Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e2034383038.roa
File:                     34332e3233312e3136392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier:          WC6hkAfwb7PGjQi+Xc5kuTF3CQ7uP1+avO0icjfJOuI=
Subject key identifier:   47:1B:35:9B:F1:05:31:61:D7:12:15:6A:8D:2B:EB:3D:C3:DB:B7:29
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       1B6EF1C2E50B0D39C6166604BD48644AC4D3ACFE
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e2034383038.roa
Signing time:             Wed 20 May 2026 02:59:51 +0000
ROA not before:           Wed 20 May 2026 02:54:51 +0000
ROA not after:            Wed 19 May 2027 02:59:51 +0000
asID:                     4808
IP address blocks:        43.231.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:f1:c2:e5:0b:0d:39:c6:16:66:04:bd:48:64:4a:c4:d3:ac:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: May 20 02:54:51 2026 GMT
            Not After : May 19 02:59:51 2027 GMT
        Subject: CN=471B359BF1053161D712156A8D2BEB3DC3DBB729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:66:00:5d:0f:2c:aa:0e:45:93:b0:39:fe:
                    32:0a:27:9f:3d:95:ac:f2:ed:f9:50:9b:05:a0:b1:
                    86:66:bc:95:06:61:00:6e:27:7b:50:ff:3d:ba:fb:
                    0d:4b:2a:13:82:e7:ab:9a:3c:fa:f0:c5:b5:e7:5b:
                    85:44:5c:de:27:29:ef:f0:a5:91:62:bb:d3:75:13:
                    0b:f9:20:7e:c0:f4:1c:9d:3c:e1:c5:30:77:a5:94:
                    95:5a:59:d0:ef:21:01:43:92:8b:16:ab:a0:d8:80:
                    83:e7:32:9b:b9:9d:f2:c3:8a:4d:ea:56:28:43:4c:
                    e0:76:44:65:f5:2e:a2:78:11:0b:f0:cc:9b:0b:4c:
                    21:93:3b:3f:18:7e:09:b6:56:8b:49:c9:a6:0d:42:
                    09:c9:76:37:cd:6d:d5:61:0c:d7:03:99:3e:fe:6d:
                    af:b2:b9:b9:6e:d8:e1:28:cc:d7:5f:d6:5c:9f:20:
                    e6:69:b6:8d:c9:74:d7:5f:21:19:6a:61:8e:f6:8a:
                    1c:a0:fa:6e:99:5a:17:ee:87:65:66:12:48:7f:ea:
                    01:f3:0f:0d:6d:45:b8:21:5a:9f:b0:29:5c:46:c1:
                    b7:88:1e:f7:52:17:4e:7b:b3:50:8b:1e:e6:d8:3b:
                    85:03:c8:07:cb:5f:13:c3:fe:0c:31:1f:a6:44:14:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:35:9B:F1:05:31:61:D7:12:15:6A:8D:2B:EB:3D:C3:DB:B7:29
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:de:ee:7c:8c:db:fb:8b:7a:92:1f:7e:3d:fa:e3:0d:ee:cf:
         74:96:8c:86:39:e6:2c:26:98:a9:fc:49:37:f5:8b:ad:09:29:
         2b:5f:3e:1d:9f:c3:6e:b0:36:ce:ca:d3:97:9f:a1:d1:68:53:
         1e:a7:cf:cf:99:7b:66:3e:08:b8:68:3b:86:70:3f:fc:99:09:
         d3:c2:e9:6f:17:68:6b:c6:b9:cf:d1:35:99:96:20:92:93:c8:
         17:1b:e8:99:99:95:f0:67:84:bd:70:5e:cf:32:99:a0:7d:47:
         93:91:4c:f3:52:e9:10:be:68:94:6d:5c:bc:73:67:eb:38:a3:
         6c:26:f6:08:6e:d0:2e:e6:22:6c:0d:03:a3:35:8c:34:58:df:
         ae:05:cb:b2:0a:17:be:bb:91:79:f6:ff:ad:d0:46:fb:55:40:
         6a:27:21:3b:a7:15:42:09:df:d2:4c:e7:25:f2:a8:91:9a:bb:
         62:37:c3:66:9a:0d:dc:af:2e:4f:45:45:99:fa:10:d1:bb:7c:
         96:54:8d:9a:bf:e1:8e:e7:d4:13:7b:2f:a0:97:6c:b8:23:93:
         b7:25:b6:0b:20:e0:f8:7f:c4:19:9c:21:af:2c:7f:b9:ed:f3:
         54:41:2f:33:36:5d:7f:3b:0e:ea:04:9e:e8:49:76:bd:f0:11:
         bb:4c:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:10 2026 by rpki-client