Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa
File:                     34332e3232362e35362e302f32312d3234203d3e2034383337.roa (raw, json)
Hash identifier:          jhpzywUwXPmxtw5HaT7U40LtxFtDBNoWOlL1HzInOXY=
Subject key identifier:   76:01:D9:16:FE:F1:29:00:FA:16:EB:F5:AD:4A:07:0C:B5:45:B8:67
Certificate issuer:       /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
Certificate serial:       494B4A546DC71149A4FAC25B9B310E1EC6F581B3
Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa
Signing time:             Mon 20 Apr 2026 06:46:26 +0000
ROA not before:           Mon 20 Apr 2026 06:41:26 +0000
ROA not after:            Mon 19 Apr 2027 06:46:26 +0000
asID:                     4837
IP address blocks:        43.226.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 18:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:4a:54:6d:c7:11:49:a4:fa:c2:5b:9b:31:0e:1e:c6:f5:81:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B
        Validity
            Not Before: Apr 20 06:41:26 2026 GMT
            Not After : Apr 19 06:46:26 2027 GMT
        Subject: CN=7601D916FEF12900FA16EBF5AD4A070CB545B867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:8a:8e:f2:fd:9a:07:43:a5:6e:15:5f:2f:
                    f7:ac:a1:0f:96:ba:27:84:ad:27:91:53:8a:21:cf:
                    a6:70:5f:8d:54:a9:b9:bc:73:51:a8:5e:0d:dc:d6:
                    f8:02:46:f1:c9:6a:b1:5b:46:97:43:7f:d1:60:10:
                    90:16:ea:78:db:83:0d:a7:6d:fd:cf:9c:5a:fb:b7:
                    6e:da:16:0c:0e:a8:93:6c:fd:2b:b9:ec:11:c0:68:
                    76:5a:a2:30:e9:80:77:4c:85:21:6e:86:45:2c:60:
                    7a:af:f1:6f:55:46:e6:0b:38:92:54:20:61:c4:28:
                    1d:49:b9:aa:67:24:0c:9a:cb:cd:6e:9d:f8:1a:f1:
                    fd:f3:1c:38:69:b9:63:bd:fe:11:50:de:40:f2:e6:
                    b4:3e:aa:ca:37:39:59:b1:59:d2:d9:bd:b6:3b:69:
                    34:15:30:e8:55:18:fa:ba:34:3b:3e:50:b9:c4:eb:
                    dd:ec:54:25:55:15:b4:bd:f2:6a:68:dd:71:d4:83:
                    57:5f:60:92:fd:b0:9c:9c:73:80:41:c9:4e:29:64:
                    11:c5:3e:de:ed:57:9f:cd:be:36:7b:b5:26:22:8e:
                    db:4a:f9:7c:85:f4:6d:24:3f:aa:01:b0:a9:3b:12:
                    1d:09:5b:dd:5d:8d:e8:0c:09:ed:0d:78:3f:ad:db:
                    5e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:01:D9:16:FE:F1:29:00:FA:16:EB:F5:AD:4A:07:0C:B5:45:B8:67
            X509v3 Authority Key Identifier:
                keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/34332e3232362e35362e302f32312d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:5d:e2:7d:cb:e0:61:28:1b:02:62:ab:78:2c:d0:9d:2f:b7:
         9a:98:b5:ef:c7:3f:a0:bd:e0:b3:cd:66:d0:99:3c:f2:f4:c6:
         8b:0f:30:a0:66:ca:8c:65:dd:e7:fe:34:6c:6d:77:fe:03:04:
         f7:83:81:a8:f8:42:00:27:f3:51:c6:a8:b3:31:5e:ed:c7:df:
         bd:7f:c0:62:d9:ed:ab:5b:5c:64:bf:65:eb:39:b6:33:c6:9d:
         61:c0:66:51:2f:3d:65:2a:bc:a5:0a:24:4f:95:1f:7b:79:de:
         56:11:e1:88:e9:f1:6b:10:51:b5:df:b7:eb:fd:74:7a:5d:e5:
         a9:64:5e:78:96:b6:29:1c:4e:3d:93:2d:fd:e1:28:9c:a2:72:
         22:07:fb:00:cf:76:a1:71:f4:67:10:c3:12:f3:52:20:27:b0:
         77:95:9f:29:8f:a2:32:92:1e:a4:cb:ea:04:67:ed:ae:26:97:
         19:85:93:46:dc:29:a1:f3:dc:52:b1:64:36:a7:c2:3e:85:14:
         dd:99:46:e2:13:b3:56:36:42:35:05:ec:08:44:8a:73:c3:b5:
         d6:bb:51:a6:03:3d:f7:a6:e2:47:27:ca:b2:03:70:fc:78:de:
         25:17:45:38:52:62:19:53:69:44:4a:38:a6:0e:ae:2a:0b:2e:
         0c:81:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:04:03 2026 by rpki-client