Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38352e302f32342d3234203d3e2034383038.roa
File:                     34322e36322e38352e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          d6s6STG5xAhM+Q03cuASnNG/lEicPG7doEKUy6uuw0A=
Subject key identifier:   13:28:2D:52:2F:E3:DA:8F:A8:DA:71:B9:02:BB:6F:91:BB:4C:38:0D
Certificate issuer:       /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial:       0DE71C4B1F43077961672E40C45C467634D59745
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38352e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 13 May 2026 01:35:54 +0000
ROA not before:           Wed 13 May 2026 01:30:54 +0000
ROA not after:            Wed 12 May 2027 01:35:54 +0000
asID:                     4808
IP address blocks:        42.62.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e7:1c:4b:1f:43:07:79:61:67:2e:40:c4:5c:46:76:34:d5:97:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
        Validity
            Not Before: May 13 01:30:54 2026 GMT
            Not After : May 12 01:35:54 2027 GMT
        Subject: CN=13282D522FE3DA8FA8DA71B902BB6F91BB4C380D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:07:c6:50:21:0a:51:93:64:3e:41:66:ea:
                    a6:ef:a1:6c:e9:4f:bf:98:3a:1f:63:0c:b0:af:00:
                    08:78:49:9d:be:23:da:2f:5a:35:c8:61:12:74:8b:
                    5f:c8:01:b4:3a:08:2a:4b:88:1e:ac:ab:c7:ad:0a:
                    07:bf:4a:33:33:03:54:25:22:b5:43:8f:90:a2:21:
                    3c:40:ad:ca:3a:30:c4:40:ff:1a:03:e1:20:06:6e:
                    cc:2d:7a:b3:07:a4:04:67:21:c6:23:02:6f:0f:6e:
                    db:aa:ea:e4:68:03:0f:1d:9e:82:ee:c9:b0:6b:e8:
                    cd:14:02:77:17:8d:47:72:e0:82:2c:ce:fc:25:71:
                    43:7e:f7:47:e0:21:82:6c:64:38:53:da:ba:1e:a0:
                    ed:e0:ac:83:16:66:52:6c:b5:6b:e9:3e:e8:c5:f5:
                    77:28:f4:64:ad:02:27:df:49:1f:4d:cb:0d:a1:6a:
                    de:41:13:4b:c9:fa:03:99:bd:e9:86:b7:57:7b:54:
                    46:95:05:3d:e0:ad:0c:6d:d7:51:88:f3:1c:fa:d1:
                    26:df:70:20:f9:89:2c:11:93:4b:41:8e:7a:2c:24:
                    fc:7a:23:64:8d:1c:af:95:ca:61:75:87:cd:4b:a8:
                    f6:52:2d:ca:41:22:6c:62:72:3c:6e:f4:56:6d:10:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:28:2D:52:2F:E3:DA:8F:A8:DA:71:B9:02:BB:6F:91:BB:4C:38:0D
            X509v3 Authority Key Identifier:
                keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38352e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.62.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:bd:71:6a:d9:5c:a1:2c:6e:69:19:d8:e4:bd:7a:e2:ae:6d:
         db:a6:71:ec:7b:54:ba:28:e0:e7:03:bd:57:2d:e2:66:66:b4:
         8a:c3:af:85:f6:2c:54:59:f4:91:1f:f8:c7:d4:25:63:75:d3:
         5f:fc:ab:8d:8c:87:ee:1d:97:89:ae:1b:58:08:bd:14:cd:37:
         d3:7d:d1:5d:7c:9e:4f:86:67:fa:0f:fa:4a:6a:87:fc:42:9f:
         2c:6b:f1:46:44:01:8e:96:f7:ff:55:34:50:82:e0:04:af:b0:
         15:94:5a:f4:6d:0c:ef:ca:44:38:07:dd:10:7d:b5:4c:0f:f5:
         b2:c1:ff:be:16:a3:00:36:b7:99:f3:54:f8:03:7c:4d:d8:a3:
         c8:51:2e:b9:61:64:bd:1a:f6:da:83:ff:a4:1f:30:2f:e4:f4:
         7f:c2:67:08:b8:bd:7c:04:39:19:29:06:2d:15:f9:1e:9d:6c:
         c9:65:81:0c:39:66:6e:3e:8e:83:55:cc:46:f6:78:42:eb:ae:
         6e:43:49:1d:0c:a7:15:ac:10:d5:95:f3:74:3d:f7:0f:17:3d:
         83:52:87:1f:43:cd:9b:4c:ff:c5:22:a8:ff:79:c8:18:9c:8f:
         99:f8:8d:8d:78:2f:35:c3:1d:61:2e:a6:a0:b2:b9:82:66:d5:
         c9:a2:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:02:23 2026 by rpki-client