Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa
File:                     34332e3234382e37362e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier:          dE5KBuEdxaP+cmPlwFFz9k3bcWMMkmCAjonkfCkklX0=
Subject key identifier:   B5:46:74:E9:C7:4D:31:8C:20:C6:9D:3F:BA:9D:A2:42:BE:EB:EC:F0
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       02CE143C3E153844BB844B3384DFEF0192C65A22
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa
Signing time:             Mon 20 Apr 2026 05:41:44 +0000
ROA not before:           Mon 20 Apr 2026 05:36:44 +0000
ROA not after:            Mon 19 Apr 2027 05:41:44 +0000
asID:                     23650
IP address blocks:        43.248.76.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ce:14:3c:3e:15:38:44:bb:84:4b:33:84:df:ef:01:92:c6:5a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Apr 20 05:36:44 2026 GMT
            Not After : Apr 19 05:41:44 2027 GMT
        Subject: CN=B54674E9C74D318C20C69D3FBA9DA242BEEBECF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:88:9c:ac:9a:f1:10:24:79:a5:99:ea:30:
                    ca:78:cd:37:f3:de:57:bd:29:fe:ab:57:fb:c4:dc:
                    69:6d:9d:e1:eb:9b:b5:38:88:4b:92:f7:01:9f:0f:
                    78:88:b0:f0:d3:fd:05:fc:7c:06:63:5a:38:38:57:
                    92:c7:0e:0e:a6:1a:d8:74:b3:70:a9:a1:bc:ea:4f:
                    01:50:62:8a:cb:f6:5f:12:d8:ab:8d:f3:d6:40:d1:
                    e1:20:57:13:2c:c5:c3:16:01:fa:62:98:58:f6:74:
                    a2:8a:97:e4:06:e6:f4:e0:45:46:4c:89:2a:a5:a6:
                    2b:16:d7:9a:59:65:01:74:f3:eb:f0:6c:59:6b:a1:
                    31:64:c5:41:73:7c:27:22:55:0c:a4:03:a5:cd:9f:
                    68:dc:35:60:58:58:5c:8b:57:1f:a8:a7:d4:e3:02:
                    d3:6e:05:2e:d8:48:cd:45:20:5c:80:71:ad:e6:06:
                    94:fc:89:7e:d7:20:3b:a8:84:2f:69:4a:b9:c2:e6:
                    fe:ff:69:6d:0b:e3:1a:58:aa:49:84:8a:82:c7:6d:
                    3a:a2:b5:c1:74:2f:d0:0f:27:4f:08:31:af:ba:51:
                    dd:0c:28:51:fb:d6:97:b9:e7:ef:2e:a1:56:d4:54:
                    72:50:e2:fd:f1:92:e7:2c:a8:68:a2:d8:0e:1f:7f:
                    cc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:74:E9:C7:4D:31:8C:20:C6:9D:3F:BA:9D:A2:42:BE:EB:EC:F0
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:85:38:df:ab:1d:44:7c:76:94:6f:d4:c8:60:4a:61:23:9b:
         b1:39:7f:05:fc:d6:d7:75:4a:ee:1d:8d:45:6e:73:ae:96:10:
         50:0c:fb:33:fa:ad:80:61:86:99:40:8a:61:53:0a:4e:1d:29:
         c3:6e:d9:c4:7a:68:82:3c:9a:9e:19:a4:b1:3b:16:0f:dd:93:
         d1:f6:d1:e9:c1:e9:41:36:e4:03:dc:9e:cc:3e:fe:d2:06:84:
         8a:ea:74:03:31:6e:34:6f:cd:af:9a:41:9e:4b:e2:3c:47:eb:
         d2:3e:92:f3:19:8d:8d:23:0b:9c:55:56:52:f7:fa:24:ed:6f:
         cb:6f:f2:a0:ee:73:b0:e9:68:44:46:cb:1e:24:de:47:81:cf:
         1a:22:f0:5e:68:67:02:08:91:30:4e:ff:a1:8d:a8:f5:0b:b4:
         59:70:1f:20:c9:30:76:d5:9e:cd:be:6f:8d:82:1e:a3:56:e7:
         81:0c:a3:b1:b2:c7:d8:4c:3c:60:3c:73:99:c1:50:c2:de:2c:
         a4:bd:e5:1d:7a:96:27:e2:fc:73:46:bb:6a:31:db:d2:e3:15:
         df:69:73:3f:cb:3c:16:5a:8c:a3:64:96:27:6b:81:1a:20:16:
         9f:2c:a7:6a:79:fc:67:c3:a7:64:4b:84:63:13:c1:0c:f9:5a:
         38:64:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:48 2026 by rpki-client