Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa
File:                     34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa (raw, json)
Hash identifier:          i1q+5D2t0u5TDxDY9g89q8mjwVgzoNbNdxuuRtsE81s=
Subject key identifier:   0D:D1:EA:3B:56:0A:1E:00:30:CE:0A:67:44:F7:47:25:A2:90:58:FF
Certificate issuer:       /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial:       230DFA30C06B8A95DAC28D39A5DE9E7375801CF5
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa
Signing time:             Wed 03 Jun 2026 09:28:24 +0000
ROA not before:           Wed 03 Jun 2026 09:23:24 +0000
ROA not after:            Wed 02 Jun 2027 09:28:24 +0000
asID:                     134763
IP address blocks:        42.157.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 13:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0d:fa:30:c0:6b:8a:95:da:c2:8d:39:a5:de:9e:73:75:80:1c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
        Validity
            Not Before: Jun  3 09:23:24 2026 GMT
            Not After : Jun  2 09:28:24 2027 GMT
        Subject: CN=0DD1EA3B560A1E0030CE0A6744F74725A29058FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:12:bc:f5:9a:57:6c:ca:72:1f:c6:b5:ee:
                    1f:78:bb:ab:12:80:eb:36:a0:36:54:ad:58:b7:47:
                    4d:1a:ac:04:aa:37:b5:b9:7b:f8:ae:7b:1b:f9:09:
                    39:7c:15:a1:21:d4:1d:77:19:06:9f:99:e8:74:06:
                    db:78:ca:ca:b7:d4:ad:e7:c5:d2:4c:84:74:14:34:
                    41:d5:f8:a8:70:2f:77:3e:12:d2:e2:7a:bd:8b:ac:
                    38:29:6d:bf:c5:b3:cb:1a:0d:7d:b5:5e:3e:a7:72:
                    dc:c8:89:19:40:92:d6:0e:49:ea:0e:e9:ea:86:d1:
                    ee:c9:b3:ab:d8:99:1d:1f:8e:3b:74:37:1d:3e:9f:
                    7d:a1:cd:1f:04:03:84:7f:13:ff:c3:c0:16:53:39:
                    54:3c:94:79:9c:73:63:81:93:cd:83:d9:0d:1e:f3:
                    21:d2:dc:1a:60:fe:83:ac:d4:df:4d:c6:67:c8:59:
                    16:20:72:09:0d:80:3e:bd:76:5e:fb:35:3b:56:72:
                    d0:2d:cf:c8:26:b5:37:a7:c1:23:96:c0:08:74:ed:
                    5a:5c:12:bd:92:e2:9d:78:81:e4:f0:41:f4:b0:9a:
                    21:44:dd:55:97:a5:23:a2:20:db:1f:44:50:d0:be:
                    6a:0c:a6:58:d7:c7:7a:31:f3:87:ab:e7:56:6d:f9:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D1:EA:3B:56:0A:1E:00:30:CE:0A:67:44:F7:47:25:A2:90:58:FF
            X509v3 Authority Key Identifier:
                keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139352e302f32342d3234203d3e20313334373633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.157.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:ef:9f:d6:f4:ff:0a:b3:23:86:8a:b5:d3:39:2a:fe:6b:fd:
         fe:75:04:c2:88:de:03:5e:c4:6a:b8:59:df:bc:6b:1e:27:ab:
         99:25:71:af:c5:ed:2f:de:0e:bc:c4:1a:ce:78:31:29:e9:bb:
         7f:1d:3c:f9:f4:01:ec:09:cc:07:7d:bb:d3:89:01:c4:71:23:
         0e:3e:47:0d:7c:dd:f2:86:e9:69:23:f2:8f:5f:3a:12:1d:96:
         ea:15:d6:91:8a:64:95:4d:be:27:ba:97:65:81:d5:28:db:f9:
         8e:f1:55:84:cf:b4:f8:49:f3:a7:4a:f1:4e:88:f4:59:66:0d:
         3a:23:05:1f:a9:4c:5b:17:b1:98:d5:2d:98:d8:26:6d:c3:00:
         fd:e0:4f:4f:ae:a2:4e:ba:9d:ce:86:b2:97:ed:96:62:68:d7:
         83:d8:99:f3:c2:9b:1a:a8:b3:d3:63:27:71:fe:15:50:71:e6:
         bf:1a:88:3a:04:52:13:07:bc:00:23:87:d6:45:14:37:a1:40:
         88:1b:05:5c:5e:ef:dc:9e:0e:fc:1d:2c:69:42:c7:39:3f:13:
         b1:a1:98:e7:f1:90:cd:97:70:48:e8:a9:b3:33:40:ab:ff:6c:
         d1:2b:f7:f5:4a:d7:b3:69:d7:ca:28:05:90:cc:b5:46:f7:7c:
         94:b7:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:23 2026 by rpki-client