Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e2034383337.roa
File:                     34332e3234312e3138302e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier:          tDCp9abRn1W9GiACRylGVjH9PwGWiLRCtm878rkv510=
Subject key identifier:   EC:0C:95:7C:C6:65:29:8C:00:9F:9C:33:B2:37:A9:FD:0C:CC:39:CA
Certificate issuer:       /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial:       7ECC6784005C5C8D4AE81D3EF2D53466B2D82965
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e2034383337.roa
Signing time:             Thu 04 Jun 2026 08:53:55 +0000
ROA not before:           Thu 04 Jun 2026 08:48:55 +0000
ROA not after:            Thu 03 Jun 2027 08:53:55 +0000
asID:                     4837
IP address blocks:        43.241.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 02:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cc:67:84:00:5c:5c:8d:4a:e8:1d:3e:f2:d5:34:66:b2:d8:29:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
        Validity
            Not Before: Jun  4 08:48:55 2026 GMT
            Not After : Jun  3 08:53:55 2027 GMT
        Subject: CN=EC0C957CC665298C009F9C33B237A9FD0CCC39CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:91:3e:81:3e:c3:0e:75:1a:9f:43:44:1a:
                    ee:97:22:58:ce:e8:a4:2a:5e:d3:08:7d:e2:8c:7b:
                    d7:9f:9f:0a:4b:62:b1:b0:7f:4e:0e:67:36:18:e9:
                    56:ad:57:88:86:46:db:2a:92:a2:7c:df:8c:8a:1c:
                    88:10:e2:2b:7a:f9:49:37:21:af:c8:01:48:46:b0:
                    b6:e9:75:b9:43:a1:62:a5:9a:28:c0:ac:0d:c8:6f:
                    4b:4d:23:92:3d:45:1f:83:ab:5c:12:ff:0d:10:af:
                    6e:2d:cd:6e:4c:2b:80:76:56:47:9e:38:31:ba:62:
                    34:9c:95:db:c1:50:a6:22:d7:1a:91:74:08:ab:c4:
                    7c:73:d0:1e:6e:cd:44:dd:f9:ca:b5:72:5f:b1:6f:
                    90:07:f4:8c:db:c8:59:c3:6c:68:c3:f1:97:92:d5:
                    65:11:4d:3a:17:de:55:9f:8f:1d:2b:55:b4:7f:9f:
                    fc:ed:0f:f1:b2:fd:27:1c:ed:ed:e2:22:41:61:fc:
                    b0:67:12:3c:7f:6f:e9:18:2b:5a:8a:52:a6:1b:b5:
                    99:df:ab:82:76:f7:e7:3b:cd:1b:9a:f7:3a:d4:59:
                    02:d4:43:52:16:26:2a:9a:89:a8:32:4a:fa:10:78:
                    d3:38:df:8e:69:e9:91:6f:47:e1:0e:c7:ae:76:e9:
                    57:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:95:7C:C6:65:29:8C:00:9F:9C:33:B2:37:A9:FD:0C:CC:39:CA
            X509v3 Authority Key Identifier:
                keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.241.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:fb:75:b7:92:ee:d1:31:c0:ac:9c:e7:46:27:23:07:2f:
         e7:d4:7e:fc:8e:bd:57:46:e3:19:e2:36:bf:9f:f6:d0:e3:e0:
         e3:d9:f2:7e:cd:3b:47:c1:de:71:3c:d5:65:24:66:59:e1:bf:
         10:b8:3a:7b:67:ab:c2:0f:5a:d8:4f:31:ec:d6:1d:ad:5f:80:
         5d:85:a2:9a:19:94:07:6e:44:39:42:1f:34:4d:e0:51:74:78:
         45:24:99:91:a0:c9:65:95:97:c1:c6:68:78:03:08:10:bd:be:
         9a:1a:c1:f3:c3:e1:b2:d9:b2:db:39:25:9b:1c:af:7b:8d:07:
         b2:ef:04:76:a3:31:25:c4:a8:c8:2c:41:76:4d:2a:32:32:0e:
         b5:80:dc:06:c9:ca:09:fc:80:bf:13:30:83:24:3d:19:14:e3:
         38:83:0e:5b:63:fc:5f:4c:09:8d:ec:5c:31:37:f7:28:68:dc:
         6b:8c:65:0f:ff:32:de:71:72:3b:6b:fc:bd:5d:e1:51:7d:2f:
         20:55:00:c4:0b:7d:29:4e:8d:47:97:31:9a:f9:60:d5:7d:68:
         27:0b:f0:fc:93:78:a5:47:e8:b6:fa:b3:66:73:de:0e:7f:8d:
         bb:14:e1:ea:91:9c:ec:5f:d5:96:4d:cd:da:b8:2b:44:5b:fd:
         30:d9:47:6f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUfsxnhABcXI1K6B0+8tU0ZrLYKWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz
QjEwNUNEODAeFw0yNjA2MDQwODQ4NTVaFw0yNzA2MDMwODUzNTVaMDMxMTAvBgNV
BAMTKEVDMEM5NTdDQzY2NTI5OEMwMDlGOUMzM0IyMzdBOUZEMENDQzM5Q0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAU5E+gT7DDnUan0NEGu6XIljO
6KQqXtMIfeKMe9efnwpLYrGwf04OZzYY6VatV4iGRtsqkqJ834yKHIgQ4it6+Uk3
Ia/IAUhGsLbpdblDoWKlmijArA3Ib0tNI5I9RR+Dq1wS/w0Qr24tzW5MK4B2Vkee
ODG6YjScldvBUKYi1xqRdAirxHxz0B5uzUTd+cq1cl+xb5AH9IzbyFnDbGjD8ZeS
1WURTToX3lWfjx0rVbR/n/ztD/Gy/Scc7e3iIkFh/LBnEjx/b+kYK1qKUqYbtZnf
q4J29+c7zRua9zrUWQLUQ1IWJiqaiagySvoQeNM4345p6ZFvR+EOx6526VcJAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU7AyVfMZlKYwAn5wzsjep/QzMOcowHwYDVR0j
BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG
RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk5OTc4NTE1MzI0ODYyNDY3LzAvMzQzMzJlMzIzNDMx
MmUzMTM4MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAivxtDANBgkqhkiG9w0BAQsFAAOCAQEAhrf7dbeS7tExwKyc50YnIwcv59R+
/I69V0bjGeI2v5/20OPg49nyfs07R8HecTzVZSRmWeG/ELg6e2erwg9a2E8x7NYd
rV+AXYWimhmUB25EOUIfNE3gUXR4RSSZkaDJZZWXwcZoeAMIEL2+mhrB88Phstmy
2zklmxyve40Hsu8EdqMxJcSoyCxBdk0qMjIOtYDcBsnKCfyAvxMwgyQ9GRTjOIMO
W2P8X0wJjexcMTf3KGjca4xlD/8y3nFyO2v8vV3hUX0vIFUAxAt9KU6NR5cxmvlg
1X1oJwvw/JN4pUfotvqzZnPeDn+NuxTh6pGc7F/Vlk3N2rgrRFv9MNlHbw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:52 2026 by rpki-client