Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa
File:                     34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (raw, json)
Hash identifier:          DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=
Subject key identifier:   8D:BF:6A:F3:0E:3E:2C:E9:C7:4D:CE:BC:BE:DF:2B:56:6A:C0:90:FA
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       497D748D7BF26CE39563C04699D51D7130BA9458
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa
Signing time:             Thu 25 Jun 2026 07:07:27 +0000
ROA not before:           Thu 25 Jun 2026 07:02:27 +0000
ROA not after:            Thu 24 Jun 2027 07:07:27 +0000
asID:                     151185
IP address blocks:        43.226.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7d:74:8d:7b:f2:6c:e3:95:63:c0:46:99:d5:1d:71:30:ba:94:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:02:27 2026 GMT
            Not After : Jun 24 07:07:27 2027 GMT
        Subject: CN=8DBF6AF30E3E2CE9C74DCEBCBEDF2B566AC090FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:3f:b1:db:d8:a9:a8:ef:51:fc:52:af:2c:
                    6a:03:b8:76:cf:17:48:52:af:a0:44:65:23:a6:58:
                    10:d4:ce:ff:40:af:99:0b:e9:c5:75:cd:09:65:d4:
                    a2:25:1b:b0:82:19:fa:20:4a:e3:51:87:b2:a5:5b:
                    dd:ba:b9:c3:1e:04:8e:25:f6:07:84:ab:cc:d0:7c:
                    ca:23:12:91:ab:97:f5:f6:76:b2:34:da:4b:ba:b8:
                    49:56:13:35:af:e2:24:3d:52:5d:1a:db:01:1a:97:
                    74:a9:8a:6d:56:5c:19:5c:49:a4:a3:e9:be:99:6a:
                    7d:7f:d3:3f:28:06:c1:4c:23:86:70:bd:4e:46:0a:
                    97:2c:2f:9d:d9:38:11:8d:7a:a6:58:4b:5b:4d:0e:
                    76:bc:48:58:2b:1c:0d:58:c2:95:54:05:3a:a8:6a:
                    70:f8:3a:ed:05:44:ed:bd:15:48:35:b7:f3:ec:dc:
                    f6:98:5a:13:23:86:20:a4:e5:7c:fc:eb:e7:d1:54:
                    ae:d5:9a:4f:18:e5:4f:ff:a0:ba:c1:e9:b7:dd:92:
                    d3:e1:af:fa:1a:94:2a:9b:70:97:07:77:b9:d8:76:
                    37:ec:b4:c9:41:00:64:df:b7:42:bb:7d:35:d1:42:
                    f8:6e:94:b1:34:c0:35:28:42:43:54:10:cd:75:7c:
                    18:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BF:6A:F3:0E:3E:2C:E9:C7:4D:CE:BC:BE:DF:2B:56:6A:C0:90:FA
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:49:16:34:6c:db:5b:ba:4a:c7:87:db:fa:fc:13:20:f1:db:
         47:5f:3e:c3:ba:bd:20:64:55:ee:0f:5d:0e:13:47:f2:ba:43:
         e7:5c:54:8b:9a:6a:02:32:75:a8:63:dc:e8:f8:f1:61:6c:f5:
         f1:f6:26:4c:06:04:35:5b:be:b0:16:61:72:ca:46:e5:de:54:
         71:44:5c:cd:c8:d7:68:cd:ed:f4:49:e3:21:eb:2c:87:0e:ac:
         9f:66:01:27:ac:09:ae:52:98:af:83:bc:b6:4e:94:8c:c2:dd:
         4c:a3:8f:a4:87:19:bf:fb:01:06:f7:ec:16:0b:be:5a:24:80:
         ab:c8:80:66:0f:45:23:43:91:86:ae:f5:67:4d:0d:38:f4:a4:
         91:53:e8:7f:36:b2:16:4e:ea:24:71:ce:37:90:ec:d1:7c:14:
         2e:78:21:15:a7:77:6d:79:20:92:19:98:e0:b0:ce:0d:c8:9a:
         b9:aa:95:dc:29:ce:02:af:fe:02:ae:c3:23:f0:c4:62:b7:b2:
         6e:30:dc:92:8c:ea:81:31:e1:a6:36:49:64:3a:15:e2:be:97:
         fb:1e:32:55:8b:03:f6:80:5b:ed:93:18:1d:9a:fb:86:77:f4:
         25:52:65:94:9d:ba:52:be:a6:13:e1:3d:c2:77:a8:a2:3c:98:
         88:1f:19:e0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSX10jXvybOOVY8BGmdUdcTC6lFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzAyMjdaFw0yNzA2MjQwNzA3MjdaMDMxMTAvBgNV
BAMTKDhEQkY2QUYzMEUzRTJDRTlDNzREQ0VCQ0JFREYyQjU2NkFDMDkwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlT+x29ipqO9R/FKvLGoDuHbP
F0hSr6BEZSOmWBDUzv9Ar5kL6cV1zQll1KIlG7CCGfogSuNRh7KlW926ucMeBI4l
9geEq8zQfMojEpGrl/X2drI02ku6uElWEzWv4iQ9Ul0a2wEal3Spim1WXBlcSaSj
6b6Zan1/0z8oBsFMI4ZwvU5GCpcsL53ZOBGNeqZYS1tNDna8SFgrHA1YwpVUBTqo
anD4Ou0FRO29FUg1t/Ps3PaYWhMjhiCk5Xz86+fRVK7Vmk8Y5U//oLrB6bfdktPh
r/oalCqbcJcHd7nYdjfstMlBAGTft0K7fTXRQvhulLE0wDUoQkNUEM11fBgLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUjb9q8w4+LOnHTc68vt8rVmrAkPowHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz
NjJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMxMzgzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEACviMTANBgkqhkiG9w0BAQsFAAOCAQEAAkkWNGzbW7pKx4fb+vwTIPHb
R18+w7q9IGRV7g9dDhNH8rpD51xUi5pqAjJ1qGPc6PjxYWz18fYmTAYENVu+sBZh
cspG5d5UcURczcjXaM3t9EnjIesshw6sn2YBJ6wJrlKYr4O8tk6UjMLdTKOPpIcZ
v/sBBvfsFgu+WiSAq8iAZg9FI0ORhq71Z00NOPSkkVPofzayFk7qJHHON5Ds0XwU
LnghFad3bXkgkhmY4LDODciauaqV3CnOAq/+Aq7DI/DEYreybjDckozqgTHhpjZJ
ZDoV4r6X+x4yVYsD9oBb7ZMYHZr7hnf0JVJllJ26Ur6mE+E9wneoojyYiB8Z4A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:02 2026 by rpki-client