Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa
File:                     34332e3234302e36302e302f32322d3232203d3e203539303039.roa (raw, json)
Hash identifier:          eSRBaKiPu1z+La+Gp682IxiG7mkQv1M2CJ9YO6UfYYM=
Subject key identifier:   5C:8D:A0:9A:39:35:D9:15:D1:A9:80:0D:01:C1:68:54:B3:18:CA:77
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       51F1CAD32CE593FAAC07DBFB9F2D7BC3F7E4141F
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa
Signing time:             Mon 13 Jul 2026 07:27:15 +0000
ROA not before:           Mon 13 Jul 2026 07:22:15 +0000
ROA not after:            Mon 12 Jul 2027 07:27:15 +0000
asID:                     59009
IP address blocks:        43.240.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f1:ca:d3:2c:e5:93:fa:ac:07:db:fb:9f:2d:7b:c3:f7:e4:14:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul 13 07:22:15 2026 GMT
            Not After : Jul 12 07:27:15 2027 GMT
        Subject: CN=5C8DA09A3935D915D1A9800D01C16854B318CA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:a9:4c:88:ab:d6:9c:65:e9:38:2c:df:1d:
                    c5:a7:8a:93:ed:6d:1c:08:de:83:03:5d:6d:8d:5e:
                    e0:67:67:f9:6c:74:ce:16:8f:23:bb:15:7a:cf:a3:
                    df:16:69:c7:4f:b4:b9:aa:8d:4b:99:56:71:56:3e:
                    51:30:78:35:50:fb:bb:ca:39:6d:d8:3e:3a:ed:3f:
                    bb:70:ad:ff:15:c6:38:97:17:86:e8:44:02:e9:0f:
                    a1:4e:68:88:41:a5:a8:46:9c:46:86:ab:d1:85:65:
                    20:02:c9:e3:bb:2b:9f:d0:41:f6:51:4f:bc:dd:84:
                    39:f7:66:fe:e7:cc:3f:85:a5:d8:b4:de:4b:89:03:
                    9a:96:04:04:c1:8b:61:c5:72:46:7f:06:97:d6:41:
                    67:00:f6:3c:5d:bd:af:f8:46:14:3b:65:ae:4b:92:
                    08:d5:20:ea:51:29:fb:91:e7:4e:4b:f7:ca:cf:72:
                    56:90:6f:d7:97:86:d7:2d:1d:60:34:82:68:af:19:
                    e9:ef:62:43:59:6c:44:3a:16:11:a2:fa:19:bf:2c:
                    88:51:1b:9a:48:42:e0:1b:f1:02:99:c4:e5:a3:08:
                    80:b2:9b:33:de:aa:3b:19:42:2d:eb:f9:7a:ee:e0:
                    8e:ee:ce:9c:bc:f5:67:c3:e8:bf:d7:ec:89:0f:76:
                    ee:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8D:A0:9A:39:35:D9:15:D1:A9:80:0D:01:C1:68:54:B3:18:CA:77
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:fd:70:c1:6b:43:3b:c9:df:f8:ca:fe:45:d2:55:b8:e5:64:
         ae:c9:a1:d1:f4:59:7d:07:59:6a:11:4d:fa:e6:01:ac:fe:f9:
         cd:9a:74:1f:fa:ea:47:ee:34:26:61:61:59:bf:99:97:12:cd:
         74:05:7a:a3:fd:95:ce:ae:be:1d:e9:99:f9:07:dd:6f:fd:32:
         c3:eb:40:70:6a:7e:f4:7e:64:c2:85:30:6f:77:8e:ca:01:eb:
         4d:27:41:96:34:f7:73:3d:ab:db:89:23:4f:fd:ab:c9:d8:ce:
         33:48:63:94:3a:88:89:94:8b:d4:26:56:8b:0f:36:d9:bd:d2:
         b5:47:c7:24:6b:df:0c:69:87:b8:20:19:c8:c7:14:79:07:5d:
         8c:4c:d7:fd:5c:df:96:76:65:37:e1:54:04:49:d7:39:6c:85:
         4c:f2:21:79:a4:40:fd:e0:cf:c0:18:3c:39:eb:39:34:46:2a:
         7e:a0:ae:48:dd:58:55:58:be:56:f0:d5:08:08:c3:c7:fd:15:
         ce:18:3b:cb:f0:c5:c2:e5:1e:b9:ce:78:3a:90:25:ef:f2:2e:
         75:ee:56:29:59:cb:75:62:3b:97:cd:7f:45:6e:7d:22:cb:b3:
         9c:9d:80:86:9c:e3:24:25:ab:0d:b5:ca:57:e5:b4:23:e9:6b:
         2e:c4:3d:3a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUfHK0yzlk/qsB9v7ny17w/fkFB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5
NTM1M0VDNjAeFw0yNjA3MTMwNzIyMTVaFw0yNzA3MTIwNzI3MTVaMDMxMTAvBgNV
BAMTKDVDOERBMDlBMzkzNUQ5MTVEMUE5ODAwRDAxQzE2ODU0QjMxOENBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr6lMiKvWnGXpOCzfHcWnipPt
bRwI3oMDXW2NXuBnZ/lsdM4WjyO7FXrPo98WacdPtLmqjUuZVnFWPlEweDVQ+7vK
OW3YPjrtP7twrf8VxjiXF4boRALpD6FOaIhBpahGnEaGq9GFZSACyeO7K5/QQfZR
T7zdhDn3Zv7nzD+Fpdi03kuJA5qWBATBi2HFckZ/BpfWQWcA9jxdva/4RhQ7Za5L
kgjVIOpRKfuR505L98rPclaQb9eXhtctHWA0gmivGenvYkNZbEQ6FhGi+hm/LIhR
G5pIQuAb8QKZxOWjCICymzPeqjsZQi3r+Xru4I7uzpy89WfD6L/X7IkPdu5pAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUXI2gmjk12RXRqYANAcFoVLMYyncwHwYDVR0j
BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0
NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzQzMzJlMzIzNDMw
MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAivwPDANBgkqhkiG9w0BAQsFAAOCAQEAYf1wwWtDO8nf+Mr+RdJVuOVkrsmh
0fRZfQdZahFN+uYBrP75zZp0H/rqR+40JmFhWb+ZlxLNdAV6o/2Vzq6+HemZ+Qfd
b/0yw+tAcGp+9H5kwoUwb3eOygHrTSdBljT3cz2r24kjT/2rydjOM0hjlDqIiZSL
1CZWiw822b3StUfHJGvfDGmHuCAZyMcUeQddjEzX/VzflnZlN+FUBEnXOWyFTPIh
eaRA/eDPwBg8Oes5NEYqfqCuSN1YVVi+VvDVCAjDx/0Vzhg7y/DFwuUeuc54OpAl
7/Iude5WKVnLdWI7l81/RW59IsuznJ2AhpzjJCWrDbXKV+W0I+lrLsQ9Og==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:14 2026 by rpki-client