Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa
File:                     34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa (raw, json)
Hash identifier:          mI2r7zoGl3B06ATUJWbVG4P4Kp/guwKwSUfh90y6bTw=
Subject key identifier:   FC:75:49:F8:22:4A:49:6F:6F:D0:1E:E9:4E:4A:87:84:86:41:03:01
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       0D11A2E3E5E70220D7A8DAE88D7700499EF6B728
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa
Signing time:             Mon 20 Apr 2026 05:49:16 +0000
ROA not before:           Mon 20 Apr 2026 05:44:16 +0000
ROA not after:            Mon 19 Apr 2027 05:49:16 +0000
asID:                     153911
IP address blocks:        43.248.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:11:a2:e3:e5:e7:02:20:d7:a8:da:e8:8d:77:00:49:9e:f6:b7:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:44:16 2026 GMT
            Not After : Apr 19 05:49:16 2027 GMT
        Subject: CN=FC7549F8224A496F6FD01EE94E4A878486410301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9a:1f:d2:31:fc:63:f8:66:4b:3d:15:b8:0e:
                    6d:55:88:ff:8b:f0:88:d1:51:27:06:d8:bd:51:b3:
                    ef:ec:cd:89:a2:1a:ef:f5:48:46:4a:6e:3e:3d:d8:
                    77:36:a9:65:03:45:75:ae:4a:39:41:1f:99:5b:71:
                    fc:e9:94:41:78:5b:78:0f:61:f3:0d:03:9b:3b:22:
                    c0:59:96:f8:b1:c9:2a:5e:bf:53:63:5e:2a:a2:c2:
                    1f:80:2d:81:89:5f:51:de:a3:e9:37:9b:3b:e1:cf:
                    9b:fb:c3:be:e0:d9:2a:51:ed:12:0e:24:18:19:c8:
                    13:74:b5:2b:fe:f7:65:53:d3:a3:7b:65:23:62:3d:
                    64:7d:40:14:ce:3e:5b:8d:74:f1:ff:8a:b5:dd:c8:
                    a6:05:cf:79:52:49:e4:e1:ca:42:9e:3a:8a:33:ed:
                    ff:14:7e:e6:21:aa:e7:06:40:86:ed:8f:5f:26:d9:
                    f6:eb:a3:7a:67:34:e6:ed:46:14:af:e8:4f:a8:df:
                    d7:ea:c2:74:67:79:b1:82:2d:ba:05:d7:f8:11:cd:
                    9a:bc:54:74:91:d8:1e:b7:e6:54:d2:54:d8:7d:00:
                    d1:9d:4a:91:00:b0:2c:c8:ad:d1:7f:a5:65:a9:58:
                    b7:e1:5c:0b:74:80:60:7e:e1:ff:70:2d:95:ad:4e:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:75:49:F8:22:4A:49:6F:6F:D0:1E:E9:4E:4A:87:84:86:41:03:01
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:8a:23:a1:59:17:f7:4f:b1:69:59:62:13:24:29:64:3f:
         1a:03:41:29:d8:26:44:ef:ac:cf:1a:7e:e9:a1:b1:38:b6:ae:
         a7:3e:f2:57:e4:bf:fe:a9:4f:c7:e9:da:25:16:f2:10:5e:a3:
         8c:77:01:dd:06:10:13:51:24:44:2d:47:96:2d:ef:63:fd:d8:
         74:10:65:82:7a:58:cd:81:eb:21:d1:d0:d5:52:42:9e:c6:ec:
         88:c2:21:72:b4:d0:4e:4e:af:4d:06:00:78:a8:be:43:e4:58:
         21:f1:3a:da:3d:4b:e1:99:97:65:e9:0f:e6:2a:d0:0e:b0:ce:
         dc:e9:cb:3b:85:24:a7:71:b5:27:a5:0c:0d:f0:c9:88:41:6b:
         aa:bf:2d:19:28:4b:38:0e:68:16:61:18:80:40:99:68:c2:87:
         50:e3:b0:f2:d8:8d:34:7d:a5:e4:e2:da:f6:80:48:9d:57:39:
         01:de:66:77:b6:0d:0f:ce:f3:4f:06:70:4e:c8:b2:d6:ec:93:
         c5:b2:8c:d3:c0:d3:3c:27:6b:8a:b8:49:aa:e1:4f:ff:81:f2:
         c7:45:3b:08:75:22:02:45:eb:eb:72:28:f5:bc:15:6d:e0:3e:
         62:1e:66:c7:3d:33:b7:89:a8:61:4f:f3:d4:40:9a:9b:bf:bd:
         37:7c:c8:62
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUDRGi4+XnAiDXqNrojXcASZ72tygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG
RUJCQkJCNjAeFw0yNjA0MjAwNTQ0MTZaFw0yNzA0MTkwNTQ5MTZaMDMxMTAvBgNV
BAMTKEZDNzU0OUY4MjI0QTQ5NkY2RkQwMUVFOTRFNEE4Nzg0ODY0MTAzMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmh/SMfxj+GZLPRW4Dm1ViP+L
8IjRUScG2L1Rs+/szYmiGu/1SEZKbj492Hc2qWUDRXWuSjlBH5lbcfzplEF4W3gP
YfMNA5s7IsBZlvixySpev1NjXiqiwh+ALYGJX1Heo+k3mzvhz5v7w77g2SpR7RIO
JBgZyBN0tSv+92VT06N7ZSNiPWR9QBTOPluNdPH/irXdyKYFz3lSSeThykKeOooz
7f8UfuYhqucGQIbtj18m2fbro3pnNObtRhSv6E+o39fqwnRnebGCLboF1/gRzZq8
VHSR2B635lTSVNh9ANGdSpEAsCzIrdF/pWWpWLfhXAt0gGB+4f9wLZWtTvn5AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU/HVJ+CJKSW9v0B7pTkqHhIZBAwEwHwYDVR0j
BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5
ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC8zNDMzMmUzMjM0
MzgyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMzM5MzEzMS5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAiv4dDANBgkqhkiG9w0BAQsFAAOCAQEAcG6KI6FZF/dPsWlZYhMk
KWQ/GgNBKdgmRO+szxp+6aGxOLaupz7yV+S//qlPx+naJRbyEF6jjHcB3QYQE1Ek
RC1Hli3vY/3YdBBlgnpYzYHrIdHQ1VJCnsbsiMIhcrTQTk6vTQYAeKi+Q+RYIfE6
2j1L4ZmXZekP5irQDrDO3OnLO4Ukp3G1J6UMDfDJiEFrqr8tGShLOA5oFmEYgECZ
aMKHUOOw8tiNNH2l5OLa9oBInVc5Ad5md7YND87zTwZwTsiy1uyTxbKM08DTPCdr
irhJquFP/4Hyx0U7CHUiAkXr63Io9bwVbeA+Yh5mxz0zt4moYU/z1ECam7+9N3zI
Yg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 01:39:09 2026 by rpki-client