:fc:52:03:62:96:1f:78:e9:23:
         95:f1:5b:4e:42:81:58:3e:6b:f4:f5:a8:36:06:00:08:fc:93:
         cb:cc:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:49 2026 by rpki-client