Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130302e302f32342d3234203d3e2034383132.roa
File:                     34332e3234372e3130302e302f32342d3234203d3e2034383132.roa (raw, json)
Hash identifier:          dHGyU7geUikrWUH4+V6rrwLj/7DuM2eS0YArF7qmFec=
Subject key identifier:   5E:E8:E1:6B:7B:22:12:A6:2E:C8:5A:81:33:81:CA:80:65:5C:1D:EA
Certificate issuer:       /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
Certificate serial:       46DAABB4C254966CF3C5EFB3B628FB4A11966B2D
Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130302e302f32342d3234203d3e2034383132.roa
Signing time:             Tue 21 Apr 2026 03:03:16 +0000
ROA not before:           Tue 21 Apr 2026 02:58:16 +0000
ROA not after:            Tue 20 Apr 2027 03:03:16 +0000
asID:                     4812
IP address blocks:        43.247.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 04:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:da:ab:b4:c2:54:96:6c:f3:c5:ef:b3:b6:28:fb:4a:11:96:6b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427
        Validity
            Not Before: Apr 21 02:58:16 2026 GMT
            Not After : Apr 20 03:03:16 2027 GMT
        Subject: CN=5EE8E16B7B2212A62EC85A813381CA80655C1DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3e:cb:93:79:46:aa:c3:09:09:47:f1:8a:00:
                    d5:45:94:2e:fd:59:17:a1:0b:60:2f:29:9a:dc:60:
                    68:fd:92:ee:b4:b4:f7:b5:14:88:92:bc:5d:d6:dc:
                    b0:ed:b8:9f:c5:6e:5d:a0:61:d8:4a:79:07:f7:0d:
                    eb:63:97:90:04:f0:c0:29:fc:8e:c1:3a:74:ca:6d:
                    58:98:13:9a:6f:53:4f:e8:b4:e8:4e:75:8e:7c:84:
                    ad:b4:52:8f:f9:6e:48:82:9f:26:75:df:32:12:e0:
                    ed:65:fd:cd:1d:b2:d3:2b:04:08:15:97:69:74:ef:
                    28:49:6e:43:fe:2b:6c:f6:f7:5a:f5:21:ef:f9:09:
                    00:63:80:a4:b0:9b:29:d5:cc:d6:03:82:a2:e2:fa:
                    8f:29:a6:15:b8:bd:9d:1e:47:95:8f:97:28:39:96:
                    71:23:bb:5a:61:d2:12:70:cc:70:0f:e3:8e:65:8c:
                    60:8b:ba:57:12:7d:a2:63:52:15:6b:43:89:75:07:
                    9d:5c:88:0c:1e:ca:f9:62:7a:6e:2b:5f:08:e3:fd:
                    87:c0:c0:03:da:bf:29:5b:36:c5:6b:4a:ba:77:44:
                    9c:76:45:b7:dc:09:71:b6:c9:15:fc:53:a3:65:51:
                    44:9f:68:6b:3e:8d:94:8f:2d:07:4a:9b:cb:c1:de:
                    fa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E8:E1:6B:7B:22:12:A6:2E:C8:5A:81:33:81:CA:80:65:5C:1D:EA
            X509v3 Authority Key Identifier:
                keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130302e302f32342d3234203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:a9:d5:19:d2:77:0d:53:5e:c5:cf:99:67:36:00:bb:77:29:
         8c:e2:22:96:c5:48:23:27:9e:17:a0:51:61:b5:bc:a4:cc:51:
         7f:fb:8f:e7:67:a3:b3:9d:ab:d8:d4:65:5e:99:4c:79:36:06:
         eb:ed:83:09:81:01:f6:cf:21:80:12:f3:6a:97:0a:ce:15:85:
         41:21:7c:b5:fd:33:15:25:5b:8d:98:3f:27:67:5d:6a:46:df:
         2f:69:86:bd:4b:43:34:9f:39:ca:bf:35:d7:b9:8a:36:a9:0a:
         de:fe:c8:9c:35:2a:c9:24:40:f9:d0:74:28:2a:bd:79:5b:f4:
         6a:38:fe:10:a0:94:7b:01:d7:2e:33:fb:0f:15:64:97:6a:ee:
         5e:20:b9:91:71:90:5f:d8:b8:42:ad:19:ec:b0:97:d3:bb:ac:
         4b:e3:b2:db:7a:83:96:9b:ad:6a:7a:14:ab:4c:39:47:5b:73:
         d2:36:3e:60:f3:2a:32:04:67:a6:d5:79:c3:bf:0d:ef:10:01:
         69:11:51:c8:39:ad:3d:56:3f:cf:9a:ea:25:61:03:97:3a:09:
         55:1f:d0:c8:85:56:36:56:dd:9e:7a:2b:4b:5d:57:14:30:0d:
         c0:9e:47:23:36:b1:51:35:19:84:6d:21:09:84:e9:68:3c:47:
         57:ae:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 08:24:35 2026 by rpki-client