Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232352e3138302e302f32322d3232203d3e203539303337.roa
File:                     34332e3232352e3138302e302f32322d3232203d3e203539303337.roa (raw, json)
Hash identifier:          SEJHMfLUSI9Nyo4CW7SdPMIHAjmkg8cZO26hzd1up1E=
Subject key identifier:   5D:C1:3E:F5:CA:9B:26:61:DA:83:B8:95:0F:EB:FA:98:F0:7C:06:61
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       53761818B5F9BC70866C0439E34FFC62B21DA4B8
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232352e3138302e302f32322d3232203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:39:05 +0000
ROA not before:           Wed 27 May 2026 06:34:05 +0000
ROA not after:            Wed 26 May 2027 06:39:05 +0000
asID:                     59037
IP address blocks:        43.225.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:76:18:18:b5:f9:bc:70:86:6c:04:39:e3:4f:fc:62:b2:1d:a4:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:34:05 2026 GMT
            Not After : May 26 06:39:05 2027 GMT
        Subject: CN=5DC13EF5CA9B2661DA83B8950FEBFA98F07C0661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ff:bd:3f:14:ff:af:ca:dc:ac:a1:bb:90:0e:
                    43:b0:a8:18:99:de:f6:26:77:22:eb:cc:76:cb:7c:
                    22:01:1a:96:bf:5e:36:0e:28:ed:d4:48:fa:40:cb:
                    df:25:54:3d:f6:0e:bd:89:d2:48:f8:30:4a:37:8e:
                    ca:7f:b2:94:4a:e9:92:e4:35:b9:5f:24:2c:ee:11:
                    58:69:85:d9:85:0b:8b:4b:6e:de:0d:7c:7f:78:fc:
                    f8:d1:b5:10:74:cd:fa:ea:90:28:40:26:df:fe:41:
                    07:25:16:98:f6:ef:15:01:2d:aa:6f:19:27:d6:06:
                    f5:af:54:7d:41:5c:bf:fa:5a:49:ff:bc:29:c9:30:
                    e8:d2:06:f8:f0:cf:1d:23:d4:f4:9d:d8:e2:4d:ec:
                    46:33:6f:1a:91:c3:49:28:bc:5f:1b:95:29:1a:63:
                    73:46:6c:39:07:a4:f9:a8:3b:2f:95:c9:ce:9e:1c:
                    2b:e4:45:92:bf:f3:a9:62:fc:cd:a1:1f:13:50:2f:
                    8b:a5:de:08:b1:ea:68:e0:90:ff:1a:b3:6f:b5:a4:
                    e9:4e:85:f7:71:7b:06:e4:9f:6d:ed:18:93:7c:7b:
                    80:98:0a:1f:4c:5e:5e:06:d8:fb:b5:19:f3:9d:11:
                    8f:13:70:4f:7f:81:0c:41:5e:72:37:64:5c:21:f6:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C1:3E:F5:CA:9B:26:61:DA:83:B8:95:0F:EB:FA:98:F0:7C:06:61
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232352e3138302e302f32322d3232203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:00:2d:9f:1b:79:cd:39:a0:cf:82:81:66:a5:ee:85:69:98:
         5b:49:29:8f:31:c3:56:f9:f4:45:1e:76:be:52:2b:e7:76:77:
         96:79:13:13:9d:dd:29:f3:02:c9:22:ad:fb:1b:96:4b:44:30:
         68:bd:7e:35:ea:4c:fa:ac:26:5a:93:d1:ed:bb:24:e8:be:a4:
         55:d0:02:12:41:93:2c:e7:da:c6:f0:f3:d1:6f:70:56:a6:2b:
         35:3e:5f:84:fc:6c:52:db:b5:e0:3e:71:47:9d:21:a2:91:5f:
         6f:7c:7e:1f:fb:94:5a:8d:f0:56:68:fe:2f:00:68:e0:d1:48:
         e2:28:40:16:fe:a2:15:69:b8:30:3c:63:53:e7:64:e4:6e:1b:
         f2:4e:0e:6b:cb:d6:cc:7c:b7:27:0b:56:07:1e:37:43:7d:cb:
         5b:b5:d1:16:e8:b1:0d:42:4b:10:a8:33:d1:96:cb:0c:16:54:
         60:fe:f9:b1:81:a7:c9:90:97:22:f0:5a:25:e6:45:ab:ba:ce:
         40:02:b9:04:fb:64:17:37:41:e3:6b:4e:ca:fb:50:3d:a3:96:
         e5:2a:68:cd:52:c6:1b:07:cc:5a:40:c6:1b:d0:5d:59:09:6e:
         ea:85:19:eb:08:9d:b0:df:2c:f6:67:9d:4e:37:d3:50:23:e2:
         22:4a:35:60
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUU3YYGLX5vHCGbAQ540/8YrIdpLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2
M0FFMTEzQjAeFw0yNjA1MjcwNjM0MDVaFw0yNzA1MjYwNjM5MDVaMDMxMTAvBgNV
BAMTKDVEQzEzRUY1Q0E5QjI2NjFEQTgzQjg5NTBGRUJGQTk4RjA3QzA2NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM/70/FP+vytysobuQDkOwqBiZ
3vYmdyLrzHbLfCIBGpa/XjYOKO3USPpAy98lVD32Dr2J0kj4MEo3jsp/spRK6ZLk
NblfJCzuEVhphdmFC4tLbt4NfH94/PjRtRB0zfrqkChAJt/+QQclFpj27xUBLapv
GSfWBvWvVH1BXL/6Wkn/vCnJMOjSBvjwzx0j1PSd2OJN7EYzbxqRw0kovF8blSka
Y3NGbDkHpPmoOy+Vyc6eHCvkRZK/86li/M2hHxNQL4ul3gix6mjgkP8as2+1pOlO
hfdxewbkn23tGJN8e4CYCh9MXl4G2Pu1GfOdEY8TcE9/gQxBXnI3ZFwh9k4TAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUXcE+9cqbJmHag7iVD+v6mPB8BmEwHwYDVR0j
BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3
RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8xLzM0MzMyZTMyMzIz
NTJlMzEzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAivhtDANBgkqhkiG9w0BAQsFAAOCAQEAugAtnxt5zTmgz4KBZqXuhWmY
W0kpjzHDVvn0RR52vlIr53Z3lnkTE53dKfMCySKt+xuWS0QwaL1+NepM+qwmWpPR
7bsk6L6kVdACEkGTLOfaxvDz0W9wVqYrNT5fhPxsUtu14D5xR50hopFfb3x+H/uU
Wo3wVmj+LwBo4NFI4ihAFv6iFWm4MDxjU+dk5G4b8k4Oa8vWzHy3JwtWBx43Q33L
W7XRFuixDUJLEKgz0ZbLDBZUYP75sYGnyZCXIvBaJeZFq7rOQAK5BPtkFzdB42tO
yvtQPaOW5SpozVLGGwfMWkDGG9BdWQlu6oUZ6widsN8s9medTjfTUCPiIko1YA==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:25 2026 by rpki-client