Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa
File:                     34332e3234382e3132382e302f32302d3234203d3e203536303436.roa (raw, json)
Hash identifier:          YOf0bSr4MFI4TJxOtY7hHe+xbX/Xx+j1JZ2QddjM7ts=
Subject key identifier:   96:44:0B:2E:84:FD:5D:95:52:42:B9:1A:F1:5D:01:AD:99:01:6B:BA
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       10C650B457FA3737341E00FB024A9F962B391E5F
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa
Signing time:             Tue 18 Aug 2026 02:20:54 +0000
ROA not before:           Tue 18 Aug 2026 02:15:54 +0000
ROA not after:            Tue 17 Aug 2027 02:20:54 +0000
asID:                     56046
IP address blocks:        43.248.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:50:b4:57:fa:37:37:34:1e:00:fb:02:4a:9f:96:2b:39:1e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Aug 18 02:15:54 2026 GMT
            Not After : Aug 17 02:20:54 2027 GMT
        Subject: CN=96440B2E84FD5D955242B91AF15D01AD99016BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:fb:18:1c:51:d9:36:92:68:3e:19:f6:d2:
                    06:27:a8:cf:b3:8f:07:d8:27:e9:0e:e0:97:94:39:
                    99:2d:22:46:8b:2d:7b:56:f3:bf:4b:ef:94:43:66:
                    ee:d0:73:64:23:20:a3:ec:cc:77:b5:32:14:07:02:
                    e4:87:58:ae:b4:39:d5:16:5a:08:d6:42:29:ff:f2:
                    b3:b1:eb:9e:de:4b:45:13:b9:ed:42:ac:a6:e6:f0:
                    b7:1a:1a:fe:52:9a:80:74:c0:b8:74:97:45:9f:f6:
                    80:34:56:d3:eb:94:da:a5:da:3a:ae:6b:ce:3a:2f:
                    97:ad:22:55:63:7f:c6:71:d1:8a:d8:72:1f:e3:c1:
                    50:f4:7b:9a:30:a3:a6:d0:ae:4b:38:0e:97:58:07:
                    d6:8a:67:c5:e6:5d:68:8e:87:c0:72:6e:26:dc:79:
                    f7:64:22:3d:9e:e1:53:08:6a:f1:63:1f:c2:9c:ef:
                    1b:e0:3e:3c:87:43:9c:f9:40:93:5f:65:fa:c6:f3:
                    69:e2:76:59:c0:b4:ed:06:31:38:fc:6b:69:f6:2d:
                    a9:cc:5e:78:96:00:90:9e:e5:8a:b4:6b:d4:1c:e2:
                    60:e3:8c:4c:48:a4:d1:b9:e8:5e:f7:a3:d0:4d:4e:
                    6d:8d:e9:53:bc:b9:0e:ef:b4:88:81:af:dd:48:8a:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:44:0B:2E:84:FD:5D:95:52:42:B9:1A:F1:5D:01:AD:99:01:6B:BA
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:a3:00:01:f3:e9:1f:d5:a2:de:65:04:22:0a:58:c4:4b:98:
         b3:70:83:f1:54:26:b2:6b:49:a8:44:d5:95:d8:7d:e4:ce:15:
         bd:77:cb:75:42:00:56:da:68:44:b0:3f:b1:62:39:d4:b4:5c:
         48:d6:7b:e8:2c:10:a1:3e:30:7e:c7:b2:9a:9f:80:8c:fa:02:
         32:6b:e0:5a:d8:55:3c:10:75:fe:56:1b:c1:2c:52:de:b3:9c:
         a5:5e:7c:4b:70:49:6f:0b:5b:ff:00:fa:d9:d0:9a:41:21:27:
         27:d8:47:80:bd:73:f0:4e:7f:9c:e1:5e:44:2d:da:9f:5d:3d:
         18:b0:5f:4c:b0:2e:e5:75:d9:74:b8:66:1d:a7:4c:e1:f7:f4:
         bf:cd:85:3c:e0:5d:1e:cc:11:a2:80:58:00:ff:d2:7d:58:48:
         fc:19:bc:22:f7:fb:d0:d2:a8:89:99:5d:2d:d8:d8:b9:ac:06:
         e9:ff:f3:74:a7:40:11:57:5c:09:9f:96:8a:22:fa:27:6b:a3:
         5a:1e:75:5f:08:52:97:a6:0c:9d:4b:33:ff:55:91:15:09:f0:
         b8:7e:f2:56:e8:10:f9:a3:8e:4e:01:c4:c0:b2:fc:5c:1b:ac:
         23:1a:6a:40:f0:ea:f7:02:d4:f9:07:b6:8d:d7:a0:67:c2:58:
         98:0a:de:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:20:25 2026 by rpki-client