Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa
File:                     34332e3232342e34342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=
Subject key identifier:   FC:5C:51:07:69:CB:5C:DD:D9:84:6F:36:73:40:50:FC:C9:AB:65:CF
Certificate issuer:       /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial:       18E25CDE0D9A656A15D41C9BDA24505F6887FB8F
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa
Signing time:             Thu 04 Jun 2026 09:53:48 +0000
ROA not before:           Thu 04 Jun 2026 09:48:48 +0000
ROA not after:            Thu 03 Jun 2027 09:53:48 +0000
asID:                     0
IP address blocks:        43.224.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 22:52:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e2:5c:de:0d:9a:65:6a:15:d4:1c:9b:da:24:50:5f:68:87:fb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
        Validity
            Not Before: Jun  4 09:48:48 2026 GMT
            Not After : Jun  3 09:53:48 2027 GMT
        Subject: CN=FC5C510769CB5CDDD9846F36734050FCC9AB65CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:20:77:27:6a:6d:56:70:34:a0:99:3e:c8:
                    fc:a6:ed:63:d0:67:0c:69:a0:1b:d4:e6:22:8b:20:
                    c4:c6:e1:1b:b0:85:69:38:af:a2:12:ef:d2:63:8e:
                    4d:b2:99:b2:ed:a9:19:c1:c8:1f:c5:3c:a1:d1:24:
                    b0:74:0d:0f:51:18:da:52:e3:98:41:08:22:ab:44:
                    b5:52:0c:72:6a:ac:b7:3a:49:61:20:0f:b7:ea:ce:
                    50:32:80:95:46:e0:93:bf:c1:41:28:1f:cc:fe:82:
                    a9:d9:71:bd:04:0e:0e:44:29:1e:08:c7:89:6d:80:
                    61:ab:ed:16:32:f3:52:ea:96:92:c4:18:1e:c3:03:
                    05:d3:6b:7f:2f:94:70:23:05:b0:0c:be:61:eb:92:
                    62:7e:db:8a:8d:5c:dd:e5:11:21:67:24:07:ba:1a:
                    fb:d1:6e:73:65:76:f5:c7:8e:50:c6:dd:23:22:9a:
                    15:d4:45:08:42:44:09:2a:20:8f:32:fc:c0:2b:e1:
                    bb:c9:8f:5b:6c:be:fe:b7:c8:93:64:bb:f5:fb:a7:
                    59:4f:e2:cb:c9:6f:b1:60:c0:c4:22:11:30:b8:13:
                    1b:86:6f:8f:bd:a2:c1:3a:2a:a9:81:a4:ff:25:95:
                    18:75:6d:67:05:d5:38:4e:bd:25:a0:23:43:78:c4:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5C:51:07:69:CB:5C:DD:D9:84:6F:36:73:40:50:FC:C9:AB:65:CF
            X509v3 Authority Key Identifier:
                keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:9a:a1:6a:ea:83:b2:e3:b4:c6:75:61:e3:22:a7:c1:8a:
         aa:38:35:8c:6e:53:69:1f:ec:21:f7:09:c6:a7:9e:50:c6:42:
         3e:ca:ae:3d:db:5a:bd:09:f5:c5:c8:dd:bc:fd:fe:1d:35:8f:
         0c:dc:9d:b3:03:f0:64:a7:0d:2e:19:86:cb:97:77:c7:6d:83:
         5b:88:ea:3e:7d:04:c1:a7:6a:f1:a4:24:b2:b5:cf:17:53:77:
         f7:a0:28:5d:a2:b0:38:34:1d:1b:a6:89:ea:cb:4d:38:e7:50:
         c2:6f:0e:80:b7:ef:77:87:64:6a:17:62:7b:e8:31:21:66:38:
         d2:f8:de:e2:09:51:4b:3e:6b:99:79:00:c8:70:b5:f1:b0:4c:
         cd:2d:03:3e:00:74:1c:ab:21:6a:ca:88:05:14:3a:49:eb:e1:
         ff:3f:07:02:d6:af:fc:b8:a9:67:bb:16:11:6a:fc:52:bb:51:
         e6:73:d0:c3:3f:0d:46:95:b9:8f:44:12:c5:18:61:74:d9:6d:
         9d:0c:76:a5:23:7f:78:ca:2c:23:da:23:a6:a3:48:89:82:de:
         78:b1:bc:41:38:28:95:a4:32:56:98:fe:44:dd:f1:be:23:8f:
         28:91:e7:86:43:e6:64:78:84:7d:e5:68:77:2c:ce:35:ad:fb:
         45:d6:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:38 2026 by rpki-client