Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa
File:                     34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa (raw, json)
Hash identifier:          Ifydao389Ts8SX0fpNPrptnFJjCFFcPkrzfINNxLwKE=
Subject key identifier:   AA:A9:79:6E:C7:54:A3:12:CD:D8:89:EA:E3:40:C6:5E:22:AB:E5:BD
Certificate issuer:       /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial:       5455A8E94CE9BBAFDBB2E33E39AF097E1ABB26BE
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa
Signing time:             Thu 09 Apr 2026 02:00:17 +0000
ROA not before:           Thu 09 Apr 2026 01:55:17 +0000
ROA not after:            Thu 08 Apr 2027 02:00:17 +0000
asID:                     131506
IP address blocks:        43.225.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 19:12:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:55:a8:e9:4c:e9:bb:af:db:b2:e3:3e:39:af:09:7e:1a:bb:26:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
        Validity
            Not Before: Apr  9 01:55:17 2026 GMT
            Not After : Apr  8 02:00:17 2027 GMT
        Subject: CN=AAA9796EC754A312CDD889EAE340C65E22ABE5BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:74:4f:e1:12:5d:05:13:86:49:c6:52:8d:4e:
                    cf:8c:12:70:72:ee:85:59:0e:b8:84:66:38:9d:3b:
                    f2:f9:b2:30:d4:16:2f:b8:6f:ab:4d:fa:cb:4a:47:
                    54:17:e0:f2:59:45:a7:c7:c9:87:4f:75:fe:34:41:
                    42:f7:a6:0a:35:bd:a1:75:b4:18:29:63:d0:e0:ff:
                    15:0a:02:e6:f2:71:b4:7e:8a:eb:bb:ea:f2:16:57:
                    ab:c5:89:37:2e:35:1a:48:07:49:c2:cb:ac:bd:27:
                    80:f8:0c:b9:cd:43:38:2a:93:75:bd:60:16:79:3b:
                    31:75:98:14:5a:3a:ca:11:8a:97:4c:7d:08:93:eb:
                    f4:57:2b:41:8b:0b:81:6b:4e:85:32:f7:02:f3:b4:
                    f9:14:cd:55:c7:70:94:58:8f:27:b3:73:f6:2d:a8:
                    c0:4b:43:65:2f:2a:69:98:f1:ee:9e:ff:17:4a:dc:
                    a8:96:6c:b6:a4:a3:87:d1:7f:f0:b5:3c:75:ca:89:
                    fc:fa:ba:53:b6:0c:61:48:ea:9f:aa:0f:fd:9c:cd:
                    c9:68:20:09:4d:ee:70:0f:e9:d8:aa:a0:e2:42:8e:
                    79:ac:32:10:67:93:0a:a3:03:27:a5:f0:f6:f2:a7:
                    47:aa:fd:b6:5f:a4:41:2a:b8:8e:a7:4f:53:52:d0:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A9:79:6E:C7:54:A3:12:CD:D8:89:EA:E3:40:C6:5E:22:AB:E5:BD
            X509v3 Authority Key Identifier:
                keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32332d3233203d3e20313331353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:80:1a:ce:4c:57:75:c6:6e:0b:3a:c3:4b:86:23:21:62:9b:
         b8:0e:ac:c4:33:e6:99:78:bc:12:b5:70:a2:f5:b2:17:7e:a9:
         c5:aa:8b:23:2f:df:83:57:38:f4:30:bf:1d:b1:1c:62:9b:cd:
         ad:aa:f3:62:8a:0c:c7:e8:da:d4:17:9c:78:77:ac:5e:3e:7f:
         3c:de:e1:6c:4a:a2:3a:48:b9:94:5e:26:73:0f:89:ba:40:b9:
         13:b5:4f:c4:1b:61:44:ff:d1:6e:62:5b:75:82:ba:e9:49:81:
         e5:75:8e:cd:6d:1e:67:bf:57:f6:a6:9f:69:3d:36:37:15:eb:
         a9:5f:27:ab:3a:25:f9:29:e9:3c:4a:ae:64:b7:f4:34:2d:26:
         ff:04:b1:c0:5c:95:b0:87:4c:39:d4:82:4b:36:73:74:cd:3c:
         a8:06:d7:2e:6b:5b:94:30:05:41:cf:f1:cf:48:2b:e6:db:3d:
         5b:f1:93:cc:d0:fe:0e:1a:7b:5b:85:a4:04:e9:f4:2e:cd:f8:
         03:e6:2f:80:36:8b:33:01:4f:1c:b7:67:e4:64:bb:bf:f1:de:
         18:af:a8:cb:ba:b6:e8:27:2f:de:8d:4b:4c:5b:1c:5f:96:9d:
         d1:ed:c2:98:83:64:50:a6:aa:56:98:67:ac:8c:c0:6d:36:ff:
         e5:04:67:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:16 2026 by rpki-client