Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34332e3233302e3132342e302f32322d3234203d3e203338323833.roa
File:                     34332e3233302e3132342e302f32322d3234203d3e203338323833.roa (raw, json)
Hash identifier:          exu0j5nE4RYRldjv5VcTMGWEsaQj0QGRi/oWM+KQ8Uo=
Subject key identifier:   C9:43:4E:E0:42:75:46:22:29:78:A2:92:E2:82:18:49:67:B9:D0:04
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       739732925722D5E81617CBA31A12B53B196EE151
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34332e3233302e3132342e302f32322d3234203d3e203338323833.roa
Signing time:             Wed 08 Apr 2026 03:17:41 +0000
ROA not before:           Wed 08 Apr 2026 03:12:41 +0000
ROA not after:            Wed 07 Apr 2027 03:17:41 +0000
asID:                     38283
IP address blocks:        43.230.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:97:32:92:57:22:d5:e8:16:17:cb:a3:1a:12:b5:3b:19:6e:e1:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:41 2026 GMT
            Not After : Apr  7 03:17:41 2027 GMT
        Subject: CN=C9434EE0427546222978A292E282184967B9D004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:54:bb:7c:47:96:cd:28:7a:cc:15:62:3d:
                    ab:5d:94:cf:f5:80:98:c0:16:eb:e0:06:a6:04:32:
                    c1:2d:25:bf:01:5d:fc:47:5c:1f:cf:4a:43:15:0c:
                    dc:73:b0:77:4e:1b:0e:ba:d3:e2:b2:00:8b:fd:07:
                    98:8e:89:d2:b2:e6:e9:30:04:e1:19:d1:2f:51:a7:
                    90:fb:59:5d:3c:24:63:5c:44:cf:45:66:ab:53:2c:
                    37:97:20:1a:34:29:5d:fc:2f:ef:c6:75:a0:10:b4:
                    06:e4:bf:e9:d7:89:f9:51:b5:a7:e8:43:38:69:14:
                    fe:12:94:4e:2e:e0:cb:6f:4e:0b:e4:4d:37:fb:42:
                    2e:1f:e8:06:6c:e2:a3:46:e0:9d:87:ed:65:31:e7:
                    0b:3e:4d:ee:eb:aa:55:53:90:d6:f4:52:4f:6e:37:
                    8b:04:e0:f5:25:1e:69:44:06:ef:25:e1:c8:59:e3:
                    9d:8d:5c:9a:9e:8a:52:05:ae:18:51:3d:da:b6:03:
                    e0:86:22:3f:c1:3f:28:57:1d:6d:e5:43:9d:c0:e1:
                    9e:1d:b9:65:fc:b1:19:39:1f:8f:c8:8e:eb:a8:cf:
                    37:0f:5f:04:6e:4a:02:bc:ca:b9:d6:fd:50:4f:ef:
                    36:c7:00:8f:dc:7b:07:11:10:26:80:c5:08:76:65:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:4E:E0:42:75:46:22:29:78:A2:92:E2:82:18:49:67:B9:D0:04
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34332e3233302e3132342e302f32322d3234203d3e203338323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         83:7b:e8:6b:76:41:6f:1a:52:b7:56:a0:50:8e:31:08:fd:ec:
         93:7f:ea:7a:69:09:1f:ef:f7:d4:55:37:ea:d4:d8:12:1e:e5:
         d0:96:79:b7:11:0d:09:9c:c8:42:0e:e5:8c:48:fa:29:ea:67:
         f4:48:ec:09:41:3a:2e:87:c5:bb:96:38:15:ff:5f:1b:9a:6e:
         b0:75:da:1d:67:e7:41:0e:0a:67:c8:22:90:7b:79:3b:f7:8a:
         a2:d0:a8:e9:f1:42:c1:21:30:fa:90:95:eb:0b:48:2b:3e:df:
         b1:bd:0c:e6:57:60:b8:2a:64:d8:8f:23:fe:e7:b6:22:a8:cc:
         09:0a:2a:ea:53:4a:5c:48:d3:ce:da:e5:d7:fc:e3:cf:38:db:
         a0:53:ad:7b:3d:e4:60:3b:24:95:bf:99:dc:d8:91:17:f1:b4:
         f3:cf:51:52:97:1a:f6:9f:bf:2a:36:76:f4:34:89:40:9e:d7:
         92:4b:ea:cf:61:c7:c4:d9:b4:fa:c3:32:a2:cf:c5:bf:46:99:
         19:18:b5:de:0d:30:ca:4f:cd:71:7f:c3:38:5d:33:39:00:c8:
         1f:f6:46:56:25:83:ad:a9:8e:59:23:b6:cd:32:1a:6e:25:6e:
         32:a1:c2:ce:2b:72:2e:ea:bd:27:47:4b:2b:5b:ef:32:48:a3:
         fd:f8:1f:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:50 2026 by rpki-client