Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e38382e302f32322d3232203d3e20313430373136.roa
File:                     34332e3234372e38382e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier:          1Fg1SigjV7ApUPmgrNmqJzDj8V3QbsSuCaGEnn7mIBg=
Subject key identifier:   D1:13:E2:C2:3E:02:FF:77:A7:90:5F:5A:4B:90:12:33:C2:D5:0D:42
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       14F8D07EBA42DCD1D0479BBDD127D90852F18EAB
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e38382e302f32322d3232203d3e20313430373136.roa
Signing time:             Sun 28 Jun 2026 13:54:05 +0000
ROA not before:           Sun 28 Jun 2026 13:49:05 +0000
ROA not after:            Sun 27 Jun 2027 13:54:05 +0000
asID:                     140716
IP address blocks:        43.247.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:f8:d0:7e:ba:42:dc:d1:d0:47:9b:bd:d1:27:d9:08:52:f1:8e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Jun 28 13:49:05 2026 GMT
            Not After : Jun 27 13:54:05 2027 GMT
        Subject: CN=D113E2C23E02FF77A7905F5A4B901233C2D50D42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e6:ea:b7:9c:00:45:0f:34:90:6d:3d:79:e1:
                    15:84:84:d5:6f:92:0f:16:33:3f:aa:b6:b6:4e:bf:
                    bf:7e:1e:db:de:c7:73:b6:f0:7a:4d:9e:15:97:0c:
                    07:ef:e8:76:66:44:06:ea:d6:1d:06:e7:b2:47:d1:
                    de:d9:c7:63:6e:92:7a:b0:a8:08:d1:24:a3:f0:cd:
                    75:f1:5e:21:37:8a:a0:8f:d4:60:8b:94:00:ee:bf:
                    6a:1e:87:79:cc:94:06:bb:4d:8c:bb:6a:56:3e:01:
                    3c:df:c0:22:92:0c:78:b9:5d:93:77:d9:8b:27:9c:
                    b0:e0:47:6c:d3:a5:f1:ea:56:99:bd:7d:c4:31:46:
                    11:ba:5c:0e:d1:d4:6e:b7:3a:df:73:53:04:19:36:
                    d4:0c:1e:27:43:24:af:9b:14:15:10:00:4c:b5:a2:
                    f4:c1:47:2f:ac:01:f8:bd:e5:55:07:f7:e3:83:e3:
                    a4:a9:25:b5:d3:54:46:c9:fa:9c:8c:14:c9:27:61:
                    3b:40:05:cc:a9:be:86:82:da:f7:c7:96:f3:2a:09:
                    97:01:b8:43:e5:9c:a8:bc:5e:cd:4a:db:62:4a:2e:
                    54:61:56:54:da:7a:69:09:fa:b5:a6:20:67:84:b6:
                    62:c7:bf:e9:c2:ce:90:88:b0:ee:88:de:2d:04:1d:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:13:E2:C2:3E:02:FF:77:A7:90:5F:5A:4B:90:12:33:C2:D5:0D:42
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e38382e302f32322d3232203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:a1:f0:16:d2:08:e3:0c:f0:3b:09:25:d9:85:28:48:e8:78:
         66:dd:8f:5e:5d:44:7f:56:7f:47:65:e9:aa:d6:6b:cb:3c:ac:
         62:5b:c8:39:1e:49:ed:7a:31:e4:be:14:e9:ff:74:0d:3c:aa:
         4d:c8:13:f7:3d:05:cf:e2:de:7e:7b:65:b8:88:20:50:be:c4:
         f8:3e:84:f9:34:16:5e:20:0c:5e:cf:a2:db:84:3e:9d:31:25:
         ac:66:9a:ec:17:6b:b1:fc:b4:07:10:5b:8f:f6:0f:6f:72:56:
         44:86:1f:43:c6:a3:51:52:3d:8e:e0:f6:f5:f8:a6:7a:b2:9b:
         d1:13:08:0d:de:e9:46:2a:a9:b5:d7:59:0f:f7:a6:53:d7:6c:
         4e:77:93:5f:c9:b3:6d:61:0f:5a:d8:b4:7b:55:08:2d:3f:1b:
         74:6b:ab:a9:4b:77:2f:16:84:28:9d:ce:91:0c:89:8e:21:b5:
         ef:4e:6c:ae:9f:88:10:e2:82:3d:38:48:d5:ff:ee:af:b6:59:
         0e:ba:50:bf:70:48:ab:94:ec:fe:ac:d8:f0:df:82:96:36:be:
         92:ef:7f:5e:d1:87:a8:e5:24:e9:ed:40:9c:f3:cf:b4:2c:ff:
         e7:0d:0c:73:1d:88:f8:9b:ed:86:ed:c8:cf:de:c3:ac:d8:cf:
         c6:61:5c:63
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUFPjQfrpC3NHQR5u90SfZCFLxjqswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw
NEZENjlERDAeFw0yNjA2MjgxMzQ5MDVaFw0yNzA2MjcxMzU0MDVaMDMxMTAvBgNV
BAMTKEQxMTNFMkMyM0UwMkZGNzdBNzkwNUY1QTRCOTAxMjMzQzJENTBENDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5uq3nABFDzSQbT154RWEhNVv
kg8WMz+qtrZOv79+Htvex3O28HpNnhWXDAfv6HZmRAbq1h0G57JH0d7Zx2Nuknqw
qAjRJKPwzXXxXiE3iqCP1GCLlADuv2oeh3nMlAa7TYy7alY+ATzfwCKSDHi5XZN3
2YsnnLDgR2zTpfHqVpm9fcQxRhG6XA7R1G63Ot9zUwQZNtQMHidDJK+bFBUQAEy1
ovTBRy+sAfi95VUH9+OD46SpJbXTVEbJ+pyMFMknYTtABcypvoaC2vfHlvMqCZcB
uEPlnKi8Xs1K22JKLlRhVlTaemkJ+rWmIGeEtmLHv+nCzpCIsO6I3i0EHbFBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU0RPiwj4C/3enkF9aS5ASM8LVDUIwHwYDVR0j
BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF
RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8wLzM0MzMyZTMyMzQz
NzJlMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzMDM3MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAiv3WDANBgkqhkiG9w0BAQsFAAOCAQEANqHwFtII4wzwOwkl2YUoSOh4
Zt2PXl1Ef1Z/R2XpqtZryzysYlvIOR5J7Xox5L4U6f90DTyqTcgT9z0Fz+Lefntl
uIggUL7E+D6E+TQWXiAMXs+i24Q+nTElrGaa7Bdrsfy0BxBbj/YPb3JWRIYfQ8aj
UVI9juD29fimerKb0RMIDd7pRiqptddZD/emU9dsTneTX8mzbWEPWti0e1UILT8b
dGurqUt3LxaEKJ3OkQyJjiG1705srp+IEOKCPThI1f/ur7ZZDrpQv3BIq5Ts/qzY
8N+Clja+ku9/XtGHqOUk6e1AnPPPtCz/5w0Mcx2I+Jvthu3Iz97DrNjPxmFcYw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:35 2026 by rpki-client