Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313334373631.roa
File:                     34332e3139332e36352e302f32342d3234203d3e20313334373631.roa (raw, json)
Hash identifier:          vtB4q26rJZnPT0HeksyyQ09N0xJbQpfDhBpPOrG+qEE=
Subject key identifier:   B1:48:86:C0:CA:2C:3C:1F:5A:DD:69:AA:C3:D4:F6:3B:18:34:10:12
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       32DED14BCB91891BAC32BFE02644743BBC3D8955
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313334373631.roa
Signing time:             Wed 12 Aug 2026 07:50:17 +0000
ROA not before:           Wed 12 Aug 2026 07:45:17 +0000
ROA not after:            Wed 11 Aug 2027 07:50:17 +0000
asID:                     134761
IP address blocks:        43.193.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:de:d1:4b:cb:91:89:1b:ac:32:bf:e0:26:44:74:3b:bc:3d:89:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Aug 12 07:45:17 2026 GMT
            Not After : Aug 11 07:50:17 2027 GMT
        Subject: CN=B14886C0CA2C3C1F5ADD69AAC3D4F63B18341012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d8:89:8c:9b:ff:63:92:47:c0:0b:ca:19:b9:
                    a3:1b:2f:40:58:b7:26:20:e6:cf:88:0a:db:3f:72:
                    2e:b1:37:d7:9c:36:72:0c:26:79:d9:56:fb:a4:40:
                    60:1a:14:c9:25:d1:29:2a:d1:1e:04:3b:a2:81:6b:
                    f3:17:21:ac:35:9d:3c:8e:7a:5e:aa:82:9c:5d:e3:
                    8d:5b:86:82:d1:4a:10:88:54:86:55:5f:28:cb:0c:
                    f3:c4:00:ae:f2:61:e7:5c:75:93:af:8f:40:77:7b:
                    ae:27:7b:f3:3c:cb:ce:1a:c4:a2:0b:5b:c5:3e:d2:
                    cb:d9:3a:e1:55:8f:6f:80:51:aa:d8:05:91:67:6e:
                    8d:7d:28:06:de:97:b4:cc:12:52:15:a1:12:72:fb:
                    9d:09:3c:34:2d:5b:bc:cf:62:e3:22:55:c1:aa:40:
                    5b:f7:1c:3e:9d:c8:6d:59:a9:37:23:ec:36:7b:54:
                    1a:81:fc:ff:00:8c:05:48:43:f0:e8:a9:52:75:94:
                    57:9b:62:6b:05:75:6d:41:6e:7c:0e:fb:79:ef:fa:
                    39:6d:91:2d:f2:4a:0a:85:c0:57:e3:b4:cc:79:e9:
                    95:9b:d2:06:6e:df:40:79:41:b9:a2:4d:8d:01:dc:
                    6f:44:0f:07:ef:db:55:ab:26:f2:a3:34:f4:35:dc:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:48:86:C0:CA:2C:3C:1F:5A:DD:69:AA:C3:D4:F6:3B:18:34:10:12
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313334373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:bd:d3:34:63:8e:bd:79:07:1c:f9:61:d1:7c:28:45:56:a0:
         9c:c6:a1:a4:8f:fb:d1:f7:b6:a9:ec:92:e1:a4:29:d5:f6:e3:
         f7:65:75:2a:0d:17:53:ba:97:dc:f4:d2:b2:23:f1:93:47:c9:
         c3:f1:03:1e:cb:7d:1c:89:9e:00:8d:4a:32:20:8b:15:01:31:
         88:84:2c:49:27:d7:33:c6:5b:f4:ac:54:e0:23:34:cc:0d:8d:
         ea:98:4c:0b:ea:6a:cf:9c:f8:5d:1f:ac:54:40:8a:22:8a:0d:
         64:d7:9d:87:e1:94:42:4b:0f:45:0c:6a:df:ec:b2:ea:f1:f1:
         d0:8a:cf:82:4b:7e:dd:b0:55:8c:de:02:35:72:69:84:f3:20:
         25:e7:1e:c2:f7:6d:9b:3b:81:3d:e9:09:d0:ba:e4:97:ea:dc:
         89:eb:be:b5:57:e1:3b:0c:6a:ff:45:99:ab:e4:77:79:2d:f2:
         67:c0:db:09:85:b5:4b:c3:ae:8c:cc:13:15:a0:9e:4d:b6:6d:
         58:21:17:27:2c:9d:08:2a:bf:44:fa:1e:2c:70:ea:ad:63:5e:
         36:ef:24:36:5e:33:0c:4f:24:1f:95:04:94:69:56:d8:ed:87:
         15:cb:11:71:85:07:f9:b7:dc:f4:f0:68:af:72:30:fd:1d:96:
         6b:88:fd:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:28 2026 by rpki-client