Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32342d3234203d3e203539303039.roa
File:                     34332e3234302e36302e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier:          BPPWpEBX+Jihk/fIQy/NU29yFU0vDNhux0Ug5CWF19A=
Subject key identifier:   20:F7:07:95:2F:BE:B6:08:0E:32:50:03:38:EC:EC:7F:A0:CF:74:12
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       391A0562530EAAE8498E8C016FFC5EB032516DB9
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32342d3234203d3e203539303039.roa
Signing time:             Mon 13 Jul 2026 07:27:14 +0000
ROA not before:           Mon 13 Jul 2026 07:22:14 +0000
ROA not after:            Mon 12 Jul 2027 07:27:14 +0000
asID:                     59009
IP address blocks:        43.240.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:1a:05:62:53:0e:aa:e8:49:8e:8c:01:6f:fc:5e:b0:32:51:6d:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul 13 07:22:14 2026 GMT
            Not After : Jul 12 07:27:14 2027 GMT
        Subject: CN=20F707952FBEB6080E32500338ECEC7FA0CF7412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a2:1b:11:cf:5a:37:ea:b4:62:70:07:59:eb:
                    af:0a:8f:78:d0:87:d7:7f:d5:98:13:36:10:88:af:
                    dc:d9:be:fb:ba:ba:48:b0:e1:c3:07:0f:75:ab:40:
                    93:60:28:a4:ae:31:3f:f5:aa:59:7c:68:b0:5a:a4:
                    7e:ce:6f:e3:7e:53:8f:23:2d:92:e1:82:45:c9:e7:
                    9c:b4:38:70:25:54:d7:a6:57:53:0b:e2:06:71:44:
                    23:79:2b:bd:5f:b3:18:90:bd:b0:b0:d7:b6:6d:b1:
                    e9:dd:92:cd:84:d3:db:09:48:23:97:a7:aa:01:2b:
                    76:57:6e:71:93:10:1a:a1:06:da:cc:0d:90:13:34:
                    3d:c3:4d:a0:4c:fc:73:a7:72:13:2b:6e:26:49:91:
                    43:a5:b0:f0:50:ed:56:38:89:bd:2f:ad:70:66:38:
                    40:5b:04:a7:7f:bd:73:d5:eb:39:7f:d1:55:40:59:
                    aa:19:09:6b:fb:60:e7:01:f3:b9:1a:d0:75:b8:f9:
                    3e:36:d0:ba:0c:1a:e4:ef:e3:ce:25:5b:f9:fd:7f:
                    d8:37:ea:66:f1:cf:d8:b3:1e:55:0d:d1:6b:26:6f:
                    31:61:b9:52:16:16:12:e8:5b:a7:6f:cb:d3:57:66:
                    69:af:2d:e4:6e:b6:cd:3b:0b:54:ef:2e:e2:4e:3a:
                    54:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F7:07:95:2F:BE:B6:08:0E:32:50:03:38:EC:EC:7F:A0:CF:74:12
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32342d3234203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         db:ce:32:ea:65:f6:34:07:6b:26:d5:1e:43:c7:ba:9b:9c:67:
         eb:67:7e:8b:dd:c4:76:13:d6:3d:8c:4e:ea:36:f3:74:02:ef:
         74:fd:1b:1c:e1:63:3e:63:4c:8d:3b:2c:fd:60:4d:4b:2a:61:
         83:be:31:47:05:1a:77:6e:b1:67:60:2e:37:ab:d9:3a:92:37:
         35:b6:78:77:75:3b:1c:11:d6:bc:b8:ed:d1:ad:90:95:27:e4:
         e4:23:00:e1:ee:6d:1f:e9:cf:67:85:da:4e:fa:b3:30:bf:b5:
         f5:13:c8:c6:dd:b3:de:f0:46:7f:10:21:24:4a:4e:fe:ba:70:
         65:a2:1d:d0:22:79:c2:e9:23:65:28:41:cd:cd:24:5d:57:c2:
         71:4b:33:9d:fa:4f:25:f1:56:82:43:66:da:ec:95:09:7f:44:
         ba:a3:e7:e0:47:fd:df:73:ec:bc:23:ba:fc:cb:7a:78:9d:22:
         27:6d:19:30:3a:81:23:e1:cf:ca:ae:5c:73:ad:d9:1d:fc:e2:
         63:e9:a5:21:78:d1:cd:14:05:62:08:c6:84:3e:38:b6:d6:fb:
         1d:d2:74:14:44:fb:0c:fa:68:33:5f:2b:37:3f:e0:70:e6:72:
         fe:05:19:dd:d9:1b:bc:52:98:09:4b:2b:9a:d4:bb:ed:69:60:
         49:41:bc:bf
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUORoFYlMOquhJjowBb/xesDJRbbkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5
NTM1M0VDNjAeFw0yNjA3MTMwNzIyMTRaFw0yNzA3MTIwNzI3MTRaMDMxMTAvBgNV
BAMTKDIwRjcwNzk1MkZCRUI2MDgwRTMyNTAwMzM4RUNFQzdGQTBDRjc0MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWohsRz1o36rRicAdZ668Kj3jQ
h9d/1ZgTNhCIr9zZvvu6ukiw4cMHD3WrQJNgKKSuMT/1qll8aLBapH7Ob+N+U48j
LZLhgkXJ55y0OHAlVNemV1ML4gZxRCN5K71fsxiQvbCw17Ztsendks2E09sJSCOX
p6oBK3ZXbnGTEBqhBtrMDZATND3DTaBM/HOnchMrbiZJkUOlsPBQ7VY4ib0vrXBm
OEBbBKd/vXPV6zl/0VVAWaoZCWv7YOcB87ka0HW4+T420LoMGuTv484lW/n9f9g3
6mbxz9izHlUN0WsmbzFhuVIWFhLoW6dvy9NXZmmvLeRuts07C1TvLuJOOlTXAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUIPcHlS++tggOMlADOOzsf6DPdBIwHwYDVR0j
BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0
NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzQzMzJlMzIzNDMw
MmUzNjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEACvwPDANBgkqhkiG9w0BAQsFAAOCAQEA284y6mX2NAdrJtUeQ8e6m5xn62d+
i93EdhPWPYxO6jbzdALvdP0bHOFjPmNMjTss/WBNSyphg74xRwUad26xZ2AuN6vZ
OpI3NbZ4d3U7HBHWvLjt0a2QlSfk5CMA4e5tH+nPZ4XaTvqzML+19RPIxt2z3vBG
fxAhJEpO/rpwZaId0CJ5wukjZShBzc0kXVfCcUsznfpPJfFWgkNm2uyVCX9EuqPn
4Ef933PsvCO6/Mt6eJ0iJ20ZMDqBI+HPyq5cc63ZHfziY+mlIXjRzRQFYgjGhD44
ttb7HdJ0FET7DPpoM18rNz/gcOZy/gUZ3dkbvFKYCUsrmtS77WlgSUG8vw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:11 2026 by rpki-client