Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3232203d3e2034383132.roa
File:                     34332e3234322e39362e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier:          Zxv6uhIxhx7VGTPbbGyRLQcjWlJZ2Al9jL46q3enaIw=
Subject key identifier:   F4:A4:89:54:83:66:41:04:BB:D3:D9:DB:9D:EF:1E:1F:28:1A:EA:C4
Certificate issuer:       /CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
Certificate serial:       34295351DECFC9E8DD91E07E6A9B34E6647DC352
Authority key identifier: 1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3232203d3e2034383132.roa
Signing time:             Thu 02 Jul 2026 03:25:37 +0000
ROA not before:           Thu 02 Jul 2026 03:20:37 +0000
ROA not after:            Thu 01 Jul 2027 03:25:37 +0000
asID:                     4812
IP address blocks:        43.242.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 05:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:29:53:51:de:cf:c9:e8:dd:91:e0:7e:6a:9b:34:e6:64:7d:c3:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1
        Validity
            Not Before: Jul  2 03:20:37 2026 GMT
            Not After : Jul  1 03:25:37 2027 GMT
        Subject: CN=F4A4895483664104BBD3D9DB9DEF1E1F281AEAC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:e6:ec:6f:73:6d:06:f3:96:d2:32:8a:22:
                    bb:7e:76:3a:39:ef:dc:58:86:65:3c:0c:7b:2a:23:
                    2a:f5:0a:90:e1:9e:fb:7c:2a:cd:fa:d2:ba:c2:7e:
                    f5:84:d4:f7:e1:e6:25:ba:dd:da:2c:81:64:ac:38:
                    7e:40:cd:4f:22:68:f9:af:4d:9b:45:25:4e:e6:f4:
                    25:e6:f7:f8:ed:9d:d0:c9:23:90:45:b5:a9:b0:5b:
                    31:a7:89:1d:d7:9b:07:77:6f:d1:c6:09:e5:31:b0:
                    fd:1a:0e:fc:35:1c:9e:63:cc:6e:b5:32:7e:12:9f:
                    9c:85:98:08:5a:a4:f8:cc:83:c4:36:a6:94:11:71:
                    e0:68:a6:fb:97:23:02:42:ff:27:d0:5f:29:62:a6:
                    37:45:f3:6a:ad:27:e7:d2:24:e3:b4:cb:32:81:25:
                    dd:7b:c4:e8:70:dc:b2:c3:6b:65:a5:0d:b5:4f:ff:
                    4a:94:c4:0c:e6:79:f1:f7:50:fa:c2:22:fa:22:a9:
                    21:03:02:56:ca:d2:45:59:1b:eb:be:29:1e:5b:7b:
                    37:a8:0a:9f:c0:71:9a:84:50:07:e0:a0:2e:84:0e:
                    77:d4:3b:10:55:1c:5e:3b:21:93:ce:e9:c9:fd:59:
                    03:4f:95:35:df:74:e8:2f:b2:0b:b9:23:c2:fd:eb:
                    da:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A4:89:54:83:66:41:04:BB:D3:D9:DB:9D:EF:1E:1F:28:1A:EA:C4
            X509v3 Authority Key Identifier:
                keyid:1F:69:3C:D5:7E:5E:CC:EA:0D:D6:A4:C0:E4:D8:AB:20:7F:C5:1D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1F693CD57E5ECCEA0DD6A4C0E4D8AB207FC51DF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098465627510669315/0/34332e3234322e39362e302f32322d3232203d3e2034383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:b4:48:74:10:1a:ac:bf:f2:73:88:57:6a:47:89:04:1d:1f:
         d5:cc:fb:af:93:bd:e2:2a:36:ca:87:9e:60:d2:1f:dc:7e:91:
         da:44:da:96:3b:af:2d:80:6a:dd:99:e2:6b:19:48:0b:fa:30:
         ce:6a:cf:17:44:15:0e:eb:2d:6a:0c:b0:2c:dc:8c:db:30:31:
         7b:8e:da:b3:0e:15:3a:f8:af:bc:db:e9:81:9a:a1:4a:b5:6d:
         05:10:aa:35:3b:1a:f9:dc:b7:cd:f3:36:f0:07:eb:52:9e:a0:
         53:1c:7c:0c:49:a4:ce:0c:cd:0e:c1:2d:e5:07:17:11:a6:61:
         96:86:04:3b:f9:f7:89:59:ee:5d:fb:b4:1f:e3:0a:d0:4b:06:
         d7:8f:b3:d7:1e:0b:a9:09:d5:e8:f5:c2:fb:1f:74:96:98:73:
         2b:91:93:75:39:32:04:79:4c:da:3d:2f:cd:21:cd:91:20:0d:
         e3:c6:dd:bb:4d:8c:8e:b3:e1:3f:8c:ff:07:6b:2f:99:0e:33:
         85:6f:5b:49:99:63:e1:4d:c8:37:f4:e8:78:15:3f:69:4a:56:
         4b:c4:83:58:74:96:34:cb:e7:fc:78:37:3e:d9:24:a6:60:89:
         7d:7f:3e:15:ec:19:6d:69:00:09:ec:f3:65:66:9a:b6:50:21:
         64:a6:96:d9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUNClTUd7PyejdkeB+aps05mR9w1IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3
RkM1MURGMTAeFw0yNjA3MDIwMzIwMzdaFw0yNzA3MDEwMzI1MzdaMDMxMTAvBgNV
BAMTKEY0QTQ4OTU0ODM2NjQxMDRCQkQzRDlEQjlERUYxRTFGMjgxQUVBQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCObsb3NtBvOW0jKKIrt+djo5
79xYhmU8DHsqIyr1CpDhnvt8Ks360rrCfvWE1Pfh5iW63dosgWSsOH5AzU8iaPmv
TZtFJU7m9CXm9/jtndDJI5BFtamwWzGniR3Xmwd3b9HGCeUxsP0aDvw1HJ5jzG61
Mn4Sn5yFmAhapPjMg8Q2ppQRceBopvuXIwJC/yfQXylipjdF82qtJ+fSJOO0yzKB
Jd17xOhw3LLDa2WlDbVP/0qUxAzmefH3UPrCIvoiqSEDAlbK0kVZG+u+KR5bezeo
Cp/AcZqEUAfgoC6EDnfUOxBVHF47IZPO6cn9WQNPlTXfdOgvsgu5I8L969ptAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU9KSJVINmQQS709nbne8eHyga6sQwHwYDVR0j
BBgwFoAUH2k81X5ezOoN1qTA5NirIH/FHfEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ2NTYyNzUxMDY2OTMxNS8wLzFGNjkzQ0Q1N0U1RUNDRUEwREQ2QTRDMEU0RDhB
QjIwN0ZDNTFERjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUY2OTNDRDU3RTVFQ0NFQTBERDZBNEMwRTREOEFCMjA3RkM1MURGMS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDY1NjI3NTEwNjY5MzE1LzAvMzQzMzJlMzIzNDMy
MmUzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMxMzIucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAIr8mAwDQYJKoZIhvcNAQELBQADggEBAHm0SHQQGqy/8nOIV2pHiQQdH9XM+6+T
veIqNsqHnmDSH9x+kdpE2pY7ry2Aat2Z4msZSAv6MM5qzxdEFQ7rLWoMsCzcjNsw
MXuO2rMOFTr4r7zb6YGaoUq1bQUQqjU7Gvnct83zNvAH61KeoFMcfAxJpM4MzQ7B
LeUHFxGmYZaGBDv594lZ7l37tB/jCtBLBtePs9ceC6kJ1ej1wvsfdJaYcyuRk3U5
MgR5TNo9L80hzZEgDePG3btNjI6z4T+M/wdrL5kOM4VvW0mZY+FNyDf06HgVP2lK
VkvEg1h0ljTL5/x4Nz7ZJKZgiX1/PhXsGW1pAAns82VmmrZQIWSmltk=
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:12 2026 by rpki-client