Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e31362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          c5xqGkzV0h+V9nq1lO4ZlA3m6qq4C1etTqnVasH19PA=
Subject key identifier:   BB:69:91:88:05:ED:6A:21:AC:FD:3D:E1:BC:A6:3E:09:30:43:DD:02
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       737B4BF7B708A510F563E03B56646CA96E488920
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:51:16 +0000
ROA not before:           Fri 05 Jun 2026 05:46:16 +0000
ROA not after:            Fri 04 Jun 2027 05:51:16 +0000
asID:                     24426
IP address blocks:        43.246.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7b:4b:f7:b7:08:a5:10:f5:63:e0:3b:56:64:6c:a9:6e:48:89:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:46:16 2026 GMT
            Not After : Jun  4 05:51:16 2027 GMT
        Subject: CN=BB69918805ED6A21ACFD3DE1BCA63E093043DD02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:df:30:ac:28:09:80:dd:a0:42:9b:27:de:04:
                    0c:83:00:e9:28:03:64:55:87:cd:d3:b0:a7:f5:9d:
                    33:8d:14:5a:a1:47:88:29:2f:06:5b:f8:da:63:fe:
                    be:f6:b2:86:5d:7d:20:18:3f:55:4e:ae:82:68:d6:
                    35:5d:f8:38:f9:1f:86:31:ab:83:58:3d:ea:04:8b:
                    1b:a5:f5:fb:62:03:19:d7:12:1b:70:54:11:f9:34:
                    fb:c2:21:1d:a4:a6:18:d4:32:39:c2:da:1d:c9:bc:
                    fc:b4:81:63:52:4a:f1:2e:2c:76:e3:d5:11:70:67:
                    ff:b4:f0:6c:2b:34:62:39:d1:95:a7:d1:06:58:54:
                    0c:12:96:bf:05:ab:12:b1:76:37:f8:8b:30:40:02:
                    bf:39:59:7f:da:ac:f3:33:87:d4:54:38:b5:1a:c9:
                    f9:a0:41:53:e2:40:3c:5f:ad:fa:75:c9:26:13:b5:
                    89:c0:65:8e:b5:68:5a:22:03:93:59:e4:68:60:39:
                    cf:04:59:73:38:0d:d0:6b:1d:23:e0:f4:7a:47:55:
                    79:87:0e:97:8e:05:5c:6a:2d:0e:03:06:f2:cf:c1:
                    ab:32:0d:b7:96:58:77:a6:9d:d9:5b:d7:ce:4c:05:
                    a5:a5:6b:23:df:a3:e4:65:28:03:3a:d7:ef:b0:38:
                    74:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:91:88:05:ED:6A:21:AC:FD:3D:E1:BC:A6:3E:09:30:43:DD:02
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:76:06:41:db:df:e6:55:74:e0:45:3e:3c:0d:99:fb:73:
         8e:36:7c:3a:c6:36:c0:69:09:bd:4c:06:7c:05:8e:20:b3:a8:
         4f:f8:2e:b1:af:0b:4c:f2:b5:26:8a:1c:b0:bc:2c:33:82:8b:
         50:39:5a:1e:b0:a7:0c:2d:80:36:b9:9a:0e:d4:07:9e:4f:5c:
         8c:aa:4e:80:98:be:74:41:4b:ae:db:bc:21:9c:47:02:00:90:
         f7:42:08:9c:1c:6f:63:25:eb:f4:2e:0f:ad:4e:21:a4:9c:a1:
         3c:94:c7:6a:96:3f:58:af:2a:04:05:6d:b9:5c:c4:66:c4:b2:
         28:cf:47:e4:b4:61:91:d8:82:c1:93:58:3f:f1:b1:0f:56:2a:
         8d:00:59:31:43:31:d8:27:47:73:bf:08:a3:03:e1:ab:99:37:
         31:07:26:a3:6a:1b:94:65:33:a0:f6:23:dd:c2:0f:f9:27:55:
         24:c2:90:e9:82:99:48:1f:f4:5a:ef:06:8f:b4:ba:1c:bd:30:
         09:17:28:b4:46:91:c8:b8:ed:a2:22:d7:2c:0d:45:92:8e:8b:
         4e:dd:db:a3:38:20:c4:4c:89:84:8c:2b:3f:09:fc:48:93:29:
         6d:8e:a7:13:4a:66:63:95:d9:52:64:0c:53:9b:cb:7a:bf:33:
         fe:5b:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:46 2026 by rpki-client