Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa
File:                     34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=
Subject key identifier:   95:D7:C1:FC:65:FF:EA:A0:16:CE:B4:7F:FE:1C:78:E5:75:CA:8E:D1
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       44C9944A8AC1FA346F5D31BC6BF424129D1C0072
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 20 May 2026 02:59:50 +0000
ROA not before:           Wed 20 May 2026 02:54:50 +0000
ROA not after:            Wed 19 May 2027 02:59:50 +0000
asID:                     4808
IP address blocks:        43.231.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c9:94:4a:8a:c1:fa:34:6f:5d:31:bc:6b:f4:24:12:9d:1c:00:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: May 20 02:54:50 2026 GMT
            Not After : May 19 02:59:50 2027 GMT
        Subject: CN=95D7C1FC65FFEAA016CEB47FFE1C78E575CA8ED1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:71:d9:4c:d6:7a:bd:3c:9c:56:64:8f:6b:
                    72:63:e1:98:77:79:22:c5:6b:fb:e4:d1:9d:3a:4c:
                    f4:65:59:c9:9c:11:ec:56:0b:90:3d:9d:52:2c:43:
                    5f:e9:a0:d6:64:ee:d5:6f:96:e9:33:94:b9:4f:65:
                    86:69:bd:65:a7:f1:7c:6f:2e:37:27:9e:aa:f0:b5:
                    9c:f4:78:d7:a2:61:3e:be:c0:39:01:98:2b:56:49:
                    e3:3c:a7:54:55:1c:43:8b:82:4e:87:15:c6:18:ca:
                    29:93:d3:53:76:0c:b7:e6:f6:9d:be:dd:d4:01:21:
                    10:4a:4a:8c:5c:d8:cc:9f:9a:f6:cc:16:a3:31:f3:
                    5d:e8:3e:72:a9:76:0e:46:13:bc:d8:77:e6:2f:d9:
                    2c:5c:3b:ef:4d:2c:91:1d:eb:c7:c8:83:3d:81:38:
                    47:ef:75:0d:17:44:9f:fe:5b:dd:ca:9a:31:39:58:
                    c6:8b:d3:13:99:26:bd:1e:f3:28:0c:bb:65:1a:7e:
                    f3:92:23:d4:40:f0:ee:39:4d:03:65:ff:13:ab:d9:
                    3a:45:05:70:7e:ee:4f:21:90:86:5f:2c:17:d9:12:
                    e8:9b:c5:7c:84:13:04:e7:50:f5:5e:86:ca:1b:5a:
                    65:3c:e6:e6:8c:d8:47:36:a4:14:b1:00:75:35:44:
                    c9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:C1:FC:65:FF:EA:A0:16:CE:B4:7F:FE:1C:78:E5:75:CA:8E:D1
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:08:11:0e:dc:44:87:27:55:4c:3d:c8:f6:cd:80:a9:4c:95:
         10:a8:cc:fc:ec:8e:9a:45:db:ce:25:fd:53:e5:09:e4:fc:f8:
         7f:0f:d8:63:48:de:cd:dd:96:f2:9c:98:9d:db:54:3f:d1:df:
         e6:84:3b:47:3e:36:b4:3c:ed:6c:c0:2a:9f:44:82:0f:52:79:
         6c:00:60:a8:09:54:ad:47:07:65:b2:f6:1d:e4:99:60:bf:88:
         bb:65:ff:02:13:ea:ab:63:f3:99:65:f4:b2:1c:de:4f:15:47:
         ff:70:23:ee:21:80:27:37:1f:71:d8:65:cf:9f:84:92:1a:d2:
         65:82:98:68:e3:36:5a:35:35:ab:e9:4c:f6:a3:45:5a:ad:22:
         6e:e2:61:38:7a:46:47:c7:07:3b:9e:43:a0:16:b8:c3:93:ec:
         b9:3c:79:96:c3:97:6e:6e:82:2e:11:51:fc:84:dc:6f:b0:59:
         2b:7f:c4:bd:f4:08:4c:46:4b:4b:ba:20:35:a6:44:64:37:95:
         1b:31:c9:74:35:f9:1f:1a:ed:41:43:14:2c:b9:73:f8:4a:4a:
         b0:e5:be:e3:e7:bf:a6:01:56:1a:63:c6:56:ea:0c:f8:e1:1d:
         ea:93:e3:0c:39:16:b3:e3:aa:18:cd:fb:a0:05:bb:49:05:53:
         96:67:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client