Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa
File:                     34322e36322e302e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier:          EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=
Subject key identifier:   16:D5:95:B8:CC:A4:57:49:08:72:45:93:D6:B3:23:CB:8D:8B:3A:18
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       46C5AE9E98291A5483D0ECA458059ECB3EFBF720
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa
Signing time:             Wed 13 May 2026 01:32:39 +0000
ROA not before:           Wed 13 May 2026 01:27:39 +0000
ROA not after:            Wed 12 May 2027 01:32:39 +0000
asID:                     9808
IP address blocks:        42.62.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c5:ae:9e:98:29:1a:54:83:d0:ec:a4:58:05:9e:cb:3e:fb:f7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: May 13 01:27:39 2026 GMT
            Not After : May 12 01:32:39 2027 GMT
        Subject: CN=16D595B8CCA4574908724593D6B323CB8D8B3A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7a:23:a4:83:c4:58:83:b3:57:be:ef:30:03:
                    6a:3d:0b:4e:c6:4b:ac:93:31:7c:66:ea:1b:de:33:
                    b2:6c:f1:31:88:23:b2:8c:71:39:8b:b5:df:4f:f3:
                    6f:58:3c:96:85:bf:64:4b:0c:ee:9d:bf:da:bb:83:
                    2e:72:19:84:d0:36:9d:8b:ed:2b:b3:56:99:4f:d9:
                    a3:a5:eb:ca:4d:8e:92:b2:37:57:1e:0a:2b:40:87:
                    75:d1:c3:da:11:20:51:50:f3:b3:b2:27:48:d2:44:
                    07:b7:0e:70:d3:e7:bc:c4:d7:3d:8a:a1:c1:56:32:
                    79:32:cc:32:a0:f1:79:56:bd:ed:af:c2:c6:f5:f1:
                    1b:aa:34:34:95:be:ed:9f:18:c9:14:ae:f1:e6:85:
                    6c:e7:ef:29:b5:1b:a8:2c:fa:61:bb:51:fc:d4:2b:
                    c1:5e:45:cd:6f:17:4c:3b:da:53:40:c0:e1:28:98:
                    78:a7:4f:ed:2d:e0:47:c9:e6:04:60:78:c7:88:c4:
                    ba:00:3b:46:ff:32:fd:89:7e:db:47:5d:ad:66:44:
                    72:85:e0:9b:e6:b4:fd:90:33:d5:9f:65:25:64:e3:
                    a6:7b:c5:67:f7:56:7d:cb:6f:f6:4c:6d:58:e0:d1:
                    70:89:42:29:ec:e8:38:3a:9e:66:28:fc:da:42:d3:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D5:95:B8:CC:A4:57:49:08:72:45:93:D6:B3:23:CB:8D:8B:3A:18
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:ba:fa:a2:52:a3:37:8c:c5:27:90:8b:7f:35:a0:81:79:f3:
         f1:ed:98:f6:47:b9:3e:8d:76:c2:af:ce:71:62:3b:dc:b2:ce:
         78:9c:60:12:da:2d:75:28:72:df:4b:c8:a4:6b:e7:b8:01:5b:
         50:c6:77:f1:c9:32:e7:0c:ee:57:8b:20:fd:e5:12:4a:8e:b3:
         dd:eb:07:ce:4c:f4:ad:0e:bb:0d:fe:33:af:b0:d8:fe:c5:e0:
         61:7d:cb:41:51:5c:26:fd:cd:a9:61:06:45:43:ae:b6:ae:af:
         92:b3:e8:61:83:88:52:8c:39:fb:7e:de:60:1b:f4:35:59:e7:
         e7:a0:0d:eb:b7:e5:97:90:10:74:f8:f9:90:76:4b:30:80:30:
         57:1d:f6:2d:dd:6c:c9:0a:f0:89:e0:14:c4:45:a7:6b:f0:45:
         2e:66:b6:54:29:21:f5:10:3e:82:ce:59:7b:74:fe:ec:96:ce:
         95:14:da:f3:70:08:fe:82:23:9d:79:a6:c8:51:30:ef:75:2d:
         b5:a2:b8:87:5b:8e:94:d3:e6:a8:c1:e0:ca:f3:de:63:8f:4e:
         53:1b:71:3d:a2:59:9b:6e:90:dd:b8:73:b2:2e:2c:6f:35:32:
         9b:42:ac:d6:35:c9:b6:ec:16:99:33:d9:08:e7:32:ee:c3:9f:
         11:0c:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:54 2026 by rpki-client