Route Origin Authorization

$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa
File:                     34332e3234382e39362e302f32312d3234203d3e203536303436.roa (raw, json)
Hash identifier:          bg6zPuU8Ssz8W/nlu3pvUl1iE6RuAke/SXjsH15qWRU=
Subject key identifier:   28:5F:B8:2D:58:8E:49:53:31:42:8D:F7:69:3A:11:55:4E:5E:8F:4B
Certificate issuer:       /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial:       25FDE02E1027A13F743F3681BD93BA37C29181C4
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa
Signing time:             Tue 18 Aug 2026 02:20:54 +0000
ROA not before:           Tue 18 Aug 2026 02:15:54 +0000
ROA not after:            Tue 17 Aug 2027 02:20:54 +0000
asID:                     56046
IP address blocks:        43.248.96.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Sep 2026 15:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:fd:e0:2e:10:27:a1:3f:74:3f:36:81:bd:93:ba:37:c2:91:81:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
        Validity
            Not Before: Aug 18 02:15:54 2026 GMT
            Not After : Aug 17 02:20:54 2027 GMT
        Subject: CN=285FB82D588E495331428DF7693A11554E5E8F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9f:d1:77:0a:08:20:e0:ed:0c:51:2f:61:d4:
                    24:fd:b5:a2:df:16:01:f0:04:ee:90:31:86:72:53:
                    df:bf:9b:d8:7f:4e:5d:b3:42:81:71:dd:56:4b:bd:
                    a8:5e:ef:ad:e2:de:9c:e5:75:56:e6:93:8d:10:35:
                    a0:95:0f:b1:a9:79:e1:cf:6d:08:23:c6:4d:80:37:
                    81:30:ca:ac:1e:77:b4:08:61:c2:1b:60:88:fc:1f:
                    ec:f0:dc:e3:87:ae:20:a0:1e:fa:ed:cf:ac:21:86:
                    ff:39:a7:d1:1d:04:04:88:ff:22:4e:73:60:30:91:
                    be:8d:ee:54:06:70:83:9f:ad:f5:29:02:2a:9f:76:
                    a1:51:51:d4:31:61:4a:02:10:12:da:2f:89:52:6a:
                    d0:d6:d0:97:f6:65:79:82:92:97:1c:15:c5:1b:f2:
                    18:39:79:5d:26:28:15:b1:e3:44:fc:9e:e2:6f:b2:
                    91:a8:f9:09:4b:7f:6c:00:bc:da:eb:24:00:f2:f5:
                    41:d4:f6:34:dc:23:bd:5f:87:7a:f8:e5:61:4b:72:
                    03:0c:4f:7c:40:fb:2f:72:05:a8:95:1b:a2:8c:1b:
                    18:e8:3f:c2:ce:67:5f:07:7b:ff:a1:56:20:4a:1c:
                    6b:4e:af:df:e8:00:bc:bd:c6:10:2c:0e:3a:fd:1c:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5F:B8:2D:58:8E:49:53:31:42:8D:F7:69:3A:11:55:4E:5E:8F:4B
            X509v3 Authority Key Identifier:
                keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:54:33:c8:c5:a6:a1:4d:9b:cd:f0:2a:d8:35:5a:e0:54:
         c3:e1:4a:ee:b2:f8:3b:d9:63:10:c7:63:05:38:01:75:9f:1f:
         fc:5a:30:11:84:df:01:00:c4:8e:67:ab:09:6e:6c:96:c3:4f:
         d0:74:c0:20:70:9f:c8:1f:74:45:85:ca:96:a4:c3:ca:5c:db:
         d9:9c:f0:64:7e:d7:82:2a:bf:e0:a0:c6:0d:6a:4e:64:6a:79:
         00:84:ed:af:84:f6:be:2a:c7:2b:71:ac:18:e5:df:d5:55:53:
         36:f8:f2:f2:36:78:e1:0a:7b:a8:83:12:8f:f7:6e:5c:05:d6:
         3f:b8:a1:c2:0b:cb:54:38:67:c8:07:44:03:06:9b:74:67:d7:
         9d:fe:73:df:a6:56:3a:20:12:0d:cd:3c:05:35:ed:c3:a8:84:
         c3:f2:7a:c4:65:35:b9:d2:a3:ad:e8:d4:cb:b9:86:ac:90:2d:
         3b:45:c3:00:72:a1:76:cc:f2:37:b0:36:db:9a:c9:a6:0a:57:
         ab:c5:bf:6b:7b:f1:d1:3e:2d:2a:73:f7:ce:1d:b4:c2:c1:4f:
         68:c2:58:42:c8:69:44:73:9a:84:3f:e0:ff:01:27:5f:b7:1a:
         83:cf:5b:0a:50:9b:84:23:7a:8b:38:ae:ea:ac:7c:22:7d:32:
         de:a7:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:20:31 2026 by rpki-client