Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa
File:                     34332e3232362e3233392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier:          xRq8BhZXlOdI58k137j6T8nL9u1mFcp0rNkuGPGOBN0=
Subject key identifier:   1F:65:0F:FA:32:D8:43:85:C1:14:7B:F6:10:79:EB:91:EA:CE:4C:0B
Certificate issuer:       /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial:       2865A85FF04A2E42AA51BAA9D876E34C04AE0104
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa
Signing time:             Thu 04 Jun 2026 08:59:56 +0000
ROA not before:           Thu 04 Jun 2026 08:54:56 +0000
ROA not after:            Thu 03 Jun 2027 08:59:56 +0000
asID:                     4847
IP address blocks:        43.226.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:65:a8:5f:f0:4a:2e:42:aa:51:ba:a9:d8:76:e3:4c:04:ae:01:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
        Validity
            Not Before: Jun  4 08:54:56 2026 GMT
            Not After : Jun  3 08:59:56 2027 GMT
        Subject: CN=1F650FFA32D84385C1147BF61079EB91EACE4C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:23:35:34:24:fc:8f:41:97:e8:98:f3:10:
                    a5:eb:63:aa:17:b2:0a:d6:88:12:3f:8c:a9:07:e1:
                    2e:3d:2f:4d:75:5a:89:0a:2b:7b:09:90:33:60:03:
                    06:de:fe:54:b2:40:c4:5c:0f:64:ac:9c:1f:89:53:
                    98:c0:3b:54:26:de:99:6c:a1:e3:33:fb:e0:c7:2f:
                    2a:b9:91:de:ee:84:71:6e:48:ba:c8:f7:8b:c7:45:
                    10:57:46:d4:d0:aa:62:d9:67:ee:c1:46:fc:eb:09:
                    89:15:7c:0b:63:e3:7a:80:ef:26:bc:f5:b9:47:5e:
                    ba:d7:88:19:84:ef:44:84:1d:1c:67:7d:5f:9a:6b:
                    60:e9:04:4c:59:3d:41:c6:71:29:f1:e1:fe:f0:c9:
                    dd:ae:e2:c8:1b:f2:b6:81:f1:df:f2:c3:85:ea:ab:
                    5d:25:b4:52:5c:a5:2f:62:4f:a0:ed:de:98:a7:61:
                    bf:81:38:ca:54:19:4e:4c:b4:23:57:79:86:6b:0b:
                    eb:a0:f2:26:f8:ef:43:f1:8f:ee:30:b3:49:c9:87:
                    28:c7:15:9d:a2:61:ca:27:cf:43:86:d9:00:2b:04:
                    df:86:51:e3:d5:62:38:e2:1f:f4:65:ba:9b:c5:83:
                    a0:69:33:05:36:16:e5:e6:e7:ee:6a:48:a3:21:ad:
                    de:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:0F:FA:32:D8:43:85:C1:14:7B:F6:10:79:EB:91:EA:CE:4C:0B
            X509v3 Authority Key Identifier:
                keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.226.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:1e:41:b2:cd:19:77:e3:9a:b5:38:ed:a2:6f:62:21:22:e6:
         6f:9f:1f:41:7a:9d:5a:b0:6d:42:97:39:94:69:e3:7c:11:e0:
         88:a4:ea:7f:7c:74:c4:04:d7:73:64:8b:b8:e6:47:11:3d:68:
         26:6f:17:80:af:f4:f7:43:36:2d:54:6a:b4:41:66:a9:d4:04:
         dd:9d:4f:f4:00:4f:6c:72:40:e1:b0:23:87:b8:73:83:81:3e:
         55:24:cc:f4:0e:a9:14:0f:e5:9f:c9:0f:00:69:fa:7d:de:95:
         73:09:49:6d:e4:24:3b:94:70:4e:1a:e9:b8:56:70:9d:cc:e2:
         70:9e:05:5f:5d:e9:b2:18:73:28:7f:37:4f:ed:58:37:e6:b7:
         3d:7b:e5:69:20:d0:01:7f:ad:71:d5:8c:e6:ed:7a:8f:99:33:
         46:30:54:8e:ab:7b:00:1f:8b:22:be:c8:e7:70:a2:86:5f:f3:
         fe:ee:e3:f1:74:fc:27:85:db:0c:1a:8b:c1:62:6b:b9:91:40:
         b4:78:bc:33:73:39:61:f8:d0:6c:e1:73:c7:df:fe:f4:f2:72:
         76:a1:1d:46:2d:25:f5:51:99:28:d8:5a:28:01:2f:a4:9d:53:
         8e:4c:e0:b7:9a:6e:a9:f8:d7:4e:b3:d8:a1:95:b4:b0:b6:ea:
         84:53:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:13 2026 by rpki-client