Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa
File:                     34332e3235352e38342e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier:          zNVSRQXJVS0U6DfZqiJ39oTxdu5/+POi5g9vr+jO/0I=
Subject key identifier:   32:0B:19:7E:73:68:14:A4:AF:EA:67:8E:5F:ED:D9:E6:12:08:05:1E
Certificate issuer:       /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial:       693705226E762DFE3EA087E6B693BCC78EB1D4D1
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa
Signing time:             Sun 28 Jun 2026 13:55:06 +0000
ROA not before:           Sun 28 Jun 2026 13:50:06 +0000
ROA not after:            Sun 27 Jun 2027 13:55:06 +0000
asID:                     140716
IP address blocks:        43.255.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 15:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:37:05:22:6e:76:2d:fe:3e:a0:87:e6:b6:93:bc:c7:8e:b1:d4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
        Validity
            Not Before: Jun 28 13:50:06 2026 GMT
            Not After : Jun 27 13:55:06 2027 GMT
        Subject: CN=320B197E736814A4AFEA678E5FEDD9E61208051E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:15:cc:dc:2b:3e:46:00:fc:0a:74:10:c6:
                    03:3d:e1:6c:7b:29:3e:b5:f0:e2:0c:8a:22:e2:07:
                    98:fb:78:7b:af:0f:e4:65:1e:59:a1:66:dc:c6:79:
                    a4:3e:27:17:df:07:80:64:6f:27:f5:82:67:8e:90:
                    0b:30:ce:ab:83:10:c7:e0:4b:f8:90:59:82:d8:ce:
                    af:22:10:26:22:41:1a:2d:59:89:46:d0:75:07:9f:
                    31:c7:09:f7:6f:ce:39:f7:07:f5:06:84:9f:52:07:
                    10:3b:4c:cf:67:c2:32:bc:af:15:43:d5:0e:28:da:
                    b2:e9:c6:f0:98:e9:5a:6f:5a:95:7c:46:f4:ed:c4:
                    ab:5d:00:e4:c3:f3:76:ce:35:09:38:67:fc:f9:96:
                    21:b2:bd:bd:72:34:0f:b1:0c:73:ba:58:c1:8d:6a:
                    ff:5f:f3:76:9b:39:94:91:20:57:c3:1f:57:df:46:
                    1c:ac:72:c4:66:e7:a0:52:1c:2c:d0:f8:82:39:11:
                    b6:2b:26:ad:93:e1:db:ee:0c:97:d6:03:6d:32:7e:
                    91:cd:82:47:7b:dc:fd:30:8c:f2:fa:71:99:1f:92:
                    4b:d2:0a:18:b1:b4:02:48:f1:5a:28:cc:de:cf:af:
                    2a:4d:5a:88:ed:55:f8:16:71:b3:04:84:e2:ce:48:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0B:19:7E:73:68:14:A4:AF:EA:67:8E:5F:ED:D9:E6:12:08:05:1E
            X509v3 Authority Key Identifier:
                keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:1b:43:20:19:c2:e2:97:bb:f1:16:9c:ca:ba:16:e6:41:16:
         41:cc:0a:ae:c1:0c:77:92:7f:59:c7:62:b4:66:f8:4f:53:f4:
         1a:1e:ca:a4:2a:49:67:a0:c0:e6:7f:8d:8e:67:6e:54:36:0e:
         f0:be:9f:d9:84:fb:67:1f:24:fb:a8:4e:11:5c:da:af:bf:06:
         20:85:1f:5d:37:04:32:86:d1:46:97:03:4a:6b:8e:d8:d1:00:
         5a:93:3b:e7:5b:d0:4a:e3:2d:c5:74:fd:a9:c1:e3:2c:2b:43:
         a3:d1:e5:05:36:4a:97:9b:3a:1f:7f:ed:4f:04:6a:02:08:e8:
         08:7e:0e:09:4e:9c:4d:ce:45:1a:21:6e:c2:b9:60:80:3c:a8:
         eb:e0:98:65:3a:5a:01:a2:b5:c9:95:bc:bb:1f:4e:68:43:0c:
         25:43:a9:4a:52:38:ed:0d:31:57:d5:e7:0e:d2:b2:e0:41:9d:
         4b:df:1a:34:c9:73:29:6a:19:27:00:cd:c3:e8:13:66:5b:e0:
         96:d1:c6:cc:38:ea:cc:32:6e:bf:90:1f:8c:d7:27:18:9d:0d:
         1b:ae:8e:47:22:89:f5:9b:40:a9:a8:34:7a:ea:0a:df:38:c8:
         7b:ba:d6:2f:04:05:c4:c2:58:f6:b9:e0:62:3c:fd:45:94:b1:
         7e:73:73:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:35 2026 by rpki-client