Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa
File:                     34322e36322e38322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=
Subject key identifier:   06:7A:B9:93:B2:5E:85:C1:FD:A9:8C:74:3D:5D:30:B2:F1:13:13:C5
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       41527701D4DD4128BAE811B57D025A9D1E9F4455
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 13 May 2026 01:35:30 +0000
ROA not before:           Wed 13 May 2026 01:30:30 +0000
ROA not after:            Wed 12 May 2027 01:35:30 +0000
asID:                     4808
IP address blocks:        42.62.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:52:77:01:d4:dd:41:28:ba:e8:11:b5:7d:02:5a:9d:1e:9f:44:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: May 13 01:30:30 2026 GMT
            Not After : May 12 01:35:30 2027 GMT
        Subject: CN=067AB993B25E85C1FDA98C743D5D30B2F11313C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:0e:9a:72:1e:a8:d0:43:70:6e:ea:55:94:
                    7d:d7:08:dd:e9:05:76:cc:c6:2e:33:ca:6d:76:fe:
                    01:e2:f9:10:a3:1f:d3:ff:67:c6:8f:7a:8c:24:3e:
                    89:57:9d:63:4c:16:89:0f:57:ff:2b:e1:c8:14:d2:
                    f2:18:c3:33:62:53:19:a8:ef:1b:09:67:d5:47:37:
                    c6:49:fe:a6:cf:b0:a9:63:a5:b0:da:81:2d:41:cb:
                    3b:10:57:f0:d5:b9:76:27:cb:81:13:a2:b9:39:ff:
                    a5:ee:c0:70:5e:f5:26:da:f3:bb:9b:2a:1f:eb:68:
                    21:10:1a:f2:54:76:c0:2c:cb:b9:7c:c0:e2:19:f4:
                    6b:b8:34:d3:b8:ff:12:5f:78:68:0c:af:bd:80:1a:
                    6f:31:38:53:7c:cc:4d:91:7c:a6:eb:25:5b:32:46:
                    42:c5:b2:33:91:a9:f5:dd:be:cf:2c:98:c4:04:a5:
                    e3:a9:3b:7f:6e:1d:af:9a:b6:23:55:dc:b7:30:e5:
                    8a:91:ed:fc:f0:92:54:69:f3:2f:b3:66:e8:46:d7:
                    fa:59:a1:fd:84:96:bb:9a:e5:60:b0:12:97:d3:1e:
                    31:ac:26:86:ab:0c:3c:fb:91:66:e2:6f:32:c0:23:
                    dd:4f:8c:3d:69:f0:e3:60:50:a3:40:1e:e9:60:d8:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7A:B9:93:B2:5E:85:C1:FD:A9:8C:74:3D:5D:30:B2:F1:13:13:C5
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:14:76:c8:34:12:bb:19:4a:3b:81:7f:01:e5:d4:f6:f3:72:
         f4:27:ca:0f:85:39:39:26:db:25:7a:8e:56:05:87:da:14:eb:
         38:89:ff:44:a0:76:7f:c7:cd:fb:48:d0:ef:2a:fd:33:ad:19:
         0e:26:c8:4d:80:bd:bd:c2:bb:66:45:04:09:73:80:29:ff:72:
         75:6a:85:d0:45:e1:b1:74:0a:9f:71:95:c0:1b:f8:28:44:9a:
         7f:c0:78:e2:87:a8:35:f3:75:41:d8:c1:47:4b:f6:a1:08:9c:
         ab:fe:4a:08:3b:52:5c:de:2c:1f:b7:6c:9a:d7:38:a7:22:00:
         51:d3:48:4a:31:40:90:18:66:d2:a8:ad:e9:55:a3:bf:1d:b1:
         80:3f:67:20:05:d2:ce:2b:27:42:7e:8c:51:2e:02:c4:7e:de:
         1f:c6:51:7f:c2:f2:69:39:b3:2d:d3:90:ce:fc:d9:e6:b5:58:
         93:3a:80:86:48:3d:d9:a1:a5:84:b9:f9:6b:10:5e:9c:ac:0f:
         6b:63:79:88:ae:b1:95:0a:6d:a6:9f:bb:a5:13:24:ae:a5:dc:
         a8:e2:88:6f:68:88:ef:0e:64:be:b8:72:68:83:02:b7:fa:b9:
         38:1e:de:d3:f3:92:2a:08:58:39:80:3a:4e:4e:b0:a9:ce:46:
         e1:c1:fe:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUQVJ3AdTdQSi66BG1fQJanR6fRFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMx
OEQ0OUZBRjAeFw0yNjA1MTMwMTMwMzBaFw0yNzA1MTIwMTM1MzBaMDMxMTAvBgNV
BAMTKDA2N0FCOTkzQjI1RTg1QzFGREE5OEM3NDNENUQzMEIyRjExMzEzQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIeQ6ach6o0ENwbupVlH3XCN3p
BXbMxi4zym12/gHi+RCjH9P/Z8aPeowkPolXnWNMFokPV/8r4cgU0vIYwzNiUxmo
7xsJZ9VHN8ZJ/qbPsKljpbDagS1ByzsQV/DVuXYny4ETork5/6XuwHBe9Sba87ub
Kh/raCEQGvJUdsAsy7l8wOIZ9Gu4NNO4/xJfeGgMr72AGm8xOFN8zE2RfKbrJVsy
RkLFsjORqfXdvs8smMQEpeOpO39uHa+atiNV3Lcw5YqR7fzwklRp8y+zZuhG1/pZ
of2Elrua5WCwEpfTHjGsJoarDDz7kWbibzLAI91PjD1p8ONgUKNAHulg2DhZAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUBnq5k7JehcH9qYx0PV0wsvETE8UwHwYDVR0j
BBgwFoAUbRq1hWH8qFNJs0SzzKuvkxjUn68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ5NDIxMDg3NDU0MDAzNS8wLzZEMUFCNTg1NjFGQ0E4NTM0OUIzNDRCM0NDQUJB
RjkzMThENDlGQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMxOEQ0OUZBRi5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDk0MjEwODc0NTQwMDM1LzAvMzQzMjJlMzYzMjJl
MzgzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzgzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
Kj5SMA0GCSqGSIb3DQEBCwUAA4IBAQA8FHbINBK7GUo7gX8B5dT283L0J8oPhTk5
Jtsleo5WBYfaFOs4if9EoHZ/x837SNDvKv0zrRkOJshNgL29wrtmRQQJc4Ap/3J1
aoXQReGxdAqfcZXAG/goRJp/wHjih6g183VB2MFHS/ahCJyr/koIO1Jc3iwft2ya
1zinIgBR00hKMUCQGGbSqK3pVaO/HbGAP2cgBdLOKydCfoxRLgLEft4fxlF/wvJp
ObMt05DO/NnmtViTOoCGSD3ZoaWEuflrEF6crA9rY3mIrrGVCm2mn7ulEySupdyo
4ohvaIjvDmS+uHJogwK3+rk4Ht7T85IqCFg5gDpOTrCpzkbhwf5l
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:43 2026 by rpki-client