Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa
File:                     34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier:          pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=
Subject key identifier:   E0:36:BF:90:DD:2B:80:D1:39:A6:67:01:29:9C:38:B2:39:12:61:F9
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       77BE57E5F7D6496B1E677592B4E833DEE74EC948
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa
Signing time:             Wed 20 May 2026 02:59:52 +0000
ROA not before:           Wed 20 May 2026 02:54:52 +0000
ROA not after:            Wed 19 May 2027 02:59:52 +0000
asID:                     23724
IP address blocks:        43.231.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 07:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:be:57:e5:f7:d6:49:6b:1e:67:75:92:b4:e8:33:de:e7:4e:c9:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: May 20 02:54:52 2026 GMT
            Not After : May 19 02:59:52 2027 GMT
        Subject: CN=E036BF90DD2B80D139A66701299C38B2391261F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:80:1a:3b:e0:24:7f:d6:db:af:0c:6a:0c:a8:
                    30:89:e0:c3:40:60:87:ff:e5:1f:a1:d9:31:b3:59:
                    7e:95:6f:11:69:44:3b:12:79:bc:97:3f:13:35:2e:
                    88:b7:94:ee:b1:8a:eb:3e:0c:d8:db:3d:3f:83:02:
                    a2:2f:5b:d3:21:08:e9:a1:c5:30:3d:53:1d:47:4f:
                    9e:71:40:f4:e3:4e:17:20:e2:6d:53:51:f9:e3:da:
                    8a:6c:e4:aa:2e:29:89:4b:28:c9:93:55:b5:75:64:
                    98:4c:3d:5c:40:5c:a2:a6:cf:55:3d:04:5d:76:8c:
                    01:85:66:71:c8:1d:95:53:66:62:a1:b1:8c:60:14:
                    90:0d:89:4c:4c:13:60:5a:d8:51:93:fa:e3:0f:0b:
                    0f:3e:d6:ff:e7:75:7c:57:22:30:20:44:c0:8f:db:
                    2a:0f:4c:d6:52:cd:a6:f2:d3:fe:a1:13:d8:2d:c2:
                    c2:d2:ee:1d:a5:93:87:c0:65:5c:9b:95:02:61:6e:
                    dd:cf:67:0d:47:b6:32:9c:a9:44:39:d4:f3:24:ce:
                    7a:93:b0:f3:6d:6c:ef:7b:2c:51:bf:ba:7f:a0:f5:
                    07:b3:f9:0c:1b:c6:52:86:1a:92:98:1a:45:ee:c7:
                    fe:c7:d3:de:88:8e:a9:a8:bb:d0:1d:3d:21:45:c6:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:BF:90:DD:2B:80:D1:39:A6:67:01:29:9C:38:B2:39:12:61:F9
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:19:15:fe:c7:2e:a3:d7:0a:89:1c:d2:3d:f5:78:fc:37:
         2d:fe:e0:51:4e:bb:4b:df:29:cd:92:c4:60:f7:b1:3d:ba:33:
         fb:49:40:65:0e:b4:e3:47:e0:08:e9:e0:52:d9:3d:05:de:dc:
         45:00:ca:04:b1:38:5b:9f:c9:88:b2:f6:c5:26:05:3f:a5:1f:
         79:ed:f1:cb:d3:a1:a6:f2:4b:88:73:dc:d9:ab:61:62:f3:19:
         1c:3b:b2:56:df:6e:e6:d6:48:79:f4:99:63:dd:21:69:53:de:
         65:a7:66:39:fb:61:9b:f9:a4:b4:58:86:6e:7e:c3:c3:2c:ed:
         73:f2:0d:58:b4:b3:b0:f4:bd:53:6c:ef:97:7a:a8:92:c9:6f:
         f6:53:c6:25:d1:8b:1a:11:dd:67:33:19:79:79:17:ee:ee:00:
         43:77:30:36:13:34:e4:e9:fa:19:14:42:12:11:cd:80:c6:91:
         b0:49:18:73:b1:49:f1:1b:ca:32:8f:f0:01:e9:2f:83:33:99:
         a5:8e:01:36:61:0a:8a:27:15:63:a7:72:10:88:02:09:9c:77:
         9a:53:b0:f6:95:aa:8e:2c:7d:ef:03:39:56:8c:f8:cf:91:a4:
         3b:e3:0e:9a:c3:ae:2b:41:b7:3e:49:25:c3:2b:ac:5b:b4:96:
         6e:1b:7d:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:42:53 2026 by rpki-client