Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e203130323036.roa
File:                     34332e3139332e36352e302f32342d3234203d3e203130323036.roa (raw, json)
Hash identifier:          6m6sraX2wercPUwc5ViicNvbpVzyOKO2UCe0QtoYQwQ=
Subject key identifier:   BD:EB:8C:9A:B2:09:24:CA:8F:BA:DB:EF:E5:59:4F:6A:9D:6F:5F:69
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       5E736D1E59C2168505F792C2EE7A86B515FECD2C
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e203130323036.roa
Signing time:             Wed 12 Aug 2026 07:54:22 +0000
ROA not before:           Wed 12 Aug 2026 07:49:22 +0000
ROA not after:            Wed 11 Aug 2027 07:54:22 +0000
asID:                     10206
IP address blocks:        43.193.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:73:6d:1e:59:c2:16:85:05:f7:92:c2:ee:7a:86:b5:15:fe:cd:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Aug 12 07:49:22 2026 GMT
            Not After : Aug 11 07:54:22 2027 GMT
        Subject: CN=BDEB8C9AB20924CA8FBADBEFE5594F6A9D6F5F69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:74:fb:f7:37:36:a5:a0:af:22:2c:f5:b0:
                    b6:cb:3a:f5:7b:87:d2:cf:1f:f2:87:ce:f1:a2:b6:
                    ba:b7:db:a0:cb:f1:b6:af:99:54:aa:2f:7f:12:07:
                    39:62:83:2a:e8:fe:1d:00:0a:3d:b5:6b:d2:5c:47:
                    33:c6:2f:c0:ef:9f:b3:2b:d7:23:36:76:47:ce:6e:
                    87:68:df:24:0f:37:40:fe:9d:c1:9a:b8:fc:dc:75:
                    cc:60:62:3a:ce:dd:f7:de:58:08:86:11:09:8c:96:
                    cb:8f:cc:37:5a:1b:97:09:b1:19:10:61:7d:e5:5a:
                    a7:3d:89:4a:81:ef:0b:ad:c6:79:49:2d:cd:00:d3:
                    c1:8e:d3:c1:a8:91:81:9d:e2:36:cb:b5:a6:6e:7c:
                    39:83:d1:38:63:7f:54:bb:5e:0b:c0:a5:95:ae:d4:
                    dd:8f:59:d3:36:95:71:cc:7a:25:5f:5c:ad:d8:b1:
                    3a:bf:4b:60:e0:3c:1a:87:3a:2d:d1:04:c0:9e:38:
                    7f:ac:a7:e8:1e:9d:da:a6:57:40:9d:0d:ef:5d:fa:
                    68:bb:0f:0f:aa:65:a9:d4:44:d6:e0:d1:4c:e5:48:
                    87:c5:87:18:12:1a:dd:25:42:b0:24:ac:7f:fd:47:
                    56:82:d7:7d:8b:4d:9c:60:9b:15:e4:09:96:75:7d:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:8C:9A:B2:09:24:CA:8F:BA:DB:EF:E5:59:4F:6A:9D:6F:5F:69
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e203130323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:a3:58:78:2a:20:33:49:5c:a0:7a:16:03:ab:a5:db:a0:b9:
         b2:d2:3c:54:e9:31:6a:bd:70:7e:f0:2d:ed:5a:26:02:93:0a:
         12:b3:61:2a:98:f8:a0:01:7e:a9:a6:76:c0:fa:13:83:33:ed:
         af:26:5c:42:81:08:92:86:27:4d:bf:34:94:a2:f5:e6:a2:ee:
         60:24:95:4c:34:b7:76:09:4f:b1:77:da:71:7d:c5:85:48:e8:
         97:34:9b:cb:e7:41:6e:74:96:41:71:56:b0:9a:55:93:f5:c0:
         85:62:9c:30:67:f0:0b:9d:7d:72:a0:bc:00:ef:f1:68:ac:e3:
         07:a3:c3:10:37:7b:f0:2d:f1:ca:27:8f:c1:26:ed:41:9e:f3:
         ae:f8:4c:aa:f8:36:7e:fe:54:c6:cc:c6:26:a7:fa:a2:2a:c9:
         61:66:e7:02:55:c2:4e:62:0b:8b:61:e4:7b:00:02:9a:08:a5:
         ba:d6:00:46:ca:ba:20:29:b6:a1:48:9c:8a:ec:7c:ff:aa:b1:
         1f:a6:96:cb:08:3f:41:09:10:2f:36:a4:cd:3a:d8:27:3f:ee:
         ee:ca:e7:72:96:39:a8:00:f6:0f:53:cf:5a:8a:25:00:05:0b:
         0c:08:6c:8d:10:9b:f2:a4:83:d8:4b:b1:9a:de:64:28:c2:01:
         7d:2d:f4:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:28 2026 by rpki-client