Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e33322e302f32312d3231203d3e2039383038.roa
File:                     34322e36322e33322e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier:          yQx/mYuVkSoCaiWuA20eaqop82i+JViDE/hLHSp2Frk=
Subject key identifier:   55:58:0E:04:81:2E:F0:66:16:CA:38:F5:FA:BA:2A:49:EB:6E:34:09
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       774788884F69EA2A50B3B4D5BE1886671BAC541A
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e33322e302f32312d3231203d3e2039383038.roa
Signing time:             Mon 20 Apr 2026 06:25:28 +0000
ROA not before:           Mon 20 Apr 2026 06:20:28 +0000
ROA not after:            Mon 19 Apr 2027 06:25:28 +0000
asID:                     9808
IP address blocks:        42.62.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:47:88:88:4f:69:ea:2a:50:b3:b4:d5:be:18:86:67:1b:ac:54:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: Apr 20 06:20:28 2026 GMT
            Not After : Apr 19 06:25:28 2027 GMT
        Subject: CN=55580E04812EF06616CA38F5FABA2A49EB6E3409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:ed:d6:ce:88:62:b2:96:db:0d:51:a1:24:
                    86:15:6d:35:c7:20:b9:13:a8:95:2c:cc:28:19:cb:
                    d0:d4:b6:af:5a:98:5f:b2:b0:b2:a8:62:2c:79:38:
                    5d:0f:b7:9e:e5:0c:3b:9e:94:ea:0a:95:e0:6e:e4:
                    17:fd:47:49:41:e6:d0:ab:1c:18:4e:f6:6a:6c:dd:
                    fb:a4:33:5c:55:64:0a:65:38:a6:2c:60:d1:c9:90:
                    12:9c:f8:b5:e2:6f:55:c4:90:97:48:4d:8b:fe:66:
                    cc:d7:88:ab:5d:ba:83:91:c2:45:6d:79:4a:04:91:
                    d2:bc:b9:ef:c7:2c:03:ba:4f:e9:16:f8:88:05:6c:
                    3a:33:8b:1f:ee:fe:4e:65:e9:6c:52:64:08:38:a1:
                    32:b8:7b:68:d4:d5:f2:d0:20:dc:bd:3e:e1:ca:fa:
                    86:77:cc:a9:ed:48:51:e8:84:a3:6f:a6:2c:a7:a0:
                    57:f6:0d:ec:b9:66:38:b3:c8:44:fc:37:67:83:cc:
                    ed:6c:a5:9d:16:92:b7:33:0c:40:ab:0e:f8:f1:18:
                    99:5d:c4:78:c7:34:cc:4e:ba:2e:8e:1e:72:82:c8:
                    a5:35:27:a8:a8:b6:55:d9:1e:77:63:8d:8e:6e:f2:
                    85:a4:cf:ba:7e:a5:f4:3c:09:07:09:61:78:16:c2:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:58:0E:04:81:2E:F0:66:16:CA:38:F5:FA:BA:2A:49:EB:6E:34:09
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e33322e302f32312d3231203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ac:a9:8e:cc:17:a2:ff:ed:9b:02:78:1e:c7:d1:b0:44:da:06:
         9d:3e:e8:ce:a5:be:af:fa:00:75:d0:c6:bd:fc:67:ef:ba:11:
         79:d3:3a:02:14:d9:6d:5c:fd:0a:63:49:3c:92:1b:6b:32:08:
         68:2a:0d:34:27:3a:56:2f:d6:99:4f:ad:08:b0:6e:4d:62:83:
         10:10:f8:c3:8a:13:c4:a3:ba:ba:ba:5c:e6:a7:23:a2:d7:53:
         b7:66:3b:7b:ba:69:1c:e3:20:9e:3a:c3:90:3a:61:6b:6e:5f:
         8d:8c:56:92:c8:28:f9:34:62:0c:62:cc:3e:93:f1:7e:7a:01:
         70:d7:07:60:4d:49:52:58:8a:30:86:15:7f:3c:48:2c:a2:f3:
         1d:c1:68:9e:b2:5e:50:12:0f:d4:9d:bf:b9:23:a3:4d:66:19:
         4e:18:74:13:84:a7:b5:c9:f7:a3:fb:86:14:39:03:66:7d:d2:
         08:71:ab:cc:84:ac:69:b7:c3:28:c7:db:bb:30:7f:e8:a1:4d:
         93:12:fd:01:80:d1:d3:bb:1f:ec:25:79:68:75:87:3c:77:b2:
         d0:40:9f:38:9b:73:30:10:93:b3:9b:41:68:45:17:7b:fd:62:
         27:05:35:df:ec:2d:6a:3c:92:d6:d0:27:c9:d2:64:54:27:39:
         a1:25:e9:b6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUd0eIiE9p6ipQs7TVvhiGZxusVBowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMx
OEQ0OUZBRjAeFw0yNjA0MjAwNjIwMjhaFw0yNzA0MTkwNjI1MjhaMDMxMTAvBgNV
BAMTKDU1NTgwRTA0ODEyRUYwNjYxNkNBMzhGNUZBQkEyQTQ5RUI2RTM0MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTq+3WzohispbbDVGhJIYVbTXH
ILkTqJUszCgZy9DUtq9amF+ysLKoYix5OF0Pt57lDDuelOoKleBu5Bf9R0lB5tCr
HBhO9mps3fukM1xVZAplOKYsYNHJkBKc+LXib1XEkJdITYv+ZszXiKtduoORwkVt
eUoEkdK8ue/HLAO6T+kW+IgFbDozix/u/k5l6WxSZAg4oTK4e2jU1fLQINy9PuHK
+oZ3zKntSFHohKNvpiynoFf2Dey5ZjizyET8N2eDzO1spZ0WkrczDECrDvjxGJld
xHjHNMxOui6OHnKCyKU1J6iotlXZHndjjY5u8oWkz7p+pfQ8CQcJYXgWwh7TAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUVVgOBIEu8GYWyjj1+roqSetuNAkwHwYDVR0j
BBgwFoAUbRq1hWH8qFNJs0SzzKuvkxjUn68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5NDIxMDg3NDU0MDAzNS8wLzZEMUFCNTg1NjFGQ0E4NTM0OUIzNDRCM0NDQUJB
RjkzMThENDlGQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMxOEQ0OUZBRi5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDk0MjEwODc0NTQwMDM1LzAvMzQzMjJlMzYzMjJl
MzMzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM5MzgzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
Kj4gMA0GCSqGSIb3DQEBCwUAA4IBAQCsqY7MF6L/7ZsCeB7H0bBE2gadPujOpb6v
+gB10Ma9/GfvuhF50zoCFNltXP0KY0k8khtrMghoKg00JzpWL9aZT60IsG5NYoMQ
EPjDihPEo7q6ulzmpyOi11O3Zjt7umkc4yCeOsOQOmFrbl+NjFaSyCj5NGIMYsw+
k/F+egFw1wdgTUlSWIowhhV/PEgsovMdwWiesl5QEg/Unb+5I6NNZhlOGHQThKe1
yfej+4YUOQNmfdIIcavMhKxpt8Mox9u7MH/ooU2TEv0BgNHTux/sJXlodYc8d7LQ
QJ84m3MwEJOzm0FoRRd7/WInBTXf7C1qPJLW0CfJ0mRUJzmhJem2
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:27 2026 by rpki-client