Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e203539303435.roa
File:                     34332e3233312e3136392e302f32342d3234203d3e203539303435.roa (raw, json)
Hash identifier:          4bufmTh61WaAmqfKiVanOVT2UB50zhRGG1caW8ZhWoI=
Subject key identifier:   21:B6:ED:D9:FF:07:02:79:72:29:B1:AA:03:0A:F9:4E:FE:CC:08:87
Certificate issuer:       /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial:       22D16536F5DEFAE1B53E9D2CACA5DFA169CDB6A4
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e203539303435.roa
Signing time:             Wed 20 May 2026 03:00:57 +0000
ROA not before:           Wed 20 May 2026 02:55:57 +0000
ROA not after:            Wed 19 May 2027 03:00:57 +0000
asID:                     59045
IP address blocks:        43.231.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 20:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d1:65:36:f5:de:fa:e1:b5:3e:9d:2c:ac:a5:df:a1:69:cd:b6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
        Validity
            Not Before: May 20 02:55:57 2026 GMT
            Not After : May 19 03:00:57 2027 GMT
        Subject: CN=21B6EDD9FF0702797229B1AA030AF94EFECC0887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:33:93:46:a3:09:97:4b:cb:57:80:6a:67:63:
                    88:b0:66:c9:f9:e7:d5:8e:53:db:8b:6c:a7:46:6a:
                    0d:de:04:97:3b:52:35:15:f3:d5:a2:f6:72:dd:0b:
                    f0:ed:b4:d1:a5:84:43:7f:f6:16:94:6a:a3:b7:17:
                    c3:7f:73:bd:bd:2e:fa:3f:33:0c:44:2c:cd:6e:b2:
                    54:5b:a7:1e:f3:f0:9c:be:2b:94:5c:38:62:49:c9:
                    7e:b9:98:1b:81:91:8c:b8:c8:85:53:d3:27:08:c1:
                    38:df:f5:de:be:aa:9c:3f:16:f8:a2:a2:68:36:a6:
                    8b:53:dd:75:67:c6:0c:d9:20:18:fa:39:a2:9c:50:
                    bc:83:5f:10:9b:2b:b2:91:3e:32:2b:70:cf:db:8b:
                    71:03:64:5a:8b:a6:27:59:e0:31:34:b6:d2:7e:cc:
                    99:01:6e:82:f6:d4:97:8e:12:96:31:07:ac:d3:04:
                    56:b6:1e:29:ac:48:8d:9a:79:2c:6c:d6:bb:89:7a:
                    5c:6c:c8:e1:46:d2:3b:75:62:c9:fe:d8:57:14:2e:
                    2d:d9:2a:7b:1b:7e:32:72:0c:39:6b:e3:58:ca:3f:
                    a4:61:d9:23:05:fc:35:c3:77:b2:35:51:ac:8b:a3:
                    3a:bb:67:6e:90:d3:2d:0e:8e:b3:50:8f:a4:14:a0:
                    03:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B6:ED:D9:FF:07:02:79:72:29:B1:AA:03:0A:F9:4E:FE:CC:08:87
            X509v3 Authority Key Identifier:
                keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136392e302f32342d3234203d3e203539303435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.231.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:01:8d:aa:e0:0b:7d:3a:8f:75:38:9e:d0:8c:f5:c6:d5:
         51:f7:e0:2f:30:0f:2f:cf:45:6b:0e:5d:16:82:5c:ef:33:59:
         2b:98:7d:cc:18:a7:16:11:12:c2:5d:10:a4:6d:40:67:c4:e3:
         25:54:22:9f:aa:f3:e6:69:d6:1f:6a:64:fb:58:b0:2c:79:fd:
         59:28:08:2b:9a:f0:da:07:f4:cc:eb:d2:bb:ee:38:58:b1:f4:
         b0:b5:7b:d9:b7:ed:11:93:c6:31:32:60:d3:b1:3c:a5:11:94:
         ef:63:f2:3f:ec:4c:36:fb:27:1b:72:36:36:e6:df:fa:87:08:
         71:3c:b4:70:58:c0:b7:e6:db:48:0b:8c:c0:21:9b:ba:35:3e:
         98:28:ec:c5:40:82:64:aa:c4:6e:27:07:a1:3e:49:c4:be:4f:
         ff:52:b8:be:e3:07:98:0d:34:a8:60:09:53:31:6a:68:8e:0d:
         c6:11:a3:13:99:6f:f4:96:c1:ef:ec:97:19:2a:88:d3:79:d1:
         28:09:ba:cb:f4:ae:50:cf:17:55:f8:d9:23:3b:24:92:23:23:
         fc:54:72:b0:bd:e6:be:a1:e5:17:4d:27:00:7a:ab:df:34:29:
         6a:f4:a8:2a:27:6d:24:e4:c7:21:0d:39:9f:a0:4c:c3:a1:03:
         0a:cf:ae:27
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUItFlNvXe+uG1Pp0srKXfoWnNtqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4
N0FCQ0E4OTAeFw0yNjA1MjAwMjU1NTdaFw0yNzA1MTkwMzAwNTdaMDMxMTAvBgNV
BAMTKDIxQjZFREQ5RkYwNzAyNzk3MjI5QjFBQTAzMEFGOTRFRkVDQzA4ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKM5NGowmXS8tXgGpnY4iwZsn5
59WOU9uLbKdGag3eBJc7UjUV89Wi9nLdC/DttNGlhEN/9haUaqO3F8N/c729Lvo/
MwxELM1uslRbpx7z8Jy+K5RcOGJJyX65mBuBkYy4yIVT0ycIwTjf9d6+qpw/Fvii
omg2potT3XVnxgzZIBj6OaKcULyDXxCbK7KRPjIrcM/bi3EDZFqLpidZ4DE0ttJ+
zJkBboL21JeOEpYxB6zTBFa2HimsSI2aeSxs1ruJelxsyOFG0jt1Ysn+2FcULi3Z
KnsbfjJyDDlr41jKP6Rh2SMF/DXDd7I1UayLozq7Z26Q0y0OjrNQj6QUoAMxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUIbbt2f8HAnlyKbGqAwr5Tv7MCIcwHwYDVR0j
BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0
MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzM0MzMyZTMyMzMz
MTJlMzEzNjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEACvnqTANBgkqhkiG9w0BAQsFAAOCAQEAhpoBjargC306j3U4ntCM9cbV
UffgLzAPL89Faw5dFoJc7zNZK5h9zBinFhESwl0QpG1AZ8TjJVQin6rz5mnWH2pk
+1iwLHn9WSgIK5rw2gf0zOvSu+44WLH0sLV72bftEZPGMTJg07E8pRGU72PyP+xM
NvsnG3I2Nubf+ocIcTy0cFjAt+bbSAuMwCGbujU+mCjsxUCCZKrEbicHoT5JxL5P
/1K4vuMHmA00qGAJUzFqaI4NxhGjE5lv9JbB7+yXGSqI03nRKAm6y/SuUM8XVfjZ
IzskkiMj/FRysL3mvqHlF00nAHqr3zQpavSoKidtJOTHIQ05n6BMw6EDCs+uJw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:58 2026 by rpki-client