Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa
File:                     34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          vv5DnTXSct/X82dPIFMmb0IfNMNthjr3xyAnAL4dTtg=
Subject key identifier:   D2:46:6E:29:C6:68:B1:46:AD:47:B9:D8:79:1E:BC:1B:0D:CA:9F:9D
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       421CBAC13C47896E6493ADD323ABAC9EAA588AE8
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:28:24 +0000
ROA not before:           Wed 03 Jun 2026 09:23:24 +0000
ROA not after:            Wed 02 Jun 2027 09:28:24 +0000
asID:                     134763
IP address blocks:        42.157.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1c:ba:c1:3c:47:89:6e:64:93:ad:d3:23:ab:ac:9e:aa:58:8a:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:23:24 2026 GMT
            Not After : Jun  2 09:28:24 2027 GMT
        Subject: CN=D2466E29C668B146AD47B9D8791EBC1B0DCA9F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:f4:77:6f:bd:e8:d9:57:12:fc:1d:a7:15:
                    40:7d:5e:d9:5c:83:40:12:c9:5b:73:60:2a:b8:70:
                    13:70:cf:a5:85:c6:9e:cf:22:6a:b3:7b:48:c0:40:
                    93:b8:20:a8:d3:1b:41:50:fd:e2:d9:27:35:e5:9a:
                    2d:ae:b9:8a:44:d3:8a:3a:47:5f:7e:5e:0e:5e:74:
                    b5:8c:6c:fa:af:6c:0a:b6:11:7c:83:3b:6f:6f:72:
                    32:18:c0:01:ed:23:a5:5f:05:0b:8f:60:17:a5:a8:
                    de:82:82:70:78:cc:39:69:11:f6:8b:8d:6f:20:6e:
                    35:45:2d:53:ea:e4:e1:04:41:43:ad:5d:80:fd:87:
                    b5:f8:67:74:87:c4:cd:b1:a2:70:be:05:e9:c7:ba:
                    f8:b7:59:bc:6f:71:00:e5:87:e1:20:cd:72:af:82:
                    51:41:18:5a:58:4b:dd:69:2c:89:19:bf:47:a9:2a:
                    f4:98:43:6e:4e:fe:57:6b:64:80:c8:05:ea:2d:49:
                    ad:ae:61:3b:c9:f9:a2:a7:93:1b:8c:af:d3:0a:6f:
                    4e:06:4f:02:33:7f:63:ef:be:21:23:1d:79:a6:13:
                    86:e5:7e:b0:6a:1f:cb:ae:31:8a:73:7a:cb:44:3f:
                    36:e2:3b:19:c4:3c:40:1f:c4:5f:59:ca:76:f5:12:
                    b2:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:46:6E:29:C6:68:B1:46:AD:47:B9:D8:79:1E:BC:1B:0D:CA:9F:9D
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.157.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:2d:9a:f0:67:85:f7:b7:62:92:90:b6:1b:08:19:c4:9e:c4:
         d8:96:38:bc:40:c4:26:4c:cb:47:15:81:92:7d:2b:da:0a:d4:
         c8:4c:25:d0:ee:a1:01:72:9c:50:e6:39:2a:e4:df:09:5f:c6:
         be:50:df:d8:11:e4:d3:8a:93:87:cb:65:17:b9:4d:92:72:9f:
         a8:7b:6a:43:02:b6:87:88:4b:dc:d6:7b:b3:ac:ee:c1:5d:16:
         2d:c8:2e:ad:f6:8c:12:0f:4d:26:1f:e1:2b:61:a0:21:d9:0f:
         dc:f9:49:c6:5c:a9:15:11:56:2d:f3:c4:80:0f:fb:2a:2d:9e:
         f4:fa:c1:72:2e:c7:ad:a6:3d:41:f7:26:f5:7b:0b:43:04:68:
         05:de:e4:83:96:ad:87:f5:02:35:8a:0a:3b:18:65:62:17:a2:
         99:b9:9a:d2:73:40:11:7b:6b:3c:5d:59:b1:19:32:66:83:ef:
         f7:4a:f9:b7:10:fe:94:5f:7a:6c:a0:12:2e:0e:19:df:d3:62:
         1f:7c:ce:d0:9c:be:74:b0:69:b3:38:9e:2f:20:9e:6f:b1:e6:
         00:bd:f0:0b:ae:51:44:73:c8:3c:2f:3a:04:38:5d:53:7e:67:
         d2:14:e3:a9:72:ec:a0:cc:8f:9f:05:ad:9a:3b:0c:99:4d:c4:
         bf:e6:a0:fb
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUQhy6wTxHiW5kk63TI6usnqpYiugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5
NUJFMDBBQTAeFw0yNjA2MDMwOTIzMjRaFw0yNzA2MDIwOTI4MjRaMDMxMTAvBgNV
BAMTKEQyNDY2RTI5QzY2OEIxNDZBRDQ3QjlEODc5MUVCQzFCMERDQTlGOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ufR3b73o2VcS/B2nFUB9Xtlc
g0ASyVtzYCq4cBNwz6WFxp7PImqze0jAQJO4IKjTG0FQ/eLZJzXlmi2uuYpE04o6
R19+Xg5edLWMbPqvbAq2EXyDO29vcjIYwAHtI6VfBQuPYBelqN6CgnB4zDlpEfaL
jW8gbjVFLVPq5OEEQUOtXYD9h7X4Z3SHxM2xonC+BenHuvi3WbxvcQDlh+EgzXKv
glFBGFpYS91pLIkZv0epKvSYQ25O/ldrZIDIBeotSa2uYTvJ+aKnkxuMr9MKb04G
TwIzf2PvviEjHXmmE4blfrBqH8uuMYpzestEPzbiOxnEPEAfxF9Zynb1ErL9AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU0kZuKcZosUatR7nYeR68Gw3Kn50wHwYDVR0j
BBgwFoAUU4FOLN+VzJdH2R47WgFHhpW+AKowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MTkwOTMzNDMxNDM4NTQyNy8wLzUzODE0RTJDREY5NUNDOTc0N0Q5MUUzQjVBMDE0
Nzg2OTVCRTAwQUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTM4MTRFMkNERjk1Q0M5NzQ3RDkxRTNCNUEwMTQ3ODY5NUJFMDBBQS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTE5MDkzMzQzMTQzODU0MjcvMC8zNDMyMmUzMTM1
MzcyZTMxMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEACqdwDANBgkqhkiG9w0BAQsFAAOCAQEAjC2a8GeF97dikpC2GwgZ
xJ7E2JY4vEDEJkzLRxWBkn0r2grUyEwl0O6hAXKcUOY5KuTfCV/GvlDf2BHk04qT
h8tlF7lNknKfqHtqQwK2h4hL3NZ7s6zuwV0WLcgurfaMEg9NJh/hK2GgIdkP3PlJ
xlypFRFWLfPEgA/7Ki2e9PrBci7HraY9Qfcm9XsLQwRoBd7kg5ath/UCNYoKOxhl
Yheimbma0nNAEXtrPF1ZsRkyZoPv90r5txD+lF96bKASLg4Z39NiH3zO0Jy+dLBp
szieLyCeb7HmAL3wC65RRHPIPC86BDhdU35n0hTjqXLsoMyPnwWtmjsMmU3Ev+ag
+w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:09 2026 by rpki-client