Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/34332e3235342e3131362e302f32322d3232203d3e2034383038.roa
File:                     34332e3235342e3131362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier:          gh0nwz9lFX8bKaeuuL00MSlMPOQF1V4ammZHJbBbr9Q=
Subject key identifier:   6A:19:44:3C:9A:82:E4:F0:6E:84:BD:EB:52:78:D0:F6:D9:22:71:9F
Certificate issuer:       /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial:       2DBA7FAEB6E35D88D62CC3C2578137D8E22FB518
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/34332e3235342e3131362e302f32322d3232203d3e2034383038.roa
Signing time:             Mon 08 Jun 2026 10:23:40 +0000
ROA not before:           Mon 08 Jun 2026 10:18:40 +0000
ROA not after:            Mon 07 Jun 2027 10:23:40 +0000
asID:                     4808
IP address blocks:        43.254.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ba:7f:ae:b6:e3:5d:88:d6:2c:c3:c2:57:81:37:d8:e2:2f:b5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
        Validity
            Not Before: Jun  8 10:18:40 2026 GMT
            Not After : Jun  7 10:23:40 2027 GMT
        Subject: CN=6A19443C9A82E4F06E84BDEB5278D0F6D922719F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:a8:12:39:fc:03:c6:8d:79:05:60:bc:29:
                    c6:b4:8f:c1:1d:fb:be:bd:45:95:d6:e0:be:a3:47:
                    ca:ad:0f:d5:d1:72:53:c5:54:92:3a:c7:42:e1:91:
                    b2:c9:17:3a:c9:84:53:f5:03:9d:ac:f1:15:4a:b1:
                    0f:3c:9d:3f:5f:7a:0f:09:a5:0a:75:d0:c9:45:89:
                    84:82:de:8b:06:f9:6a:e8:3e:4e:db:cd:2a:d1:37:
                    a0:09:de:4b:05:ac:49:d9:ff:59:e4:f5:65:f6:fc:
                    79:f6:eb:b7:8f:de:8e:06:29:77:4f:ba:dd:43:78:
                    01:cf:32:e1:40:8f:62:c3:68:d0:19:a3:ca:b8:79:
                    8d:85:85:50:8e:25:f3:24:e7:7c:b7:52:2b:82:25:
                    d5:ac:cb:1f:ca:d5:bd:c1:cf:c5:5b:8c:47:1c:5e:
                    d2:8b:09:09:1b:78:9b:b0:da:7d:a7:79:26:23:a4:
                    7a:f6:72:3c:e7:0f:0a:1e:a1:a4:69:bb:51:11:b3:
                    25:dc:92:0b:5c:f5:87:87:e4:21:cf:60:c7:80:58:
                    ef:90:cf:69:58:3a:c2:84:cb:90:72:ed:1b:4b:ca:
                    55:08:96:42:b8:0b:61:21:42:9d:04:ed:e2:a0:17:
                    dd:c6:69:a8:9f:63:f9:16:65:39:f3:59:f2:0a:9e:
                    07:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:19:44:3C:9A:82:E4:F0:6E:84:BD:EB:52:78:D0:F6:D9:22:71:9F
            X509v3 Authority Key Identifier:
                keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/34332e3235342e3131362e302f32322d3232203d3e2034383038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.254.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:c5:09:79:62:0c:24:07:92:ba:bd:bd:83:20:c2:e4:ff:69:
         5e:de:01:93:6a:4b:57:8d:44:4f:8a:14:3a:1e:1a:0f:06:88:
         8a:66:f9:cf:6a:57:f3:c8:06:a0:b8:36:8b:5d:ec:40:2b:10:
         1b:e1:bc:df:8a:b6:7a:0a:12:14:c1:20:69:28:f0:62:cf:79:
         d0:4a:8d:07:a2:2f:36:18:80:95:a0:0d:e7:6f:b2:50:4e:69:
         6b:a2:50:1d:2e:bd:71:2a:5b:9c:74:7d:55:88:f5:b4:e6:9d:
         ea:4d:26:dc:e4:c3:74:de:5a:c3:47:ed:23:f7:1e:dc:7f:0b:
         df:53:fc:25:11:8d:12:cf:aa:69:20:71:20:43:93:f5:a1:ce:
         17:fd:85:45:1f:79:52:f0:d9:8e:9c:88:6a:9a:99:ce:64:13:
         61:9a:eb:67:83:8e:68:21:2c:a3:1c:cd:73:95:b3:7b:73:ee:
         58:db:4d:37:ed:8e:5a:6a:74:0c:b6:65:d1:5a:a5:94:1a:31:
         19:02:d9:21:4f:8f:9a:a6:90:e4:55:31:31:d5:c5:a6:7d:95:
         82:cc:6c:c2:fb:0d:f5:92:5a:a8:00:63:ff:d0:d4:5a:02:0c:
         ff:4b:27:bb:28:5c:08:a5:1d:03:dd:da:f6:2e:44:10:a2:63:
         42:d9:55:94
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIULbp/rrbjXYjWLMPCV4E32OIvtRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MDgxMDE4NDBaFw0yNzA2MDcxMDIzNDBaMDMxMTAvBgNV
BAMTKDZBMTk0NDNDOUE4MkU0RjA2RTg0QkRFQjUyNzhEMEY2RDkyMjcxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2qgSOfwDxo15BWC8Kca0j8Ed
+769RZXW4L6jR8qtD9XRclPFVJI6x0LhkbLJFzrJhFP1A52s8RVKsQ88nT9feg8J
pQp10MlFiYSC3osG+WroPk7bzSrRN6AJ3ksFrEnZ/1nk9WX2/Hn267eP3o4GKXdP
ut1DeAHPMuFAj2LDaNAZo8q4eY2FhVCOJfMk53y3UiuCJdWsyx/K1b3Bz8VbjEcc
XtKLCQkbeJuw2n2neSYjpHr2cjznDwoeoaRpu1ERsyXckgtc9YeH5CHPYMeAWO+Q
z2lYOsKEy5By7RtLylUIlkK4C2EhQp0E7eKgF93GaaifY/kWZTnzWfIKngdbAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUahlEPJqC5PBuhL3rUnjQ9tkicZ8wHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzQzMzJlMzIzNTM0
MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv+dDANBgkqhkiG9w0BAQsFAAOCAQEABMUJeWIMJAeSur29gyDC5P9pXt4B
k2pLV41ET4oUOh4aDwaIimb5z2pX88gGoLg2i13sQCsQG+G834q2egoSFMEgaSjw
Ys950EqNB6IvNhiAlaAN52+yUE5pa6JQHS69cSpbnHR9VYj1tOad6k0m3OTDdN5a
w0ftI/ce3H8L31P8JRGNEs+qaSBxIEOT9aHOF/2FRR95UvDZjpyIapqZzmQTYZrr
Z4OOaCEsoxzNc5Wze3PuWNtNN+2OWmp0DLZl0VqllBoxGQLZIU+PmqaQ5FUxMdXF
pn2VgsxswvsN9ZJaqABj/9DUWgIM/0snuyhcCKUdA93a9i5EEKJjQtlVlA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:46 2026 by rpki-client