Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          KY8ctzKmvh1fLm1qZCZ5OQaCmd3q40SUT6KsGRBgLcc=
Subject key identifier:   13:61:90:6B:85:F8:99:50:59:3B:7D:FB:47:F0:53:B8:6C:0D:1F:E5
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       299089448A3918893F8F944E258184DA98D32C8F
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:49:19 +0000
ROA not before:           Fri 05 Jun 2026 05:44:19 +0000
ROA not after:            Fri 04 Jun 2027 05:49:19 +0000
asID:                     24426
IP address blocks:        43.246.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:90:89:44:8a:39:18:89:3f:8f:94:4e:25:81:84:da:98:d3:2c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:44:19 2026 GMT
            Not After : Jun  4 05:49:19 2027 GMT
        Subject: CN=1361906B85F89950593B7DFB47F053B86C0D1FE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:3c:45:1c:39:fc:19:52:a8:e8:5a:80:98:
                    1e:db:d9:32:65:4b:a5:2f:a7:70:91:d9:49:59:7f:
                    9b:92:24:cf:14:f7:90:7e:87:11:11:e4:c6:48:c3:
                    8e:5c:89:c1:39:a2:46:68:7b:a7:1b:b3:74:ce:d5:
                    ac:95:ab:d6:79:80:18:bd:51:02:da:d0:bb:93:63:
                    96:13:d4:42:5d:0b:90:75:dc:b3:a3:da:5d:3d:c5:
                    11:cf:eb:37:8d:bf:cd:99:a1:54:61:62:64:49:65:
                    5e:70:94:76:7e:a0:ba:bf:e9:42:65:5f:33:c8:a9:
                    2a:5e:0b:6d:92:2e:39:61:aa:55:9d:b2:f0:5d:1b:
                    e0:c7:65:8f:7e:8a:ed:6e:70:ba:29:13:d6:e4:cd:
                    bd:6d:d6:0d:bf:40:40:59:1e:a3:bf:90:11:00:b6:
                    cf:52:54:57:d7:c5:09:05:87:1e:13:ac:ec:53:f6:
                    d8:5b:45:fd:70:da:ee:6f:59:cb:77:cb:aa:ed:db:
                    04:58:4a:0d:3a:dc:07:22:18:fa:9f:98:82:4b:ef:
                    e0:1f:9d:c6:32:9e:2f:f2:6b:70:06:57:78:86:50:
                    af:5c:3b:59:bc:2f:e0:9c:8a:ab:36:b6:d6:51:16:
                    56:d5:1e:3f:2e:90:d8:6b:f1:18:6c:47:06:7c:fd:
                    ef:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:90:6B:85:F8:99:50:59:3B:7D:FB:47:F0:53:B8:6C:0D:1F:E5
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e302e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:60:23:fd:e2:53:22:66:b8:f2:15:5e:cb:7d:9d:4d:6a:df:
         10:45:60:4f:77:52:35:e6:80:30:14:0e:08:11:71:f7:98:d0:
         80:57:9c:d7:ca:3e:45:4f:e0:81:ba:f0:29:23:a5:60:38:27:
         e8:8f:f7:1d:5b:42:9a:90:58:f8:16:42:6b:6d:1d:29:79:e2:
         c7:db:3a:fd:3b:b5:96:3d:40:5f:8c:0c:6a:4b:c7:19:cb:bb:
         75:f5:a5:6a:06:e7:2c:0e:fb:8d:2f:ea:14:9f:59:70:87:25:
         51:a8:fd:32:db:5f:5a:1b:49:60:99:eb:90:c2:87:7e:f6:69:
         e2:b2:3c:79:f5:af:74:14:ce:4b:75:7d:92:15:0e:51:69:86:
         d1:d1:d8:04:2a:23:ef:ee:f6:4d:e8:ed:3a:4e:1c:5d:45:6b:
         90:d1:7b:34:59:82:c5:f6:51:f8:a0:9e:5b:03:ee:1d:ee:99:
         23:32:a9:95:18:35:d2:76:1a:c6:da:97:43:34:18:e4:d9:0f:
         a5:a0:03:8a:e1:b6:41:f9:42:a2:b1:49:4a:cb:b9:67:45:10:
         4a:81:f2:a6:ed:00:f7:7b:bc:a4:bd:97:70:1d:fe:4c:ba:27:
         40:9d:8e:e4:6d:32:6b:3d:85:5b:40:79:83:b9:93:30:38:63:
         49:b9:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:19 2026 by rpki-client