Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa
File:                     34332e3139332e36352e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier:          V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=
Subject key identifier:   32:E1:5B:2E:23:C0:30:28:DB:B2:AC:CF:17:75:2B:A1:6A:D2:FE:D5
Certificate issuer:       /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial:       6FD85649F486613345FF23056DF783C502F1FF5B
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa
Signing time:             Wed 12 Aug 2026 07:45:51 +0000
ROA not before:           Wed 12 Aug 2026 07:40:51 +0000
ROA not after:            Wed 11 Aug 2027 07:45:51 +0000
asID:                     9808
IP address blocks:        43.193.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 31 Aug 2026 10:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d8:56:49:f4:86:61:33:45:ff:23:05:6d:f7:83:c5:02:f1:ff:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
        Validity
            Not Before: Aug 12 07:40:51 2026 GMT
            Not After : Aug 11 07:45:51 2027 GMT
        Subject: CN=32E15B2E23C03028DBB2ACCF17752BA16AD2FED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:8a:b9:a1:ed:fd:e0:ac:8e:6e:be:43:08:
                    2a:fe:1a:61:51:b3:9a:85:64:0d:60:67:ba:b2:48:
                    e1:cf:05:30:19:04:fb:69:a4:72:99:35:2d:d5:82:
                    18:5f:38:8a:57:41:94:87:a6:c2:8c:01:99:a6:26:
                    d1:97:51:fc:3a:72:e9:6a:ef:ea:ab:cc:27:85:71:
                    cb:c2:95:39:b1:8a:13:1f:82:42:c8:4e:64:28:62:
                    6e:e0:2a:97:a2:86:b7:81:f9:06:4c:e4:8d:fb:b8:
                    bc:3b:6d:6a:61:31:ac:c1:85:3e:00:82:1b:48:19:
                    69:0d:1f:db:b5:8c:ca:19:72:22:59:ac:89:2e:85:
                    e5:f1:29:34:f4:9c:e1:3b:f3:5a:97:40:c5:b2:d2:
                    87:38:ff:bd:97:51:7f:d7:cf:67:0f:ff:47:4d:0c:
                    82:9c:45:1e:8e:19:2b:4d:c2:3e:f8:41:fd:93:3d:
                    c5:63:8d:bf:14:39:d0:11:2d:14:c2:67:9e:1f:5c:
                    e2:60:4f:a0:46:84:6a:d7:0a:bc:f0:9f:24:aa:e4:
                    e8:a9:e7:db:40:3e:d3:13:43:54:af:8c:c9:43:69:
                    a4:1f:82:da:66:07:ba:a2:08:e4:be:30:9e:f2:52:
                    9e:33:ba:fc:2a:1e:9c:1f:08:96:b1:40:f8:be:49:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E1:5B:2E:23:C0:30:28:DB:B2:AC:CF:17:75:2B:A1:6A:D2:FE:D5
            X509v3 Authority Key Identifier:
                keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.193.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:56:08:30:b9:11:75:61:33:18:10:12:be:92:28:c9:fb:91:
         c8:16:d2:2b:e2:9a:7b:a7:a8:cd:b9:46:4d:0b:0e:81:8a:e1:
         4d:81:10:5f:36:bd:45:1b:d1:48:3c:5d:3b:b2:b1:87:8a:79:
         5c:3d:8d:94:2b:c8:81:73:ab:14:40:de:26:e9:57:c4:c2:19:
         7c:9d:2b:80:8e:3d:5b:01:6b:d8:7f:da:ed:10:7f:b5:18:2b:
         39:6b:fe:bc:ad:10:1b:1c:3d:b8:34:ae:9a:a6:27:3c:d6:87:
         71:04:5b:f0:d0:d5:0b:6a:9d:bb:51:9d:33:e4:14:ff:78:d5:
         19:fa:21:2e:b5:f8:9d:92:f0:11:86:10:46:6a:90:b3:85:f0:
         3a:a6:c5:a2:9f:3b:00:08:0c:e0:70:f5:ae:2f:ce:ac:d4:05:
         1b:8f:5d:74:77:11:66:50:92:44:48:ac:55:4b:3b:f2:d0:ed:
         77:06:ac:3a:8b:69:b5:79:1f:5d:d7:c6:0e:1c:8d:1f:b7:f9:
         f0:cf:21:3d:31:33:45:a4:ec:c2:79:18:86:95:98:47:ff:5f:
         a0:43:70:d0:00:1b:a5:16:da:92:9f:ce:b2:18:c5:3a:28:1a:
         42:24:ed:42:e0:89:3b:17:a3:2a:a5:c0:cd:1d:36:d6:1a:4c:
         cf:54:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:26 2026 by rpki-client