Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37352e302f32342d3234203d3e20313531323633.roa
File:                     34332e3232362e37352e302f32342d3234203d3e20313531323633.roa (raw, json)
Hash identifier:          3kXayL1m+GJrl59qVBFm7MP2mNCavT+lZNSYbXquSq8=
Subject key identifier:   31:C6:49:FB:88:4B:43:56:10:91:A4:D1:E2:C3:29:AD:31:23:02:D6
Certificate issuer:       /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial:       7F2500F8E986E6661656C2E52D542FF2151BC285
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37352e302f32342d3234203d3e20313531323633.roa
Signing time:             Thu 25 Jun 2026 07:09:55 +0000
ROA not before:           Thu 25 Jun 2026 07:04:55 +0000
ROA not after:            Thu 24 Jun 2027 07:09:55 +0000
asID:                     151263
IP address blocks:        43.226.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 09:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:25:00:f8:e9:86:e6:66:16:56:c2:e5:2d:54:2f:f2:15:1b:c2:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
        Validity
            Not Before: Jun 25 07:04:55 2026 GMT
            Not After : Jun 24 07:09:55 2027 GMT
        Subject: CN=31C649FB884B43561091A4D1E2C329AD312302D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ab:03:99:da:9e:3f:3c:3b:ea:b5:ce:a1:be:
                    fe:8c:34:da:9d:22:6d:6e:d3:ee:c3:49:89:8f:a4:
                    3d:08:a0:90:3e:c9:c0:cc:c7:6c:62:cf:fd:d2:d9:
                    32:89:39:c5:fe:7d:02:91:90:77:10:62:d2:22:ed:
                    07:1c:71:5e:e0:0a:b7:ce:7c:7c:59:88:1f:a9:3a:
                    da:f2:b7:a6:15:55:c5:39:7f:df:47:11:a8:c2:52:
                    6a:6d:99:6b:1a:11:7d:6d:8a:24:92:2e:d7:5f:8e:
                    f7:9e:8b:3a:59:69:48:de:9f:20:d9:bf:d5:8f:57:
                    57:5f:6e:81:be:f5:a5:b3:c3:4c:24:d5:9c:9f:21:
                    cf:c2:46:f3:3b:6c:f9:c8:75:1b:37:ed:ce:e3:4c:
                    10:3c:00:21:da:f3:c4:5e:71:bd:d2:ef:8a:76:01:
                    7a:c6:85:a7:82:ad:54:ad:5a:b6:d7:2b:72:89:f3:
                    40:2e:ca:c2:4f:06:22:01:dd:a9:7e:ed:d2:fa:e3:
                    6c:71:49:28:a1:09:d3:d4:03:ea:1c:03:a9:18:21:
                    90:6f:b5:40:11:59:04:34:6f:81:09:eb:b1:09:0c:
                    65:57:85:56:68:a2:5b:4d:c0:31:4b:41:96:8b:bb:
                    76:7a:38:9e:b2:dd:ab:0a:5c:07:f5:de:cd:fd:76:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C6:49:FB:88:4B:43:56:10:91:A4:D1:E2:C3:29:AD:31:23:02:D6
            X509v3 Authority Key Identifier:
                keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37352e302f32342d3234203d3e20313531323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:9b:c6:58:7c:f1:91:a8:d7:3a:54:bd:19:f3:eb:94:de:
         09:ad:71:e8:6a:0a:a2:86:03:71:d5:71:74:d1:81:3a:5f:34:
         b9:bf:5a:eb:f3:81:3f:fc:98:d4:32:77:64:7a:7c:66:a1:6a:
         ea:36:04:b6:b9:80:78:a9:12:e8:79:ba:91:67:ee:cd:da:66:
         f4:1f:8c:a7:74:22:c3:45:b9:88:7e:c5:4a:69:b9:fd:a2:92:
         88:6e:fe:42:d0:74:6e:b5:4c:9f:4c:90:c1:55:2d:60:ea:d0:
         48:83:87:bb:a8:d5:1b:77:68:3d:22:93:87:67:9f:4e:b7:b3:
         6e:b2:6a:30:20:94:54:92:ce:27:b7:f6:b2:c4:c7:f8:f9:2c:
         e5:5e:87:33:d1:1f:5e:0e:6c:33:87:79:27:17:5a:98:08:3d:
         73:ce:a5:e1:f0:6e:8d:c9:dc:74:df:6d:8e:e8:81:7f:27:06:
         3f:03:85:73:07:d5:1a:72:a2:79:0d:16:38:59:a2:a7:4c:94:
         29:5f:64:5c:56:d2:98:f0:ba:06:12:6c:a5:d2:62:4f:42:7a:
         b7:29:3b:61:5c:e1:bf:81:bc:73:18:02:84:cd:53:fe:32:33:
         2a:a9:f7:e5:a5:80:9e:e4:8f:6a:c4:27:ca:48:d9:39:bf:b2:
         1a:d6:2a:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:52:47 2026 by rpki-client