Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa
File:                     34332e3234372e38342e302f32322d3232203d3e203539303834.roa (raw, json)
Hash identifier:          UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=
Subject key identifier:   7D:63:E2:BD:18:DF:DF:31:62:3D:EC:36:1F:B2:93:8D:1A:58:3B:51
Certificate issuer:       /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial:       58A724BCA284225379D2F589FB425A70F407FA80
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa
Signing time:             Mon 20 Apr 2026 07:50:33 +0000
ROA not before:           Mon 20 Apr 2026 07:45:33 +0000
ROA not after:            Mon 19 Apr 2027 07:50:33 +0000
asID:                     59084
IP address blocks:        43.247.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 May 2026 11:49:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a7:24:bc:a2:84:22:53:79:d2:f5:89:fb:42:5a:70:f4:07:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
        Validity
            Not Before: Apr 20 07:45:33 2026 GMT
            Not After : Apr 19 07:50:33 2027 GMT
        Subject: CN=7D63E2BD18DFDF31623DEC361FB2938D1A583B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:da:ee:2e:58:95:ec:62:56:4d:4c:92:74:
                    ef:4d:dd:1a:39:15:d3:90:36:9e:f0:1e:70:33:b6:
                    cb:cf:8c:81:06:40:6a:e9:18:4a:e7:6f:c1:c5:8b:
                    19:5e:c8:ed:5a:8e:c4:d0:9f:38:a2:5f:93:94:6c:
                    44:4e:e0:22:ff:72:20:87:55:c8:39:51:e6:1d:04:
                    1a:2e:f7:b6:ba:2a:ea:c5:ac:cd:d6:4b:e7:cd:af:
                    d5:ab:32:86:be:80:d2:af:7a:fc:e3:66:8a:d0:ac:
                    bf:2e:c0:3c:c7:5c:d6:bc:ae:80:3b:eb:59:4f:7f:
                    90:d9:54:86:42:10:ef:28:e6:51:70:3b:1a:4d:5d:
                    b6:6d:fb:db:4e:11:f4:aa:65:ce:09:41:75:fc:0a:
                    f5:fa:2e:bf:c0:ec:9f:ee:ec:44:5b:2b:36:af:34:
                    5d:01:7d:c7:62:08:6c:89:6f:65:1e:db:df:8d:05:
                    91:1c:78:8e:a2:8f:58:a1:38:66:d0:42:3b:58:63:
                    6b:72:9a:59:7a:28:31:5b:08:3a:15:be:8c:6c:0b:
                    ab:b6:b1:84:f9:28:cc:cd:a7:4f:65:44:13:88:98:
                    33:38:cc:3a:57:ba:53:fc:7b:d0:6e:84:5c:a3:af:
                    dc:46:63:27:c6:a5:5f:5a:14:c4:a0:ed:ff:7e:0a:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:E2:BD:18:DF:DF:31:62:3D:EC:36:1F:B2:93:8D:1A:58:3B:51
            X509v3 Authority Key Identifier:
                keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:4f:0a:f8:a1:2c:ad:ca:ab:20:89:bf:86:d7:65:99:6f:
         ef:61:9e:c9:e0:ca:dc:24:3f:9d:d0:30:a2:6a:5c:d3:47:2f:
         ac:94:59:c3:36:c6:74:1e:3a:d4:06:89:02:c2:d3:8b:66:fd:
         16:08:4b:5b:a5:cf:ba:02:67:27:3c:69:f3:a3:5f:e8:87:41:
         ed:ff:4b:73:29:70:d9:89:ab:33:33:55:81:73:d5:6b:c8:d8:
         d7:22:3c:d9:b6:ce:04:26:db:1f:6d:59:12:2d:78:ba:84:45:
         61:98:ef:5e:9f:4c:67:01:b0:50:46:89:b9:68:c2:fc:f6:a9:
         8e:8b:19:d0:27:59:1f:ea:cd:5f:a0:f0:ac:2f:30:1b:cb:88:
         7d:25:6b:8c:9a:9a:8f:2a:4d:88:a4:8e:96:ff:20:06:a8:32:
         34:13:ab:8f:f5:30:ab:cc:c3:ee:fa:6a:80:c0:7a:dc:f4:75:
         3b:52:d9:00:83:7b:b5:ea:f2:0a:64:b1:bb:35:78:b7:84:f4:
         3b:73:a0:fa:4f:5b:4d:73:28:2b:4a:9b:d9:5c:19:aa:6d:22:
         ec:ef:e5:e2:00:41:fa:1f:fa:b2:c4:04:df:ab:d1:b7:2a:06:
         c4:a5:7c:82:5a:09:e2:05:40:6b:32:a9:cc:c8:26:59:df:55:
         87:b2:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:38 2026 by rpki-client