Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa
File:                     34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier:          /Aw2t/1v//jR49wqCyB9OMlsYgHW4FM74iHxyPt74bc=
Subject key identifier:   D3:40:0B:89:CF:07:36:E6:14:1C:E1:20:BE:65:EC:09:78:0C:4B:A7
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       1FD6EED35E13AA7B3AE07F1879A988A6B0A1CBC8
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa
Signing time:             Wed 27 May 2026 07:56:18 +0000
ROA not before:           Wed 27 May 2026 07:51:18 +0000
ROA not after:            Wed 26 May 2027 07:56:18 +0000
asID:                     134543
IP address blocks:        42.157.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d6:ee:d3:5e:13:aa:7b:3a:e0:7f:18:79:a9:88:a6:b0:a1:cb:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: May 27 07:51:18 2026 GMT
            Not After : May 26 07:56:18 2027 GMT
        Subject: CN=D3400B89CF0736E6141CE120BE65EC09780C4BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:60:43:a5:76:3f:ec:a9:49:83:af:70:d9:84:
                    76:7f:d3:74:09:01:cf:23:1a:f8:0b:cc:f5:02:6c:
                    80:03:02:fb:3a:4a:7f:8e:5a:15:9a:84:0b:4f:db:
                    0b:51:2d:1d:b0:c0:59:f1:4f:c2:83:1e:20:70:48:
                    53:c3:29:4c:62:b9:dc:67:b7:89:82:87:4d:08:d5:
                    65:8c:48:78:54:91:e4:a7:56:0a:d0:44:6b:88:04:
                    07:f4:86:d7:3a:d9:e7:f7:99:7c:b9:13:f4:44:fa:
                    9c:86:e0:f1:ef:78:13:0e:3e:73:bb:9e:97:ca:4b:
                    9f:62:d6:f5:49:f1:5f:2c:c0:bd:06:be:46:1a:6d:
                    42:6f:44:2d:c3:08:b5:76:31:f0:1c:fb:57:0e:9e:
                    f6:af:c3:9e:42:f4:11:6a:69:02:db:d2:e9:39:e9:
                    04:65:fb:45:8e:96:1c:68:34:3e:f7:dc:89:7f:d6:
                    73:a7:85:7c:e8:6c:17:f4:21:1a:3a:3f:5e:42:81:
                    0f:78:43:59:a4:5a:97:e5:cd:a8:00:b5:3e:51:21:
                    95:7a:80:5a:d4:ed:df:46:03:b2:18:90:40:78:f0:
                    7f:01:49:27:08:50:01:4a:14:55:72:1e:fe:5b:12:
                    0b:a8:92:f2:60:9d:17:5e:56:96:15:c0:a5:6f:f4:
                    1b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:0B:89:CF:07:36:E6:14:1C:E1:20:BE:65:EC:09:78:0C:4B:A7
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.157.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:63:65:73:4e:81:fb:46:7f:0e:35:5b:17:e4:26:1b:e9:78:
         ea:4d:20:56:40:67:73:99:92:0f:7f:d9:c2:8e:be:69:25:c4:
         2c:56:47:d3:e2:bb:39:86:9f:d3:0c:72:51:4d:0a:bd:21:d8:
         58:0f:af:11:2f:a4:26:13:d5:0c:11:92:38:80:8a:7a:a9:af:
         51:52:dd:f8:bc:11:c1:8a:92:b5:a0:ea:3f:74:08:5e:61:e6:
         e6:af:56:93:07:43:41:78:14:ac:a0:12:84:21:c0:47:c8:d1:
         b9:9f:00:d7:6e:7b:42:f3:23:d1:7a:b4:f3:77:29:18:da:e3:
         56:6e:67:b7:28:e1:4b:c7:6c:ae:84:41:8a:04:0a:b0:f7:7b:
         fd:77:82:68:45:f9:73:77:03:9e:92:21:8b:15:8a:e3:8f:59:
         06:b7:9d:d7:cd:43:d1:11:fc:d9:f6:6c:94:f8:0f:13:f7:73:
         4a:35:0d:11:d4:ff:e3:ec:a7:66:4b:ae:d1:66:ab:57:84:e2:
         90:fe:6f:5e:eb:89:a3:1f:1d:89:79:e6:b4:3d:64:46:81:a8:
         d7:35:da:aa:33:5e:02:93:7a:5d:18:a6:76:24:43:53:47:77:
         71:4e:97:f0:15:86:77:d4:6d:68:be:3b:ca:21:36:2a:11:18:
         a2:e2:2a:85
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUH9bu014Tqns64H8YeamIprChy8gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5
NUJFMDBBQTAeFw0yNjA1MjcwNzUxMThaFw0yNzA1MjYwNzU2MThaMDMxMTAvBgNV
BAMTKEQzNDAwQjg5Q0YwNzM2RTYxNDFDRTEyMEJFNjVFQzA5NzgwQzRCQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYEOldj/sqUmDr3DZhHZ/03QJ
Ac8jGvgLzPUCbIADAvs6Sn+OWhWahAtP2wtRLR2wwFnxT8KDHiBwSFPDKUxiudxn
t4mCh00I1WWMSHhUkeSnVgrQRGuIBAf0htc62ef3mXy5E/RE+pyG4PHveBMOPnO7
npfKS59i1vVJ8V8swL0GvkYabUJvRC3DCLV2MfAc+1cOnvavw55C9BFqaQLb0uk5
6QRl+0WOlhxoND733Il/1nOnhXzobBf0IRo6P15CgQ94Q1mkWpflzagAtT5RIZV6
gFrU7d9GA7IYkEB48H8BSScIUAFKFFVyHv5bEguokvJgnRdeVpYVwKVv9BuvAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU00ALic8HNuYUHOEgvmXsCXgMS6cwHwYDVR0j
BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0
Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1
MzcyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM1MzQzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEACqdwDANBgkqhkiG9w0BAQsFAAOCAQEABGNlc06B+0Z/DjVbF+Qm
G+l46k0gVkBnc5mSD3/Zwo6+aSXELFZH0+K7OYaf0wxyUU0KvSHYWA+vES+kJhPV
DBGSOICKeqmvUVLd+LwRwYqStaDqP3QIXmHm5q9WkwdDQXgUrKAShCHAR8jRuZ8A
1257QvMj0Xq083cpGNrjVm5ntyjhS8dsroRBigQKsPd7/XeCaEX5c3cDnpIhixWK
449ZBred181D0RH82fZslPgPE/dzSjUNEdT/4+ynZkuu0WarV4TikP5vXuuJox8d
iXnmtD1kRoGo1zXaqjNeApN6XRimdiRDU0d3cU6X8BWGd9RtaL47yiE2KhEYouIq
hQ==
-----END CERTIFICATE-----
Generated at Fri May 29 22:57:14 2026 by rpki-client