Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313335363239.roa
File:                     34332e3139332e36352e302f32342d3234203d3e20313335363239.roa (raw, json)
Hash identifier:          MwVN3taj66Ka8e6zM6DN8RrX4mecL96iDgmUhMFQ9x0=
Subject key identifier:   82:87:50:88:FA:BF:F1:97:B6:0A:CC:7C:EC:7D:92:07:13:45:56:8C
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       1B77659595F4574AD0775D29DC586332A7543536
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313335363239.roa
Signing time:             Wed 12 Aug 2026 07:45:52 +0000
ROA not before:           Wed 12 Aug 2026 07:40:52 +0000
ROA not after:            Wed 11 Aug 2027 07:45:52 +0000
asID:                     135629
IP address blocks:        43.193.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:77:65:95:95:f4:57:4a:d0:77:5d:29:dc:58:63:32:a7:54:35:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Aug 12 07:40:52 2026 GMT
            Not After : Aug 11 07:45:52 2027 GMT
        Subject: CN=82875088FABFF197B60ACC7CEC7D92071345568C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:70:bf:5d:be:51:30:e3:40:dd:82:07:01:
                    ee:7c:7e:8c:08:79:55:5b:2d:61:04:fe:e5:6e:aa:
                    05:79:fa:42:bd:46:4a:c1:b5:e0:54:6a:fd:2e:e3:
                    9a:25:df:49:00:87:4f:8d:5a:bf:75:64:c6:65:e1:
                    f7:c9:b3:3a:24:81:db:ae:b2:7c:ae:26:bc:2e:a0:
                    3c:a3:b6:30:54:2f:c0:b8:10:8b:55:3c:1b:c1:2e:
                    29:6c:90:76:30:6e:ac:a5:80:d1:1c:3a:fb:c1:fe:
                    bd:a4:e0:e0:3a:2b:61:c5:d2:b6:30:4f:53:c9:59:
                    94:f7:39:ea:68:e4:64:eb:93:2c:7d:47:ca:3b:dd:
                    ab:d1:8e:e2:de:ff:21:49:f2:eb:a9:97:77:65:74:
                    76:e4:6a:39:c1:e7:19:42:28:37:9b:5a:b6:5f:96:
                    ba:8a:d4:73:62:f1:90:8c:d3:e2:8c:89:21:f7:5e:
                    10:37:a0:30:d4:58:92:1f:1b:5d:2b:82:72:e4:07:
                    73:f2:d3:c0:b2:0a:cc:f4:2f:aa:f2:49:97:cf:cd:
                    46:7b:b7:61:9e:ab:07:79:41:22:65:d7:58:c3:5d:
                    87:22:4a:c9:a3:ba:81:6f:ba:df:ae:db:86:f6:3e:
                    22:ec:32:8c:aa:5b:0c:97:bf:a8:2c:b4:09:56:b8:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:87:50:88:FA:BF:F1:97:B6:0A:CC:7C:EC:7D:92:07:13:45:56:8C
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e20313335363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:fc:70:81:eb:ce:f3:5c:92:3d:62:bc:fa:29:5e:c0:48:48:
         39:07:06:7e:4a:dc:9f:ca:ec:26:99:8c:00:ea:5f:f9:49:70:
         d1:4e:da:22:3e:c1:4e:3a:98:60:1f:a2:85:91:b2:3e:db:ac:
         e1:51:93:4b:37:49:39:6b:01:ea:48:0a:58:0f:db:50:45:2d:
         7c:e8:5a:78:9e:fe:40:56:fb:6e:10:dc:0d:ba:52:61:d7:ff:
         36:3d:97:57:b3:83:ac:1f:14:1f:7e:53:ac:49:ee:75:90:2d:
         ae:4c:56:09:b8:c1:28:cb:ad:b6:40:63:44:73:84:7a:29:ca:
         96:bc:3d:3a:3f:b3:59:4c:08:31:55:ba:49:3c:56:27:90:c8:
         09:52:83:71:c0:8f:b0:fd:15:45:48:9c:35:73:67:f4:5c:b5:
         27:df:52:bb:60:54:b3:e5:2a:16:5e:b2:ef:4d:77:b3:b8:ef:
         10:52:40:50:fe:95:40:02:0b:56:9e:4d:af:65:6f:95:9b:c4:
         af:9b:45:1e:f2:00:c3:2c:ac:0b:4f:e3:87:47:18:86:51:af:
         01:5d:66:a5:fc:5b:17:cc:37:31:a6:ca:87:e6:7f:9f:5e:a1:
         5f:c4:39:2f:d9:fa:78:48:e7:4a:9a:81:c2:b4:19:d8:c4:d1:
         5b:71:b9:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:30 2026 by rpki-client