Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e203539303732.roa
File:                     34332e3234372e36382e302f32322d3232203d3e203539303732.roa (raw, json)
Hash identifier:          HFam681MVql7io9x8AgabYOuz1bqi/F3PX9muXtUEIY=
Subject key identifier:   0E:82:A7:F3:54:03:E7:2B:53:BF:CD:3B:22:47:88:C7:33:50:4F:0A
Certificate issuer:       /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
Certificate serial:       725365FE20FE162BEA5236AFA416199802DDFFD5
Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e203539303732.roa
Signing time:             Wed 22 Apr 2026 06:18:52 +0000
ROA not before:           Wed 22 Apr 2026 06:13:52 +0000
ROA not after:            Wed 21 Apr 2027 06:18:52 +0000
asID:                     59072
IP address blocks:        43.247.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 11:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:53:65:fe:20:fe:16:2b:ea:52:36:af:a4:16:19:98:02:dd:ff:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F
        Validity
            Not Before: Apr 22 06:13:52 2026 GMT
            Not After : Apr 21 06:18:52 2027 GMT
        Subject: CN=0E82A7F35403E72B53BFCD3B224788C733504F0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:58:ec:81:e3:46:ba:8e:d6:24:b0:1a:98:
                    10:56:53:f2:23:2f:62:e1:b4:48:15:cd:4b:9e:d4:
                    77:fd:1c:1f:35:3f:bd:dd:59:2b:09:3c:74:3d:00:
                    d6:29:9d:09:64:9c:f3:79:91:1a:35:d5:ed:c2:61:
                    31:16:d3:d5:3b:c3:c8:bd:f9:fe:69:69:fa:04:65:
                    24:d1:37:10:48:aa:04:fa:f0:b3:91:de:56:ae:90:
                    92:f2:d0:30:d5:9a:08:c6:1f:de:72:b9:85:e1:f8:
                    c5:3d:43:8b:5d:a6:68:d4:51:42:94:cf:87:77:45:
                    54:3a:c5:a0:95:f4:99:1b:1d:0a:39:f9:60:5e:b5:
                    a5:7d:dd:b3:ee:d3:99:d7:64:e0:7d:e9:2e:93:f7:
                    7b:33:b6:87:34:7f:9c:21:02:c8:f3:4f:72:57:47:
                    50:da:9b:8b:22:ee:40:2e:8a:a9:b7:e5:4f:ba:c6:
                    18:37:ac:3d:64:b7:35:c5:1a:d8:1a:a6:93:92:4b:
                    c2:f4:67:c9:0a:3c:a2:53:6b:86:53:c6:f9:be:c1:
                    27:80:b9:b9:9d:5b:5f:75:13:1e:fd:29:43:15:c2:
                    fc:61:5e:ef:b9:0d:73:a2:42:b9:b8:b8:c1:e6:a6:
                    a7:0b:df:3b:66:75:20:e9:d2:c6:62:0c:7e:5d:7f:
                    b8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:82:A7:F3:54:03:E7:2B:53:BF:CD:3B:22:47:88:C7:33:50:4F:0A
            X509v3 Authority Key Identifier:
                keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/34332e3234372e36382e302f32322d3232203d3e203539303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:14:67:8b:03:b8:4d:c1:0c:4a:c5:5f:53:6f:2d:18:a4:27:
         6b:15:69:44:d8:3e:54:51:aa:ef:ed:f3:12:c6:b4:a9:b6:4e:
         7a:5c:f9:7b:72:11:8b:d0:80:c2:e5:88:67:5b:27:7a:fa:a5:
         d6:8c:3b:85:8d:fa:1f:65:e4:19:79:7d:81:46:9c:04:00:fd:
         01:de:9d:47:1f:d5:70:fc:74:bc:86:b0:de:79:b7:52:0b:30:
         16:2c:bc:62:b9:88:9b:5c:4f:a6:02:1d:d0:db:5a:3c:d9:b6:
         56:7d:6e:cc:05:0c:fd:e1:51:85:21:55:c9:6e:b3:f4:ff:8b:
         42:a5:c1:71:e7:cc:5b:67:98:d6:5f:62:c5:b3:8e:f8:f5:1e:
         17:17:52:63:5a:70:f1:0e:9a:be:72:3a:63:04:5e:8b:5e:73:
         a4:90:d7:10:5c:8c:ae:f5:d6:bc:e1:12:35:cc:b5:a9:12:46:
         f0:bb:d9:bf:9b:48:f7:a9:c9:63:52:72:ac:2c:9f:f5:8f:e0:
         08:86:00:4d:83:10:84:13:88:5d:8e:0e:ee:f7:ba:e7:8a:12:
         32:7c:50:f3:7d:49:8e:7d:5d:5f:d8:95:9f:88:5b:38:de:da:
         1f:19:86:de:29:b1:a3:5d:25:e0:9a:d1:c0:68:c0:f3:b2:0d:
         31:ea:94:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:27:18 2026 by rpki-client