Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36332e302f32342d3234203d3e203539303039.roa
File:                     34332e3234302e36332e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier:          dZpxV3TrwXsyDmw3kOve7plRtHVkOhrOHOFyk2gfAAc=
Subject key identifier:   EB:1F:22:F8:30:8D:81:65:0D:AD:A5:5D:B1:D7:59:8B:DD:12:46:0E
Certificate issuer:       /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial:       0FC8F33BDB926400C771A67E5084C87C402E7A71
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36332e302f32342d3234203d3e203539303039.roa
Signing time:             Mon 13 Jul 2026 07:27:15 +0000
ROA not before:           Mon 13 Jul 2026 07:22:15 +0000
ROA not after:            Mon 12 Jul 2027 07:27:15 +0000
asID:                     59009
IP address blocks:        43.240.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c8:f3:3b:db:92:64:00:c7:71:a6:7e:50:84:c8:7c:40:2e:7a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
        Validity
            Not Before: Jul 13 07:22:15 2026 GMT
            Not After : Jul 12 07:27:15 2027 GMT
        Subject: CN=EB1F22F8308D81650DADA55DB1D7598BDD12460E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c2:5b:29:eb:ef:ef:f0:52:c1:1b:41:14:5b:
                    76:0e:73:73:77:82:b0:7e:ee:f4:15:86:1e:1f:dd:
                    94:f3:fe:34:c7:2a:26:60:48:ff:7f:08:e9:52:4e:
                    de:d0:cc:b4:2b:9f:56:b6:7f:73:00:23:78:36:68:
                    2d:00:c9:18:53:fa:fe:13:7b:c0:2e:bb:cb:e8:13:
                    03:ef:09:ae:59:23:cf:b0:b4:b4:f8:48:ff:79:b8:
                    1e:cd:05:21:29:90:d7:95:bf:b8:68:1b:9f:a3:58:
                    91:7f:b4:a4:fa:c9:57:86:2a:72:8e:58:a4:10:17:
                    4a:2e:7a:58:ed:85:7d:73:d0:33:42:fe:f5:77:42:
                    e8:bc:da:19:2d:dc:c7:6d:dd:6a:fc:58:8c:f2:9c:
                    c2:97:7c:8f:8a:52:45:49:bd:98:f1:84:35:ef:f4:
                    5f:c3:0c:7b:2d:6f:d5:39:21:e7:62:c0:ea:2f:4b:
                    ab:8a:56:41:c9:04:0d:e9:76:54:ed:23:8a:99:2f:
                    2a:b2:2f:1b:3e:e3:94:ef:5d:93:c2:91:cf:7f:ea:
                    b1:c1:ba:85:76:5f:ab:03:d3:ee:09:a8:05:c0:26:
                    ad:3f:82:e1:1a:89:3b:20:3e:d6:93:3a:b0:2e:30:
                    55:eb:44:99:c2:bb:a7:a6:6e:04:2f:f7:c4:79:c4:
                    d4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1F:22:F8:30:8D:81:65:0D:AD:A5:5D:B1:D7:59:8B:DD:12:46:0E
            X509v3 Authority Key Identifier:
                keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36332e302f32342d3234203d3e203539303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.240.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:e9:02:7b:87:47:79:e4:a0:79:8c:1a:4d:e9:9f:60:7c:45:
         1b:96:a1:39:6d:fe:8c:b3:a1:11:d1:3e:92:ef:77:b1:b2:36:
         1c:73:00:53:67:3c:63:32:6d:e3:35:38:af:68:da:1d:48:c1:
         7f:3b:e8:2d:4f:f2:2a:62:38:69:8a:46:e0:a2:be:32:df:06:
         6d:78:24:56:5e:14:0f:bf:67:8f:32:cb:36:0f:0f:90:a0:3f:
         ca:57:36:a1:e6:64:d7:21:ef:bc:f3:9f:27:8d:6d:fb:5f:3d:
         56:b1:f4:2c:76:47:21:ea:d4:dd:db:ee:bb:34:48:22:3c:de:
         31:3d:a6:b9:8f:79:29:3b:da:e1:34:66:4a:ee:c4:af:6e:e0:
         11:c2:aa:fb:bb:4d:be:36:72:69:c8:49:1f:bd:86:74:58:9c:
         27:2f:ad:23:b4:fe:73:72:2c:51:0c:94:f0:d8:0d:aa:b7:5d:
         cd:95:cc:dc:98:7f:bc:be:79:6d:05:4a:60:00:54:59:53:59:
         59:66:cb:38:86:94:a0:cf:3f:fd:ff:68:dd:b7:33:cf:21:58:
         b1:db:5b:99:80:66:a6:8c:82:6e:ca:83:08:db:52:fe:69:14:
         69:35:33:75:3a:86:2c:d6:9b:74:60:64:e4:a3:f4:66:b8:ab:
         9f:34:48:96
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUD8jzO9uSZADHcaZ+UITIfEAuenEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5
NTM1M0VDNjAeFw0yNjA3MTMwNzIyMTVaFw0yNzA3MTIwNzI3MTVaMDMxMTAvBgNV
BAMTKEVCMUYyMkY4MzA4RDgxNjUwREFEQTU1REIxRDc1OThCREQxMjQ2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMwlsp6+/v8FLBG0EUW3YOc3N3
grB+7vQVhh4f3ZTz/jTHKiZgSP9/COlSTt7QzLQrn1a2f3MAI3g2aC0AyRhT+v4T
e8Auu8voEwPvCa5ZI8+wtLT4SP95uB7NBSEpkNeVv7hoG5+jWJF/tKT6yVeGKnKO
WKQQF0oueljthX1z0DNC/vV3Qui82hkt3Mdt3Wr8WIzynMKXfI+KUkVJvZjxhDXv
9F/DDHstb9U5IediwOovS6uKVkHJBA3pdlTtI4qZLyqyLxs+45TvXZPCkc9/6rHB
uoV2X6sD0+4JqAXAJq0/guEaiTsgPtaTOrAuMFXrRJnCu6embgQv98R5xNTjAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6x8i+DCNgWUNraVdsddZi90SRg4wHwYDVR0j
BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0
NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzQzMzJlMzIzNDMw
MmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEACvwPzANBgkqhkiG9w0BAQsFAAOCAQEAE+kCe4dHeeSgeYwaTemfYHxFG5ah
OW3+jLOhEdE+ku93sbI2HHMAU2c8YzJt4zU4r2jaHUjBfzvoLU/yKmI4aYpG4KK+
Mt8GbXgkVl4UD79njzLLNg8PkKA/ylc2oeZk1yHvvPOfJ41t+189VrH0LHZHIerU
3dvuuzRIIjzeMT2muY95KTva4TRmSu7Er27gEcKq+7tNvjZyachJH72GdFicJy+t
I7T+c3IsUQyU8NgNqrddzZXM3Jh/vL55bQVKYABUWVNZWWbLOIaUoM8//f9o3bcz
zyFYsdtbmYBmpoyCbsqDCNtS/mkUaTUzdTqGLNabdGBk5KP0ZrirnzRIlg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:29 2026 by rpki-client