Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa
File:                     34332e3234372e39302e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier:          0nfsvYjB3JaX9r5vzMBGJyLbtsVhFG6gWlCVWg7ZQao=
Subject key identifier:   B8:36:C3:4B:F6:38:A6:BD:E6:37:66:49:B7:A8:E0:62:93:B5:59:4A
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       39ED725EE8DFF0CD254258F954B0B751984D7754
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa
Signing time:             Sun 28 Jun 2026 13:54:05 +0000
ROA not before:           Sun 28 Jun 2026 13:49:05 +0000
ROA not after:            Sun 27 Jun 2027 13:54:05 +0000
asID:                     56046
IP address blocks:        43.247.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 22:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ed:72:5e:e8:df:f0:cd:25:42:58:f9:54:b0:b7:51:98:4d:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Jun 28 13:49:05 2026 GMT
            Not After : Jun 27 13:54:05 2027 GMT
        Subject: CN=B836C34BF638A6BDE6376649B7A8E06293B5594A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:57:03:c0:72:e9:41:91:e0:15:80:a2:09:
                    9d:4e:5a:26:11:86:cc:6a:0a:b0:26:58:64:ae:ee:
                    7e:31:72:31:4c:f7:ce:e9:ba:a1:0f:46:6a:db:11:
                    a1:b0:db:80:1c:2b:f1:ec:f2:c7:cf:e1:c3:86:6b:
                    78:06:61:4a:dd:5f:94:d2:75:6c:0e:ca:c4:3b:b7:
                    98:c7:d3:e2:9b:83:e8:4f:15:ef:65:a6:6b:d0:eb:
                    30:f7:b5:23:be:9d:d2:49:0e:25:dc:bf:ad:f1:cd:
                    50:f3:25:b6:2b:03:f0:da:0a:f4:84:12:ba:43:3c:
                    dc:6a:16:54:1c:3b:f3:49:ae:49:df:44:21:52:38:
                    a8:d8:65:ba:ff:a2:04:70:22:56:c2:b8:58:85:4b:
                    01:30:88:31:75:c3:32:8d:46:91:2d:58:d5:c4:75:
                    e0:7c:30:8f:63:b3:78:45:cf:ad:73:95:f8:7f:d0:
                    12:f1:5a:56:e7:78:3c:2e:31:e6:fc:2b:45:22:79:
                    e1:6b:22:f5:90:a2:23:c7:5a:ce:f2:d3:13:79:34:
                    2d:6b:9f:bf:5a:90:f3:16:f6:c5:a7:48:2f:b3:9c:
                    95:2a:18:b8:7a:6f:f6:2a:2f:47:4b:d9:96:20:51:
                    6f:0a:a3:68:5b:b1:6e:f6:8f:1a:b0:ae:d1:08:cf:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:36:C3:4B:F6:38:A6:BD:E6:37:66:49:B7:A8:E0:62:93:B5:59:4A
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:d2:5b:96:99:fd:c5:e2:a8:e2:d8:3c:65:c9:fe:0b:5f:89:
         75:5a:94:89:01:5d:1c:8b:3c:1c:71:19:ef:e3:80:62:25:d2:
         cc:51:b2:18:90:99:a8:ea:5e:ea:36:03:f5:01:a1:15:35:66:
         3b:59:7e:2d:93:6d:bc:3c:bc:de:95:ef:e4:a2:90:ba:ce:f0:
         c5:37:91:4a:07:0d:73:5c:8e:5c:d5:79:82:94:a0:16:aa:fc:
         1f:bb:a3:f7:83:8c:70:4b:0f:c3:f2:db:76:a3:78:bb:a3:96:
         1b:6d:d2:cc:58:c2:8e:04:ce:7e:05:f9:44:2d:3c:f9:2d:f4:
         10:40:2d:92:06:f0:d7:d7:c4:45:0e:de:a6:22:64:3e:5e:cc:
         43:f2:3a:a9:1b:65:18:0c:5a:9f:67:0d:89:e1:02:c0:66:ad:
         ce:b1:89:41:f4:85:c0:c1:ee:c3:dc:d0:90:75:24:3e:97:ba:
         22:fe:13:89:27:13:c7:86:8d:73:a6:5b:9e:b3:38:06:4a:9f:
         47:9c:8c:b3:29:b5:21:80:27:a4:ad:da:3e:01:93:10:47:99:
         08:ff:17:9e:7a:f3:f2:d0:cf:29:ff:9b:e3:fb:5a:c6:f6:16:
         a2:cb:68:22:a7:f9:6b:48:75:d4:50:16:5d:ef:d6:81:f9:a8:
         d4:fc:94:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:21 2026 by rpki-client