Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e34342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          KykRIHdu/nxMvGaJ0LI+TpRY4rnGPJ+PyTvEOYEfDHU=
Subject key identifier:   5F:ED:D9:81:A0:91:5D:EE:CB:04:18:7D:9E:CE:BF:96:F7:61:02:2A
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       73FF9F7AB61925ABF18BD55FEE95D8019D121DF3
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:48 +0000
ROA not before:           Fri 05 Jun 2026 05:43:48 +0000
ROA not after:            Fri 04 Jun 2027 05:48:48 +0000
asID:                     24426
IP address blocks:        43.246.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ff:9f:7a:b6:19:25:ab:f1:8b:d5:5f:ee:95:d8:01:9d:12:1d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:48 2026 GMT
            Not After : Jun  4 05:48:48 2027 GMT
        Subject: CN=5FEDD981A0915DEECB04187D9ECEBF96F761022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f0:46:19:8b:35:83:e8:a7:44:26:7e:52:61:
                    b3:f6:3d:18:ae:d9:4b:60:67:85:31:49:3c:86:45:
                    1f:ff:66:b6:73:7a:18:a5:a7:4d:1e:81:96:ae:11:
                    08:c3:ea:0d:4b:6c:8b:9a:0b:39:12:1a:2e:71:b7:
                    64:3b:67:da:bf:26:ce:f9:3e:40:50:00:2f:49:f3:
                    a2:e4:53:a7:94:90:a1:5a:8f:c6:81:d4:83:94:ad:
                    e7:a7:6e:37:f7:06:06:bb:81:71:fb:3d:be:6e:55:
                    0b:f0:11:a5:05:03:39:7b:64:e2:dd:d7:85:1d:ff:
                    81:01:3e:8b:ca:de:60:50:fa:aa:a3:90:f0:4b:8f:
                    23:9f:3f:76:ad:d6:a3:c0:6e:1d:33:ab:f7:7b:7c:
                    5e:f6:cf:8d:d3:df:d9:17:a3:ab:ed:53:ae:2e:f2:
                    29:e2:db:06:54:3f:24:bf:34:26:56:1f:c1:b1:36:
                    1d:a5:b9:ae:8c:38:d0:4b:62:fa:3c:8c:e9:77:f6:
                    88:db:1d:f5:b8:12:2a:84:cb:be:a3:eb:37:c5:6f:
                    63:df:fe:c0:20:3f:84:5d:47:46:0d:60:bd:b7:ee:
                    8a:33:c1:f9:13:7d:b8:45:b4:0f:e3:58:97:ce:b6:
                    5c:26:3c:a8:5f:09:37:45:40:d3:db:1d:be:1e:ae:
                    82:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:D9:81:A0:91:5D:EE:CB:04:18:7D:9E:CE:BF:96:F7:61:02:2A
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:27:d4:81:8a:0e:14:41:94:d8:90:a5:14:8b:5e:e1:53:d3:
         11:9a:b7:5f:28:90:1c:09:de:66:e9:d2:0e:7f:3d:ce:2a:4c:
         e5:94:33:4a:c5:c9:d8:08:fb:82:b1:b9:74:91:c5:39:d0:18:
         ac:7a:c3:22:a2:c9:50:af:c3:a8:38:e3:a9:80:d5:0a:1a:be:
         d4:e2:c4:d0:10:65:fb:c4:d9:43:a4:83:f8:07:bb:b6:b2:f3:
         4c:91:31:dd:14:c4:9f:e1:97:46:83:cc:5d:43:6f:04:a3:6e:
         49:e9:b8:ba:6c:74:fd:7a:64:40:f4:a3:90:6f:a2:7a:f6:66:
         c0:94:d8:46:15:e6:1d:9b:02:5a:ad:4d:cd:49:14:21:52:58:
         62:57:2a:85:c8:0e:e6:db:92:8c:98:07:27:69:20:74:8b:f7:
         80:fc:e8:fd:5a:f8:5e:a7:c2:2b:3a:ab:f2:36:25:d8:b7:4c:
         53:05:ad:0e:67:fe:97:07:8b:f4:11:ef:e3:e9:13:e6:3d:fb:
         5e:24:6d:9a:66:b6:1f:7f:8a:36:e9:85:d2:6f:30:1a:03:52:
         48:ac:1d:dd:b2:6c:dc:7d:00:0d:d8:71:f8:9d:f0:bc:ed:67:
         0e:53:e2:17:c6:5e:52:f5:f9:69:75:1d:5a:1c:8e:3d:cb:9e:
         38:b7:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:49 2026 by rpki-client