Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3234322e3139362e302f32322d3232203d3e20313337363937.roa
File:                     34332e3234322e3139362e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          WvVWkcnJ15KKabdE/QSwvHRPa3mgCJrR6Ki204i41B0=
Subject key identifier:   6C:78:B1:07:C8:9A:E1:A7:55:93:28:33:E3:14:AA:3B:3B:3F:F5:FE
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       3C847175B0FCF3D60C81706F95654C4F54B970D1
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3234322e3139362e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:51:25 +0000
ROA not before:           Thu 14 May 2026 07:46:25 +0000
ROA not after:            Thu 13 May 2027 07:51:25 +0000
asID:                     137697
IP address blocks:        43.242.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:84:71:75:b0:fc:f3:d6:0c:81:70:6f:95:65:4c:4f:54:b9:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:46:25 2026 GMT
            Not After : May 13 07:51:25 2027 GMT
        Subject: CN=6C78B107C89AE1A755932833E314AA3B3B3FF5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:a6:5f:24:2c:ca:ce:e2:c5:68:7f:9a:eb:
                    b0:8b:47:36:c8:39:2c:94:23:57:e0:dd:ba:85:3d:
                    a0:f8:df:ab:70:40:34:dd:b5:18:c2:30:d7:2d:21:
                    9e:a4:c6:ea:10:2c:43:6f:62:d3:84:fb:ed:82:61:
                    ed:ec:6a:b0:0f:0a:b3:b0:d6:c2:77:6a:5b:e2:e9:
                    95:72:ee:40:38:73:ca:cc:94:84:df:3b:bd:88:9e:
                    80:16:6a:8a:9a:da:5b:48:c4:a9:81:91:0e:43:f5:
                    d7:a2:b4:f6:b4:81:a6:79:59:7e:6e:41:c5:7d:cd:
                    2b:ae:a4:44:36:1e:ea:29:b0:23:b4:ff:40:3e:8a:
                    f4:8d:6f:cc:66:a4:3a:db:0b:5f:48:d6:4f:39:95:
                    1f:29:c6:81:25:dc:69:a0:77:cb:56:0a:2d:db:f5:
                    6b:0b:1e:10:fc:73:fd:42:e2:49:4e:81:01:0c:d4:
                    df:49:1d:b3:eb:ce:75:76:1b:a2:f0:da:c7:22:33:
                    e5:8a:58:ad:d4:0f:66:73:73:0b:8f:0c:71:a6:e7:
                    01:10:ff:bf:ac:19:8e:4d:0b:19:39:05:b3:42:57:
                    f8:59:e6:38:6a:5e:36:7f:2d:a8:d8:fd:7d:1d:fe:
                    9a:76:d6:1c:e4:7f:c1:ea:f8:83:e0:3b:b0:cc:f8:
                    e8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:78:B1:07:C8:9A:E1:A7:55:93:28:33:E3:14:AA:3B:3B:3F:F5:FE
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3234322e3139362e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:8c:2f:29:46:32:2a:7c:77:80:f3:24:bc:e8:e1:af:8f:b9:
         e9:ec:f9:9b:c6:02:d6:23:ad:2b:8b:3a:75:7f:57:d7:16:5e:
         12:b0:3c:ff:ac:e3:70:f4:36:aa:b6:87:d5:36:ea:8d:8c:a1:
         06:50:1d:27:e3:81:d6:e9:54:9b:32:50:6f:e7:29:e0:49:05:
         d0:aa:ae:cc:33:54:a4:bd:27:51:dd:d3:0c:07:4b:2e:96:03:
         51:bf:5d:ad:0c:9c:6b:bc:70:c0:3e:04:79:8e:24:f9:2b:ad:
         5a:e6:14:08:b3:1c:ff:c5:52:cc:97:71:7c:65:f4:9d:3a:06:
         bf:68:86:37:58:9c:cd:a8:60:31:3d:cc:69:df:5f:1e:f2:8b:
         59:bd:79:f5:cc:07:5a:61:ff:10:05:e4:4f:63:68:b6:95:ba:
         8f:54:9c:3d:28:44:89:74:02:39:f5:de:ab:b3:13:4b:68:9d:
         f4:c0:78:6c:45:ae:5c:e2:98:8d:71:3e:44:be:2e:a3:52:dc:
         f0:01:2c:96:89:23:ac:d7:80:79:74:7d:72:4f:4b:9b:93:6c:
         91:b9:56:bb:54:33:a3:56:60:72:1e:b7:66:85:90:02:7c:3b:
         0f:33:63:08:c2:30:d7:01:96:58:d3:2c:b9:d9:03:bf:e4:a7:
         2d:46:a8:7e
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUPIRxdbD889YMgXBvlWVMT1S5cNEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTQwNzQ2MjVaFw0yNzA1MTMwNzUxMjVaMDMxMTAvBgNV
BAMTKDZDNzhCMTA3Qzg5QUUxQTc1NTkzMjgzM0UzMTRBQTNCM0IzRkY1RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdqZfJCzKzuLFaH+a67CLRzbI
OSyUI1fg3bqFPaD436twQDTdtRjCMNctIZ6kxuoQLENvYtOE++2CYe3sarAPCrOw
1sJ3alvi6ZVy7kA4c8rMlITfO72InoAWaoqa2ltIxKmBkQ5D9deitPa0gaZ5WX5u
QcV9zSuupEQ2HuopsCO0/0A+ivSNb8xmpDrbC19I1k85lR8pxoEl3Gmgd8tWCi3b
9WsLHhD8c/1C4klOgQEM1N9JHbPrznV2G6Lw2sciM+WKWK3UD2ZzcwuPDHGm5wEQ
/7+sGY5NCxk5BbNCV/hZ5jhqXjZ/LajY/X0d/pp21hzkf8Hq+IPgO7DM+OiVAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUbHixB8ia4adVkygz4xSqOzs/9f4wHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ4MTU0ODkvMC8zNDMzMmUzMjM0
MzIyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNzM2MzkzNy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAivyxDANBgkqhkiG9w0BAQsFAAOCAQEALIwvKUYyKnx3gPMkvOjh
r4+56ez5m8YC1iOtK4s6dX9X1xZeErA8/6zjcPQ2qraH1TbqjYyhBlAdJ+OB1ulU
mzJQb+cp4EkF0KquzDNUpL0nUd3TDAdLLpYDUb9drQyca7xwwD4EeY4k+SutWuYU
CLMc/8VSzJdxfGX0nToGv2iGN1iczahgMT3Mad9fHvKLWb159cwHWmH/EAXkT2No
tpW6j1ScPShEiXQCOfXeq7MTS2id9MB4bEWuXOKYjXE+RL4uo1Lc8AEslokjrNeA
eXR9ck9Lm5NskblWu1Qzo1Zgch63ZoWQAnw7DzNjCMIw1wGWWNMsudkDv+SnLUao
fg==
-----END CERTIFICATE-----
Generated at Sat May 30 00:58:07 2026 by rpki-client