Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e31322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          R7LBtOpMuQ7vzHCUX9z6ACTdNiMB5E0wGujO272QD8A=
Subject key identifier:   DC:CA:01:A4:C5:5B:44:24:12:A4:9D:60:42:5A:69:ED:10:4B:94:9B
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       212F09DE6BAB1F464762B36E3154EF635A05C8EC
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:51:16 +0000
ROA not before:           Fri 05 Jun 2026 05:46:16 +0000
ROA not after:            Fri 04 Jun 2027 05:51:16 +0000
asID:                     24426
IP address blocks:        43.246.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2f:09:de:6b:ab:1f:46:47:62:b3:6e:31:54:ef:63:5a:05:c8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:46:16 2026 GMT
            Not After : Jun  4 05:51:16 2027 GMT
        Subject: CN=DCCA01A4C55B442412A49D60425A69ED104B949B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:c8:2c:a6:03:e6:97:93:f2:a2:06:74:ac:
                    57:d6:33:10:d4:ba:18:fc:69:67:c4:27:1f:dc:77:
                    11:aa:c7:61:36:13:5c:63:8b:58:b2:0c:26:5f:ef:
                    94:2d:82:2b:5e:06:d6:0a:6a:ba:dc:89:e4:9c:b2:
                    1b:8c:b3:cf:3c:52:98:0a:7e:76:d3:fd:a7:c5:65:
                    0d:dd:28:24:73:e1:46:64:3f:e4:10:c8:75:43:a9:
                    37:bd:4e:5a:16:2c:a0:3a:cc:8c:9c:f8:f5:91:b9:
                    c2:32:69:2c:67:16:a9:29:5a:25:73:0a:04:28:52:
                    24:1a:fd:ad:7e:c2:9c:4f:0e:5f:78:94:8b:93:c2:
                    69:f3:c2:32:23:4e:c0:e5:eb:fd:b5:23:f4:4b:7e:
                    e5:2f:fd:e5:c5:24:4f:04:b9:db:e8:d4:f4:1a:59:
                    8f:7e:02:1d:f9:d5:5d:e0:39:cf:04:68:14:49:2c:
                    4f:0f:21:4d:87:dc:74:96:9d:d2:08:42:de:55:b1:
                    3b:4e:8f:a0:fe:28:12:c1:6e:63:3f:ba:62:c3:98:
                    22:9a:1f:3b:8e:66:eb:1b:07:2d:48:53:3d:06:4f:
                    72:32:24:7b:42:7c:df:b7:40:38:7b:d0:cf:a8:29:
                    82:63:b6:6f:0c:90:d1:ed:16:5a:45:71:b9:92:89:
                    1b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CA:01:A4:C5:5B:44:24:12:A4:9D:60:42:5A:69:ED:10:4B:94:9B
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:42:01:e0:f5:04:c8:bb:d4:78:30:8b:ad:36:25:1d:11:31:
         cc:96:86:d4:2f:47:51:39:83:c0:7b:ff:66:6e:6f:61:88:33:
         f5:10:f7:f2:dc:8b:c8:99:ba:86:38:c1:4b:8c:47:25:65:95:
         e2:c5:87:6c:ff:9d:2b:9f:e3:ac:fe:1b:61:28:4d:df:7f:ad:
         06:da:d8:b8:a3:92:c5:ca:30:e3:87:ce:cc:a2:35:bc:92:41:
         8f:b2:6d:65:b4:c7:e6:64:b8:c5:9f:1f:cb:8e:a6:03:b5:12:
         1a:25:19:ce:36:ee:5e:85:04:ff:02:2b:cf:09:db:4f:59:3e:
         f4:0a:f7:c7:61:d6:4d:be:ca:48:41:ce:3f:c3:c8:6f:a9:8c:
         19:5d:11:ed:5d:fe:eb:ce:da:bb:9a:9f:a0:d8:97:73:97:77:
         f3:7e:6f:19:f2:fc:de:2a:75:50:6f:7b:b0:c6:01:a1:e0:48:
         af:f1:b3:b3:ec:d0:5d:de:15:88:86:bc:22:d9:ee:91:51:5d:
         80:1a:28:57:63:53:73:a2:55:89:81:24:44:3d:e4:03:52:74:
         7d:08:9f:48:29:ca:9b:25:08:26:1c:4b:23:e9:39:60:9e:e4:
         a2:fd:95:94:7d:81:b6:a1:83:2e:f4:96:3f:cf:b8:6c:58:84:
         41:d9:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:45 2026 by rpki-client