Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa
File:                     34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier:          vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=
Subject key identifier:   E7:64:D3:80:48:0D:F9:22:F6:C5:83:9E:10:2B:ED:51:07:A4:4F:94
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       56843C701B7C087AEA1418901BE3253FA1254CAB
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:39:06 +0000
ROA not before:           Wed 27 May 2026 06:34:06 +0000
ROA not after:            Wed 26 May 2027 06:39:06 +0000
asID:                     59037
IP address blocks:        43.227.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:84:3c:70:1b:7c:08:7a:ea:14:18:90:1b:e3:25:3f:a1:25:4c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:34:06 2026 GMT
            Not After : May 26 06:39:06 2027 GMT
        Subject: CN=E764D380480DF922F6C5839E102BED5107A44F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:bc:44:8f:4d:25:b9:e7:35:85:d4:5b:27:
                    a2:77:54:d1:1c:34:ab:1b:6c:51:82:20:89:0d:95:
                    b4:d1:3f:8c:68:05:56:76:34:ae:ef:ad:a4:e1:61:
                    8f:6e:37:a3:4b:e9:b2:58:d2:b0:03:c7:75:40:08:
                    bd:ab:82:ba:ec:43:70:f3:f1:dc:5b:55:91:9e:d5:
                    7b:d3:bb:99:24:ac:4e:5c:97:da:24:d9:3c:86:f0:
                    b0:89:9a:5f:72:9f:44:67:00:99:97:e5:c0:91:fb:
                    70:bb:af:0b:c8:03:9d:6b:42:28:8c:79:78:7f:3b:
                    af:60:e8:a9:76:20:32:4b:a1:f4:09:78:fa:05:2e:
                    57:34:ba:e8:a6:d6:51:1b:7d:3c:77:94:7a:22:a5:
                    21:ea:80:e1:f1:fe:29:f6:a7:c8:26:e9:a2:70:1c:
                    ef:74:76:50:ff:67:8e:03:09:5a:25:a3:80:06:ea:
                    51:9f:2e:d1:ea:45:53:36:63:71:ee:c1:6e:a3:8e:
                    5a:cc:6d:91:c5:89:d9:56:cf:47:8c:4d:99:52:27:
                    85:5e:c5:5a:6b:0a:f5:76:57:da:38:cc:88:76:ef:
                    76:3a:b2:ff:b7:63:0a:8f:be:c0:1e:0f:d3:3a:5c:
                    41:70:67:36:ad:af:0a:00:4a:b0:29:5a:e4:7b:a9:
                    57:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:64:D3:80:48:0D:F9:22:F6:C5:83:9E:10:2B:ED:51:07:A4:4F:94
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:20:a9:77:82:01:57:e3:c7:e8:51:7c:fc:a1:eb:e3:f9:89:
         50:57:ec:90:de:99:63:2c:6b:37:e3:9d:bb:27:ee:d9:95:27:
         3c:fc:2f:8e:58:66:bd:9b:77:93:d1:92:a6:75:25:00:05:0a:
         87:3c:4c:69:1e:bd:69:04:c1:d3:87:0a:e2:54:65:13:43:cb:
         2d:c7:1e:60:0c:46:a8:22:cf:36:43:8e:c6:4a:d2:d1:ad:7b:
         ff:2f:6e:f7:72:0c:1b:0f:18:6c:1d:f7:5f:72:59:99:3e:5e:
         30:8d:92:89:92:b6:2a:d7:4e:a4:e6:23:c9:a3:c2:1e:eb:f8:
         e0:ff:a0:1d:e3:88:c2:e9:41:25:16:24:e5:f2:3a:09:67:f7:
         77:11:cc:06:c1:94:76:a2:aa:dd:fb:20:95:66:c6:ed:ef:3c:
         67:20:7a:dd:eb:f4:0b:08:6f:f8:fa:82:31:9b:bf:9e:d0:2d:
         ab:51:a6:2d:3e:4b:57:e7:ed:f5:4d:8e:55:99:d9:46:1f:a5:
         d8:30:a4:55:a3:67:52:18:d7:1e:3b:a9:1d:bf:31:28:08:32:
         63:e9:28:f0:ec:35:1e:0b:27:b9:84:42:2e:b3:fb:7b:20:e5:
         7e:ff:67:82:7a:11:37:f2:d4:4e:40:ef:77:b9:97:00:3b:96:
         fc:95:44:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:33 2026 by rpki-client