Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e34382e302f32302d3230203d3e2039383038.roa
File:                     34322e36322e34382e302f32302d3230203d3e2039383038.roa (raw, json)
Hash identifier:          6QDbx2KjRpz8KPX6rRbAHTFqhAQbtXxyfAjUQWLilWE=
Subject key identifier:   D8:A9:52:04:36:C1:2E:02:44:FD:8A:32:F7:83:D6:EF:11:AB:17:DD
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       6BF4BEAC1204156A849FC0A3DF42C1ADA6C27812
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e34382e302f32302d3230203d3e2039383038.roa
Signing time:             Wed 13 May 2026 01:38:31 +0000
ROA not before:           Wed 13 May 2026 01:33:31 +0000
ROA not after:            Wed 12 May 2027 01:38:31 +0000
asID:                     9808
IP address blocks:        42.62.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f4:be:ac:12:04:15:6a:84:9f:c0:a3:df:42:c1:ad:a6:c2:78:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: May 13 01:33:31 2026 GMT
            Not After : May 12 01:38:31 2027 GMT
        Subject: CN=D8A9520436C12E0244FD8A32F783D6EF11AB17DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:ff:09:c0:47:10:23:26:d4:e8:0e:03:29:
                    55:42:29:32:f7:3b:0f:17:9f:cd:96:be:80:7d:14:
                    94:eb:61:ee:23:83:c0:d7:0b:ca:41:56:3d:77:13:
                    59:23:2d:7f:b4:05:6c:30:91:73:02:d7:80:a1:6a:
                    ca:ca:95:1c:51:8e:55:dc:d4:bd:6e:a8:2b:5b:13:
                    5a:9e:db:f8:23:bf:ad:2b:8a:cb:3e:dd:ab:7c:5f:
                    09:75:53:7a:13:76:67:e8:09:5f:64:b6:6e:92:e0:
                    be:73:95:96:b7:e2:36:6e:12:2a:90:ee:3d:2f:ca:
                    ee:ec:d5:4b:9c:04:70:4c:19:e6:57:b9:01:95:a9:
                    31:3d:40:83:2b:f3:e9:37:43:84:b6:67:a9:37:b2:
                    9a:5f:58:17:42:06:7d:9b:81:40:95:8e:a7:ec:cd:
                    dc:f6:05:98:bd:dc:1c:7f:64:01:2b:f6:ad:d3:d2:
                    89:35:3a:bf:57:87:fd:29:da:a5:54:45:97:08:cb:
                    0d:c5:21:dc:0c:6e:ce:56:6c:78:79:aa:6f:e7:c4:
                    3b:53:65:74:ae:d1:7f:4b:cb:6e:e3:6f:78:0d:e9:
                    45:19:55:fc:70:e8:fa:ca:cd:04:29:d1:24:cc:21:
                    74:96:9a:eb:63:58:c7:d7:13:d5:ec:0e:06:24:5e:
                    e3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A9:52:04:36:C1:2E:02:44:FD:8A:32:F7:83:D6:EF:11:AB:17:DD
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e34382e302f32302d3230203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bd:b3:ac:61:86:3d:4b:43:f0:4b:36:58:bb:68:47:0b:b4:02:
         84:c6:b3:40:80:2e:8e:58:e8:26:35:ff:80:ff:22:a6:74:94:
         1e:ca:e2:f2:32:f4:e0:0d:38:86:af:d3:6b:55:cf:a9:9a:27:
         56:7b:fa:c2:58:c8:e5:3f:eb:03:10:d0:66:1f:c2:3e:26:03:
         a4:af:02:c2:fd:93:50:cf:ad:87:fb:40:69:a3:ec:a6:b3:b1:
         ca:8b:1d:03:92:88:b4:36:5b:83:6f:48:a6:a0:3f:d4:aa:8d:
         02:d4:b9:8e:d8:11:6f:2b:52:07:5c:22:e8:bb:0b:6e:7e:1f:
         a4:0b:03:b1:86:c7:f0:f3:ec:fc:5c:73:03:0d:69:65:95:18:
         25:f9:af:84:57:6f:6b:12:0f:b8:7f:fe:49:0f:0f:c0:84:03:
         bf:06:5b:88:54:17:df:71:74:5b:18:90:99:35:9d:f4:fb:d2:
         54:a8:e3:29:91:fa:90:df:67:4f:f9:73:9c:05:3d:65:80:2d:
         42:4c:5c:9b:f2:96:eb:b0:d6:d3:5e:d8:13:a6:90:f3:d5:fb:
         49:17:39:52:95:83:4a:b7:7c:6a:57:e2:c1:dd:79:c5:29:d4:
         f1:a2:bb:63:d0:8f:b4:58:7e:44:8c:7a:ce:48:a2:1c:cb:fe:
         83:fd:a0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:15 2026 by rpki-client