Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139342e302f32332d3233203d3e203539303337.roa
File:                     34332e3232372e3139342e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier:          FvxvtfB1pPaIDUCFL2kbFsszoKdUHIds2+TRH0JsnZk=
Subject key identifier:   FC:38:AF:12:B9:BA:26:08:CE:F4:3C:36:B2:45:2D:91:C7:5F:61:F2
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       6C6934EA193DB21E7645AA5CD15B368EBA21145A
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139342e302f32332d3233203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:39:06 +0000
ROA not before:           Wed 27 May 2026 06:34:06 +0000
ROA not after:            Wed 26 May 2027 06:39:06 +0000
asID:                     59037
IP address blocks:        43.227.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:69:34:ea:19:3d:b2:1e:76:45:aa:5c:d1:5b:36:8e:ba:21:14:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:34:06 2026 GMT
            Not After : May 26 06:39:06 2027 GMT
        Subject: CN=FC38AF12B9BA2608CEF43C36B2452D91C75F61F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:15:bc:ce:1f:c6:14:80:3f:a2:88:a1:57:8d:
                    a8:fc:90:38:20:b3:83:da:22:2f:e8:aa:e3:15:97:
                    02:0e:eb:5d:ed:bc:ef:fd:ec:21:82:91:a2:5b:8d:
                    3e:ab:4a:b2:c2:41:41:26:cd:5c:f8:0d:54:ff:a9:
                    8a:88:4b:27:ea:62:06:5c:90:4f:a4:71:dc:bc:b1:
                    96:83:9b:bf:93:58:2f:10:be:ff:57:cf:7d:23:14:
                    00:44:62:b1:ff:ab:90:c5:d6:87:da:38:ac:1a:6b:
                    53:ef:9b:ec:98:ed:26:78:db:cb:98:3c:ca:66:40:
                    4c:d6:0a:36:16:0b:d6:da:87:1d:e2:31:3c:16:13:
                    7a:d5:04:0b:c7:37:aa:a2:6c:9b:8d:25:d9:30:08:
                    31:f0:82:55:8e:ef:73:ae:d5:00:03:ed:18:f7:26:
                    9d:52:2a:06:93:6f:d5:3d:86:7a:3e:74:27:f4:43:
                    f7:c3:8e:ba:ae:fa:2b:d1:ae:20:90:fe:84:dd:94:
                    ab:7b:2f:d3:af:e6:ad:d2:91:7a:11:b5:a0:68:8b:
                    b0:45:e7:2a:15:fd:b7:67:57:de:fb:3c:4a:42:48:
                    82:ee:42:44:ce:9b:b1:4a:d7:4b:4e:25:e3:1d:3a:
                    db:04:86:0f:f5:59:d7:7c:aa:9c:49:3e:7d:c9:1d:
                    53:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:38:AF:12:B9:BA:26:08:CE:F4:3C:36:B2:45:2D:91:C7:5F:61:F2
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139342e302f32332d3233203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.227.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:98:d9:fa:ce:99:86:71:9a:af:fc:06:74:a2:65:39:00:e7:
         6d:2f:a5:2b:97:df:e6:66:3a:e8:ce:8c:91:88:77:33:38:fe:
         35:f2:96:d5:ab:94:a2:75:29:fe:14:fd:2b:1d:c3:45:25:73:
         98:45:ee:94:43:75:0c:e4:24:3f:38:07:d7:e5:77:f3:c2:a6:
         04:46:6e:e7:01:52:06:87:d8:1e:ab:9c:ed:f4:73:a8:ac:a7:
         c4:7f:d6:0f:93:27:33:b6:2e:4d:41:4f:08:7a:5a:81:c9:5b:
         f3:6e:5f:59:28:0c:c2:54:f5:c9:a0:c0:ee:0e:d8:77:f5:f8:
         76:da:0d:1b:c1:ad:0b:48:d8:9e:79:74:86:ae:4c:3e:c8:55:
         e9:99:e6:3b:17:bc:c1:ba:66:07:b5:8f:f1:69:36:8d:9c:a0:
         6a:97:aa:8c:56:de:87:b3:d4:29:b2:fa:70:eb:aa:19:69:c6:
         dd:13:bc:0b:82:af:70:91:68:54:e9:9a:ad:e3:78:30:b2:4a:
         92:4e:af:b3:d9:ff:7e:1b:d6:9f:2d:15:60:71:14:4f:59:f3:
         eb:bf:29:70:19:c2:3c:9b:8b:c7:48:a3:bc:b0:26:95:4f:0b:
         78:b6:f2:08:4b:0d:fb:bc:93:1a:9d:fd:9a:5b:14:bf:99:e9:
         c5:10:53:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:23 2026 by rpki-client