Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa
File:                     34332e3233302e37322e302f32322d3232203d3e203539303337.roa (raw, json)
Hash identifier:          bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=
Subject key identifier:   E8:70:E6:CE:D2:FE:43:18:4D:EB:63:13:61:72:89:3F:4A:22:BD:F0
Certificate issuer:       /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial:       208B4816C5B0D90AA7EBE5F001097936A226A84D
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa
Signing time:             Wed 27 May 2026 06:56:10 +0000
ROA not before:           Wed 27 May 2026 06:51:10 +0000
ROA not after:            Wed 26 May 2027 06:56:10 +0000
asID:                     59037
IP address blocks:        43.230.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 12:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8b:48:16:c5:b0:d9:0a:a7:eb:e5:f0:01:09:79:36:a2:26:a8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
        Validity
            Not Before: May 27 06:51:10 2026 GMT
            Not After : May 26 06:56:10 2027 GMT
        Subject: CN=E870E6CED2FE43184DEB63136172893F4A22BDF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:93:fb:bc:a0:37:bc:06:27:e3:e7:8c:d5:d7:
                    b3:ba:79:9c:8d:34:18:80:ed:90:23:30:1d:5e:8c:
                    9f:04:71:2c:c0:71:9d:e6:be:1c:c9:e8:84:25:18:
                    d9:37:db:aa:8c:d3:0a:2a:0a:3a:7d:e9:93:64:50:
                    72:44:26:cf:f9:50:8e:d5:4f:7e:37:55:92:1d:78:
                    a9:f7:6d:b8:ee:14:10:97:63:b3:77:8f:ff:c9:cd:
                    69:17:a2:df:d1:a0:5e:8b:51:55:53:e2:19:54:8d:
                    1d:88:b0:73:a7:7f:d1:b9:28:75:63:47:3f:bc:a5:
                    a9:fd:74:c9:e4:01:08:69:50:a3:72:40:7c:9f:4b:
                    1a:d0:3e:ab:91:ce:c5:95:02:a2:4b:34:9d:ef:89:
                    96:c6:e0:17:b2:5f:e7:95:d7:67:0a:12:f9:ca:0f:
                    d8:5d:40:51:60:05:62:6b:29:7b:0c:7e:62:72:2f:
                    82:b1:ac:58:3e:0b:ed:a8:ba:d5:b8:3e:50:a4:69:
                    82:ed:5c:cc:74:a7:fd:ba:cc:5c:69:7e:ce:cf:ef:
                    cc:75:37:4b:d7:52:95:ab:ff:29:08:6c:89:b6:05:
                    e6:e4:b5:af:86:69:b1:ce:d6:16:6f:db:d4:04:b8:
                    eb:cd:1d:89:bb:1a:ba:c8:4a:97:77:0d:5d:31:33:
                    be:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:70:E6:CE:D2:FE:43:18:4D:EB:63:13:61:72:89:3F:4A:22:BD:F0
            X509v3 Authority Key Identifier:
                keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:a9:60:3e:c1:c1:6d:1c:9b:2d:7c:cc:e7:d9:fb:1c:e4:96:
         64:7d:c6:c6:33:2c:8e:a0:f5:3f:7d:d1:2e:23:3c:7b:8a:21:
         68:ed:47:a4:cc:43:5e:0d:ba:e8:c2:16:d1:c9:c1:41:27:4c:
         8d:92:b4:c0:c1:7a:fb:54:7c:13:9d:6e:1d:b4:c6:84:57:cc:
         c2:09:1b:f8:65:2c:3a:0c:79:d0:24:8f:55:2c:2b:1b:d5:a9:
         b3:b4:46:c5:36:94:0e:a3:c6:12:c8:f2:7a:1d:07:88:31:4b:
         b2:c1:26:c0:05:a2:4e:1c:f3:35:9a:41:f9:9f:ff:64:5b:e8:
         d2:4e:64:bc:81:a7:c1:b8:6a:a2:19:e4:c3:c7:51:24:d1:95:
         f5:37:ff:f8:80:13:4d:eb:1d:59:46:a6:70:82:ec:ac:0e:a8:
         d9:03:fe:13:b6:b6:0d:2f:37:b0:30:f7:df:bc:02:72:41:c6:
         1a:dd:fb:7d:83:31:ac:09:f4:32:a1:84:99:a9:c5:fb:49:e9:
         6c:b5:9b:4c:69:dc:f1:1e:b2:4f:7d:8b:7b:9c:5d:b3:e8:af:
         03:ca:74:5e:9f:2e:30:77:52:72:ae:0a:25:bf:36:d1:8c:a5:
         68:a6:e0:ed:5a:9e:f9:db:a4:75:da:e0:f2:5b:2c:4c:ad:f3:
         b9:b6:ad:78
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIItIFsWw2Qqn6+XwAQl5NqImqE0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2
M0FFMTEzQjAeFw0yNjA1MjcwNjUxMTBaFw0yNzA1MjYwNjU2MTBaMDMxMTAvBgNV
BAMTKEU4NzBFNkNFRDJGRTQzMTg0REVCNjMxMzYxNzI4OTNGNEEyMkJERjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgk/u8oDe8Bifj54zV17O6eZyN
NBiA7ZAjMB1ejJ8EcSzAcZ3mvhzJ6IQlGNk326qM0woqCjp96ZNkUHJEJs/5UI7V
T343VZIdeKn3bbjuFBCXY7N3j//JzWkXot/RoF6LUVVT4hlUjR2IsHOnf9G5KHVj
Rz+8pan9dMnkAQhpUKNyQHyfSxrQPquRzsWVAqJLNJ3viZbG4BeyX+eV12cKEvnK
D9hdQFFgBWJrKXsMfmJyL4KxrFg+C+2outW4PlCkaYLtXMx0p/26zFxpfs7P78x1
N0vXUpWr/ykIbIm2Bebkta+GabHO1hZv29QEuOvNHYm7GrrISpd3DV0xM74nAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU6HDmztL+QxhN62MTYXKJP0oivfAwHwYDVR0j
BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3
RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQxLzEvMzQzMzJlMzIzMzMw
MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAivmSDANBgkqhkiG9w0BAQsFAAOCAQEAGalgPsHBbRybLXzM59n7HOSWZH3G
xjMsjqD1P33RLiM8e4ohaO1HpMxDXg266MIW0cnBQSdMjZK0wMF6+1R8E51uHbTG
hFfMwgkb+GUsOgx50CSPVSwrG9Wps7RGxTaUDqPGEsjyeh0HiDFLssEmwAWiThzz
NZpB+Z//ZFvo0k5kvIGnwbhqohnkw8dRJNGV9Tf/+IATTesdWUamcILsrA6o2QP+
E7a2DS83sDD337wCckHGGt37fYMxrAn0MqGEmanF+0npbLWbTGnc8R6yT32Le5xd
s+ivA8p0Xp8uMHdScq4KJb820YylaKbg7Vqe+dukddrg8lssTK3zubateA==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:59 2026 by rpki-client