Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e33362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          g6y+1klZlh4UYsL5n0hdb2NSrB5GAWt4PvRV4KyAtpM=
Subject key identifier:   83:BA:83:9E:4C:64:8E:65:24:E5:FB:71:6C:BF:6D:8C:E6:27:51:35
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       5B100B3B9208175B3944AB416CE838F84DAD472C
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:11 +0000
ROA not before:           Fri 05 Jun 2026 05:43:11 +0000
ROA not after:            Fri 04 Jun 2027 05:48:11 +0000
asID:                     24426
IP address blocks:        43.246.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:10:0b:3b:92:08:17:5b:39:44:ab:41:6c:e8:38:f8:4d:ad:47:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:11 2026 GMT
            Not After : Jun  4 05:48:11 2027 GMT
        Subject: CN=83BA839E4C648E6524E5FB716CBF6D8CE6275135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b4:04:ef:6f:91:4d:ca:41:ca:d9:35:40:14:
                    8f:83:ff:0f:10:00:f6:cd:f2:b4:46:34:3c:60:5b:
                    2e:02:1a:9c:50:b2:3c:f2:53:6e:eb:7f:29:f2:1b:
                    f5:50:93:97:b8:56:42:3e:8b:6b:9c:e2:6d:75:0d:
                    35:d0:91:23:c1:f5:19:d1:f9:55:4c:9e:97:f5:99:
                    7c:46:bb:d7:0a:1a:e6:57:91:50:78:16:1b:cd:1a:
                    82:51:25:09:5c:47:21:52:b8:eb:97:8a:9d:ea:71:
                    89:6e:55:0a:13:0f:3d:8b:6d:95:c6:2c:d9:e3:39:
                    d1:55:72:b5:b1:59:dd:20:1a:c1:c3:b9:7b:86:66:
                    d0:e8:7a:eb:33:40:f1:4c:fb:c2:bd:46:2c:70:d1:
                    15:0d:31:c1:b9:e9:c9:a8:17:0d:3a:78:4f:40:fb:
                    c1:51:90:25:33:6f:76:b4:e9:92:0d:3e:11:60:8b:
                    a1:4f:51:5d:af:46:06:14:f3:47:26:d3:21:9b:9c:
                    56:be:f1:e7:d8:f7:04:8e:a8:58:bb:33:bb:4e:bd:
                    0d:3b:e9:15:a2:fe:c1:40:b9:84:15:db:48:bd:df:
                    17:bc:fe:fe:80:74:22:9a:88:09:fc:ae:00:42:dd:
                    34:0d:38:fc:5b:bd:7f:e4:a2:fe:a0:e3:e7:7c:77:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:83:9E:4C:64:8E:65:24:E5:FB:71:6C:BF:6D:8C:E6:27:51:35
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e33362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:01:c2:57:96:cf:07:00:2a:5e:c2:6e:3e:9e:44:97:31:ad:
         05:2c:4d:76:f7:6e:b4:0e:6c:34:43:6f:96:23:68:00:e6:08:
         5a:d3:c8:a7:21:57:ba:ce:12:6b:1d:0e:10:e8:ce:07:4a:59:
         80:dd:3a:fc:17:13:4e:1e:09:bd:1e:a9:f2:88:a0:11:e7:3f:
         ca:43:d3:ac:bb:2b:1d:57:29:8f:23:c5:12:cf:a0:1d:11:4a:
         a3:c1:d7:91:51:78:9e:58:70:f5:04:81:cb:0a:ae:e8:da:3e:
         65:a1:53:90:df:31:b2:97:09:86:d9:fa:51:42:a8:86:c7:f2:
         a6:e7:8a:c2:82:f5:b9:ad:f8:a2:a9:4a:73:c0:f4:33:e3:cb:
         bd:44:66:f5:2b:69:99:c9:f3:58:b1:14:31:8f:7f:01:e6:2d:
         08:80:fd:e0:5c:a1:96:6c:12:7b:22:50:97:9c:42:fb:ea:ee:
         f9:5e:a2:52:d6:f1:be:0b:ed:cc:32:76:bc:4b:35:d2:45:03:
         d5:20:d5:08:dc:60:7c:a7:a6:3a:fa:39:dd:91:06:51:c2:67:
         33:8f:3c:4d:c1:2c:bf:5c:91:3f:37:1d:45:25:1b:fd:a1:9d:
         b2:ea:34:f3:eb:dd:75:61:90:3e:97:ef:d8:6f:bf:8b:0e:9c:
         80:14:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:50 2026 by rpki-client