Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313337363937.roa
File:                     34332e3235342e3139322e302f32322d3332203d3e20313337363937.roa (raw, json)
Hash identifier:          NRqPlX16jvjwyjIf9zV7y9Ytta1V2s+A7Xe2o9PrppE=
Subject key identifier:   D2:8B:54:42:A6:E7:E8:77:A6:2F:21:44:88:AD:3D:9B:71:47:62:F7
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       783B5A88E61803CD33EF45879254E9526D7AD19C
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313337363937.roa
Signing time:             Wed 08 Apr 2026 05:31:35 +0000
ROA not before:           Wed 08 Apr 2026 05:26:35 +0000
ROA not after:            Wed 07 Apr 2027 05:31:35 +0000
asID:                     137697
IP address blocks:        43.254.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:3b:5a:88:e6:18:03:cd:33:ef:45:87:92:54:e9:52:6d:7a:d1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Apr  8 05:26:35 2026 GMT
            Not After : Apr  7 05:31:35 2027 GMT
        Subject: CN=D28B5442A6E7E877A62F214488AD3D9B714762F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:43:ee:e9:dc:ec:d9:bc:49:6a:77:05:72:
                    0b:66:f3:c9:c2:f2:0a:6b:25:ca:f3:b6:09:ad:a4:
                    ea:34:f2:df:15:d3:ad:69:54:4b:9d:bd:38:8b:87:
                    2a:5b:0b:ac:57:aa:d2:0b:b4:51:78:4e:ce:a6:e5:
                    cb:9f:14:5b:2f:ee:28:f0:2c:c5:7e:38:1b:41:70:
                    6e:91:bd:2d:a8:1e:93:e2:d9:d9:62:87:7b:92:23:
                    9f:65:9f:96:6f:03:c2:22:e9:6a:fd:14:f0:fb:55:
                    95:23:02:57:25:9e:25:e1:e3:d1:4a:7b:92:69:d6:
                    c0:a9:4f:40:08:ee:7f:46:56:55:d3:83:b0:c8:34:
                    6e:5f:07:05:2b:41:4b:dc:c4:7c:fb:d1:82:85:a7:
                    d8:e3:d7:92:dc:6d:54:50:f0:00:10:4b:10:6d:a7:
                    a6:00:cd:da:83:c8:1c:da:43:28:84:d8:fe:21:26:
                    65:ea:78:c7:ea:94:4e:cb:d6:c2:20:03:a8:27:0a:
                    9e:78:c3:4f:75:13:c8:42:7f:d4:fa:f3:ab:37:7b:
                    b9:73:8e:fb:a1:bf:9f:18:37:b7:f1:61:22:47:5c:
                    50:68:24:38:a5:ad:b9:36:d0:c5:ea:54:85:20:26:
                    2a:27:32:f5:9b:01:23:9a:2c:e4:6f:10:9a:c3:7d:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8B:54:42:A6:E7:E8:77:A6:2F:21:44:88:AD:3D:9B:71:47:62:F7
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34332e3235342e3139322e302f32322d3332203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:7c:ca:7a:1b:73:70:7a:ad:04:9a:28:e7:9c:e7:ff:e7:
         9d:a2:86:e3:47:63:07:a1:e5:3e:62:48:a1:0f:d4:47:47:33:
         1c:94:23:fd:3c:dd:2d:a0:5a:4f:e4:64:0a:e1:be:0b:dd:17:
         0e:95:27:05:c1:5f:67:62:a7:d7:9a:d7:e1:7c:90:7e:e4:3d:
         3d:31:e3:29:bb:24:2f:7e:f1:6c:d8:e5:48:a9:bb:d8:e1:ea:
         a0:04:d5:9f:75:c9:1a:ba:3f:14:31:2a:ec:5d:1e:ee:a1:45:
         2f:13:1b:d7:f1:e1:fe:45:a6:38:df:7e:69:e9:36:d6:1f:99:
         80:38:c7:fc:99:e4:14:38:be:49:f9:17:34:4e:ff:9c:83:5b:
         9c:24:64:19:e8:62:61:c4:99:ce:59:93:3e:7e:c1:94:b3:50:
         4a:b3:9a:2e:6e:e9:0e:d6:9f:c7:64:61:bf:a8:ee:cb:ac:90:
         32:41:32:f3:0d:40:ae:f5:5d:a1:ee:a6:0b:d9:6b:3b:58:e2:
         f1:f3:21:0d:98:2c:43:86:ed:54:2e:42:ad:d7:e1:66:73:be:
         2a:1a:f9:45:a3:a9:10:9a:a5:a7:dd:cc:d9:24:b3:5c:84:ee:
         0c:8f:c4:3c:22:08:04:ba:be:e1:f8:b5:04:18:bb:b3:b5:90:
         7e:e2:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:28:25 2026 by rpki-client