Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32342d3234203d3e203538343631.roa
File:                     34332e3232352e3132322e302f32342d3234203d3e203538343631.roa (raw, json)
Hash identifier:          v21isE53GWCE3fg7bsZXqlxYie+RssAIh7/CjT5DH/k=
Subject key identifier:   95:6D:B4:45:92:BD:9F:65:C8:BE:98:D0:B4:8C:1C:32:03:5B:3C:8B
Certificate issuer:       /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial:       107F060BACFA2F64820CD80F69F43EDBF40401BF
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32342d3234203d3e203538343631.roa
Signing time:             Thu 04 Jun 2026 06:28:42 +0000
ROA not before:           Thu 04 Jun 2026 06:23:42 +0000
ROA not after:            Thu 03 Jun 2027 06:28:42 +0000
asID:                     58461
IP address blocks:        43.225.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7f:06:0b:ac:fa:2f:64:82:0c:d8:0f:69:f4:3e:db:f4:04:01:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
        Validity
            Not Before: Jun  4 06:23:42 2026 GMT
            Not After : Jun  3 06:28:42 2027 GMT
        Subject: CN=956DB44592BD9F65C8BE98D0B48C1C32035B3C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:03:29:3f:d1:aa:91:a0:63:c4:d3:99:97:c5:
                    32:61:b5:0e:5a:6b:68:7f:58:6e:d7:b4:6c:64:91:
                    9f:70:48:e4:23:f4:6e:8f:16:92:83:f9:48:75:6c:
                    55:56:2e:06:c3:f7:bb:58:6c:e5:4b:e5:0a:c9:b6:
                    b3:42:38:44:4b:c4:dc:8a:9e:f4:a6:b6:31:72:e1:
                    3f:6e:69:4a:bd:d3:6f:a6:e1:f8:b9:b7:0a:e5:cb:
                    2a:74:8f:86:01:a5:c0:32:37:b8:fd:b8:7d:63:0c:
                    99:60:e5:9a:1b:35:0c:07:72:1a:6f:7a:ae:4e:51:
                    0a:21:a3:c6:fa:a2:03:4c:ef:1d:40:d5:02:5b:c1:
                    3d:16:f6:20:34:8a:bf:01:49:ad:8b:cd:7f:b7:7e:
                    7e:ca:81:f9:60:6f:88:50:92:9b:76:22:ad:78:81:
                    c9:67:ba:af:11:2c:49:58:c2:de:fd:a5:65:d5:c4:
                    75:18:97:64:b3:97:2f:1a:85:94:a9:1b:6e:4c:a9:
                    ce:bf:80:32:ab:69:7d:74:be:f4:e4:1e:ac:7e:5b:
                    59:8d:21:c7:d7:67:91:0c:c1:ad:14:62:cb:5e:c9:
                    7f:b5:56:40:5f:93:f1:4e:8f:bb:cc:b5:37:95:b8:
                    e7:6f:06:c1:df:c2:90:60:42:70:52:6c:c8:00:9f:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:B4:45:92:BD:9F:65:C8:BE:98:D0:B4:8C:1C:32:03:5B:3C:8B
            X509v3 Authority Key Identifier:
                keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32342d3234203d3e203538343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:6b:7b:a2:e9:0f:22:88:11:a7:99:4f:c7:7d:01:61:2f:cb:
         bd:19:19:fe:41:81:ba:d6:fc:49:9e:ef:f5:b7:f6:10:60:a4:
         1f:8e:89:a7:17:64:df:fd:aa:15:dc:fa:34:9f:6c:f5:4b:23:
         25:1c:5c:5b:45:9e:cf:1e:26:27:29:a2:d0:7c:86:eb:2b:a1:
         ce:8d:b4:a5:6a:12:0b:4f:92:7f:5e:54:04:f1:82:d0:fa:c6:
         d6:42:cc:91:e0:5c:f5:ae:5a:4d:bf:e2:7f:a5:60:7f:5f:43:
         e0:d5:ec:c5:86:92:52:d7:2e:fd:be:2b:dc:a3:b4:e0:07:16:
         e1:b6:ba:18:e3:7f:bb:c6:c5:f3:c2:7d:a9:19:02:c2:f1:4f:
         aa:f0:b6:4f:01:1a:5f:a6:38:7b:df:27:c9:5a:d8:9b:95:c4:
         6d:0e:d2:b2:89:87:fa:2b:92:6d:e4:40:15:24:1e:42:7a:3f:
         85:4f:cc:2e:06:03:60:1d:2b:bd:2b:7a:f4:fd:1e:d4:4d:37:
         0f:98:23:63:9a:96:c9:40:9a:8a:23:15:a2:20:0a:52:ff:3a:
         1c:bb:09:ee:cd:10:30:e0:18:12:94:3d:e8:81:53:73:e1:e9:
         24:9e:17:bb:0e:c5:cf:31:c4:c9:5c:3b:a8:24:bd:4a:de:10:
         ac:b5:5c:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:22 2026 by rpki-client