Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa
File:                     34332e3234312e3138302e302f32322d3232203d3e203538353432.roa (raw, json)
Hash identifier:          Rn7Hf2921Dc5UYgYrqbetrAyxHkG4VSopTyreGn+WM0=
Subject key identifier:   9E:2E:39:01:5C:72:95:C1:78:71:72:57:11:C3:CE:FB:88:07:47:0B
Certificate issuer:       /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial:       13E99C8316055C6BA2E5124715EFC9E3E096BF17
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa
Signing time:             Tue 23 Jun 2026 07:37:25 +0000
ROA not before:           Tue 23 Jun 2026 07:32:25 +0000
ROA not after:            Tue 22 Jun 2027 07:37:25 +0000
asID:                     58542
IP address blocks:        43.241.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 06:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e9:9c:83:16:05:5c:6b:a2:e5:12:47:15:ef:c9:e3:e0:96:bf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
        Validity
            Not Before: Jun 23 07:32:25 2026 GMT
            Not After : Jun 22 07:37:25 2027 GMT
        Subject: CN=9E2E39015C7295C17871725711C3CEFB8807470B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bd:98:b1:b4:a8:e2:30:75:b5:d4:67:0b:a0:
                    4c:d4:ef:98:08:1e:bf:de:b4:10:bb:c5:12:14:3d:
                    c3:03:6c:0c:13:d3:4a:ad:be:f9:8d:39:cd:e8:bd:
                    66:df:0a:18:ef:32:6f:6d:b2:72:9f:a1:cd:97:30:
                    2d:5b:de:26:85:89:af:26:86:15:b2:4f:3e:a4:82:
                    fe:43:95:44:72:da:8f:73:e6:08:bf:b6:ed:8c:de:
                    4e:10:dd:fa:32:94:46:c4:a5:8a:94:6b:c3:23:0a:
                    3b:a9:36:d6:38:d1:7d:13:7b:f4:d7:9d:4c:9a:c2:
                    ab:58:20:8a:97:8e:c3:7d:2d:21:5e:4c:dd:ee:3b:
                    90:5f:d0:52:82:64:7a:0c:6e:1b:f3:ad:c2:68:c1:
                    5d:80:9d:cb:9e:68:26:b6:a9:b7:0f:ac:e6:49:aa:
                    50:7e:0e:a7:47:a6:33:86:fc:a3:18:96:30:d6:7d:
                    05:48:6e:43:d0:1b:fb:1e:8a:32:aa:42:d8:33:f3:
                    25:06:3f:39:bd:22:bb:d3:bc:03:ba:08:59:d3:3a:
                    67:4d:7f:29:20:9f:fd:76:32:25:6a:34:90:ae:12:
                    f1:67:26:ac:bd:3c:4b:40:5f:02:32:c2:da:ec:d9:
                    5f:5f:cf:da:f2:7e:d0:6a:a2:90:c9:34:46:5e:29:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2E:39:01:5C:72:95:C1:78:71:72:57:11:C3:CE:FB:88:07:47:0B
            X509v3 Authority Key Identifier:
                keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.241.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:b5:50:02:b4:0f:6d:97:a3:1a:b8:41:aa:f8:dc:a8:ff:b6:
         6d:bc:50:76:25:ba:f2:79:e6:e1:5b:a5:77:91:7e:f3:b1:b5:
         0f:ad:ba:09:09:79:54:1b:1f:92:43:ca:07:65:9f:56:90:eb:
         ed:23:c3:fe:f3:40:6b:10:44:f8:26:9d:ca:0a:11:7c:07:67:
         2e:bb:5b:bc:78:60:79:86:15:a9:86:07:1a:7a:c2:c9:79:ad:
         d8:fc:cb:aa:34:94:4a:65:69:f8:86:fe:94:50:5a:d7:0b:2e:
         79:cb:77:40:a2:89:de:f7:72:ea:fb:9a:9a:92:be:9d:69:6e:
         3d:8f:a3:a6:79:a1:e3:e3:c9:ac:fd:77:64:a2:f8:59:19:36:
         04:27:90:a3:5a:a0:a4:59:d5:15:d1:6a:1f:92:5d:61:0c:34:
         74:4c:6f:7b:0a:cc:c3:90:0f:08:dd:07:56:91:97:81:77:bb:
         ab:c5:23:07:77:ae:a6:29:0a:aa:38:7a:0c:0b:2d:b7:e9:d6:
         36:b3:52:02:cd:de:87:60:45:37:d0:88:6e:cb:50:8f:d6:ee:
         1e:de:1f:64:7e:e2:4d:71:49:c0:12:81:5b:3c:7a:34:9f:b3:
         83:30:71:68:a0:58:b4:02:a9:6c:cc:eb:8a:6f:c9:ae:1b:4c:
         78:f9:d9:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:50 2026 by rpki-client