Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e203233373234.roa
File:                     34322e36322e39362e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier:          okZZvEUxw9h3Z2CsWKYhe02am3mCcqxeM/hfDKQ1RFk=
Subject key identifier:   8B:8F:E7:C9:D9:F7:DC:FC:B7:BB:69:10:23:9F:DE:F3:7D:9C:C0:0B
Certificate issuer:       /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial:       6CF77A7301FCB3FD25C54158F1D6D5D9172E62E4
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e203233373234.roa
Signing time:             Mon 20 Apr 2026 07:25:25 +0000
ROA not before:           Mon 20 Apr 2026 07:20:25 +0000
ROA not after:            Mon 19 Apr 2027 07:25:25 +0000
asID:                     23724
IP address blocks:        42.62.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 03:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f7:7a:73:01:fc:b3:fd:25:c5:41:58:f1:d6:d5:d9:17:2e:62:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
        Validity
            Not Before: Apr 20 07:20:25 2026 GMT
            Not After : Apr 19 07:25:25 2027 GMT
        Subject: CN=8B8FE7C9D9F7DCFCB7BB6910239FDEF37D9CC00B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:1b:df:4b:57:96:23:28:4d:5c:d9:05:2e:
                    7f:c8:57:19:5e:84:66:8b:91:ca:e0:7f:26:09:2f:
                    ef:1a:de:69:e9:46:eb:54:48:77:de:21:f6:70:41:
                    41:01:24:be:6b:c6:41:f8:3d:0c:83:f3:ef:5a:9e:
                    d3:37:6a:3b:a4:39:81:dc:4d:cf:fb:9d:21:28:01:
                    1f:96:65:9f:03:0a:f1:aa:c7:06:a2:5a:1d:3d:65:
                    cc:29:b8:e4:4c:64:e3:89:03:83:c8:e4:57:ea:fb:
                    4b:d0:86:33:82:f4:28:e0:90:98:1a:fa:b5:7f:85:
                    9f:e4:ad:f8:4e:0c:74:a5:68:7b:4d:8f:de:d0:1b:
                    e0:7d:98:58:75:be:03:52:44:68:eb:20:54:ad:44:
                    4e:63:72:ae:b5:28:8d:26:59:55:cc:4a:56:78:e5:
                    ac:66:61:ae:47:1f:da:5e:49:6d:ac:7e:b9:b3:35:
                    19:b1:0e:c0:fd:4d:e3:bc:f9:bc:38:17:12:ca:60:
                    80:d8:eb:62:bd:ba:aa:52:e7:06:0d:6a:e8:4c:6c:
                    7a:03:51:1f:60:a4:22:40:0a:5d:98:58:38:1a:84:
                    3f:b2:6b:b0:30:14:fb:b9:73:95:e7:f1:aa:28:8e:
                    98:d1:59:39:7e:75:22:9b:ef:30:b9:7c:5e:0f:73:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:E7:C9:D9:F7:DC:FC:B7:BB:69:10:23:9F:DE:F3:7D:9C:C0:0B
            X509v3 Authority Key Identifier:
                keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:1a:7a:f7:6c:e7:73:04:66:e3:a3:38:f3:a8:07:02:45:de:
         87:c3:f8:54:c7:ef:dd:50:02:f3:b6:01:e4:eb:76:34:0d:f5:
         22:b0:87:03:a8:9e:46:2f:b5:f2:15:f3:81:b5:fb:95:ff:20:
         c7:d9:c8:a5:d8:d9:5d:3e:2c:74:03:77:5c:bb:7f:22:c5:5f:
         2c:d8:79:91:7d:19:97:f1:49:87:25:4e:2c:0f:a9:92:ed:86:
         65:62:ac:1a:25:7f:14:0a:71:4b:76:47:20:e2:74:1a:73:25:
         b9:78:83:d1:26:3d:de:e0:60:95:9e:42:26:80:95:57:57:29:
         ae:57:ba:7d:ab:3f:25:05:f9:84:f1:77:64:08:e9:da:ec:57:
         80:cc:e6:85:25:cd:d0:e7:18:f7:b4:e3:49:49:54:70:62:7a:
         ae:40:c0:44:48:40:17:66:a4:94:a7:f6:35:06:06:cd:75:e5:
         7e:49:67:61:c9:7b:8d:03:ca:e3:b9:51:0c:a9:ba:6b:c3:86:
         22:ff:1d:ba:21:77:db:fc:7a:2f:dd:e8:20:c7:5b:ec:bb:23:
         46:fc:eb:54:49:25:59:c3:e0:82:b1:82:ce:44:6c:b5:ca:72:
         ee:71:c8:1d:8f:b6:42:d4:e0:78:16:71:a1:76:d6:98:5e:1c:
         52:cc:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:46 2026 by rpki-client