Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e36342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          Na3KQ/V1ERieMCs+PnYcwERiW8npj9cjIdYZSOP23ew=
Subject key identifier:   A2:8F:8B:5E:0C:B0:C4:BC:61:85:38:E6:9C:92:20:69:99:A1:5C:E3
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       56DBB12BC3B8EF200C550976B1C84D50E29F3CDE
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:48 +0000
ROA not before:           Fri 05 Jun 2026 05:43:48 +0000
ROA not after:            Fri 04 Jun 2027 05:48:48 +0000
asID:                     24426
IP address blocks:        43.246.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:db:b1:2b:c3:b8:ef:20:0c:55:09:76:b1:c8:4d:50:e2:9f:3c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:48 2026 GMT
            Not After : Jun  4 05:48:48 2027 GMT
        Subject: CN=A28F8B5E0CB0C4BC618538E69C92206999A15CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:37:38:7c:3d:ab:25:d2:d3:5e:2e:01:33:
                    b6:fc:0e:d3:5c:50:17:21:f4:1f:1f:38:46:ea:d1:
                    3c:6b:d2:6f:d0:c1:22:3d:52:1b:a9:e5:95:18:a0:
                    1e:10:5a:5b:d2:b0:88:db:40:47:49:f6:21:0d:c8:
                    2a:14:ac:38:8b:b2:a3:88:07:6c:20:20:ff:d9:5a:
                    fb:df:1a:43:e4:c4:ef:45:c5:87:ab:cb:c6:e9:3a:
                    6b:70:f7:b0:ad:0d:48:95:19:3a:f7:55:18:9a:5c:
                    9d:55:75:1d:5d:26:a2:98:05:75:86:cb:04:95:49:
                    24:9c:e9:5c:65:d8:da:6c:e4:43:53:00:b1:ef:76:
                    ed:03:db:e2:30:e7:3c:ca:c4:e7:d7:17:51:a7:59:
                    9a:63:7f:76:cd:1a:75:b3:2e:4e:68:f5:de:26:47:
                    ea:16:ac:49:11:5d:2a:cf:a6:92:c1:30:fd:86:c6:
                    22:59:1b:bc:1b:32:46:90:70:d4:52:9d:55:0a:37:
                    09:e6:09:21:4b:96:34:15:54:f3:5b:99:95:5f:e5:
                    69:7b:f2:da:31:66:7e:dd:5e:1b:85:08:d6:44:ff:
                    07:d1:d4:e6:6b:e8:ba:93:d7:51:de:cd:8b:36:0b:
                    65:1d:3d:d1:30:6b:64:11:05:d1:4f:0d:73:8f:04:
                    5d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8F:8B:5E:0C:B0:C4:BC:61:85:38:E6:9C:92:20:69:99:A1:5C:E3
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36342e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:60:0f:64:b9:36:c8:b7:5f:20:c6:88:0a:39:eb:76:c2:0a:
         42:2e:e1:4b:e9:af:f1:c9:31:ce:3c:4e:97:4a:fc:1a:ed:3f:
         c0:52:cb:fc:07:32:61:fb:f0:5b:c2:d3:d8:b3:71:06:8a:75:
         4e:e1:02:8e:7e:c9:9f:dc:ff:22:73:fb:f9:26:7d:e0:23:bd:
         33:c6:ca:76:fe:2b:28:b8:27:c0:9c:23:49:bb:05:64:0e:88:
         e2:66:02:66:06:07:d2:a6:ae:9f:2a:86:12:93:91:ab:ab:ba:
         3a:36:43:07:ce:58:c0:1f:8b:1f:d8:b6:43:9b:2f:1e:8b:5b:
         5d:56:02:21:c4:f1:f6:c6:44:a3:bb:1b:bf:6b:49:b4:80:85:
         ef:bd:fe:81:ad:45:1d:67:91:b3:c8:64:9d:a3:d3:12:7c:ca:
         4e:ee:ef:62:9a:ff:0d:0c:97:15:02:10:55:7d:f0:18:fd:47:
         53:a9:e0:77:9e:df:30:49:7a:8c:ad:37:08:60:97:10:77:2e:
         08:eb:dc:07:47:d1:12:4e:eb:b3:58:d8:c2:5c:8f:d8:c8:02:
         ca:6f:52:c8:ba:f8:d5:2a:21:f6:2d:6c:87:b5:ff:9e:d7:02:
         30:af:a3:de:4b:f7:b5:2e:22:7e:64:0b:89:63:48:29:3c:a2:
         f2:fe:51:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVtuxK8O47yAMVQl2schNUOKfPN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQzNDhaFw0yNzA2MDQwNTQ4NDhaMDMxMTAvBgNV
BAMTKEEyOEY4QjVFMENCMEM0QkM2MTg1MzhFNjlDOTIyMDY5OTlBMTVDRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmZTc4fD2rJdLTXi4BM7b8DtNc
UBch9B8fOEbq0Txr0m/QwSI9Uhup5ZUYoB4QWlvSsIjbQEdJ9iENyCoUrDiLsqOI
B2wgIP/ZWvvfGkPkxO9FxYery8bpOmtw97CtDUiVGTr3VRiaXJ1VdR1dJqKYBXWG
ywSVSSSc6Vxl2Nps5ENTALHvdu0D2+Iw5zzKxOfXF1GnWZpjf3bNGnWzLk5o9d4m
R+oWrEkRXSrPppLBMP2GxiJZG7wbMkaQcNRSnVUKNwnmCSFLljQVVPNbmZVf5Wl7
8toxZn7dXhuFCNZE/wfR1OZr6LqT11HezYs2C2UdPdEwa2QRBdFPDXOPBF2fAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUoo+LXgywxLxhhTjmnJIgaZmhXOMwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2
MmUzNjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv2QDANBgkqhkiG9w0BAQsFAAOCAQEAn2APZLk2yLdfIMaICjnrdsIKQi7h
S+mv8ckxzjxOl0r8Gu0/wFLL/AcyYfvwW8LT2LNxBop1TuECjn7Jn9z/InP7+SZ9
4CO9M8bKdv4rKLgnwJwjSbsFZA6I4mYCZgYH0qaunyqGEpORq6u6OjZDB85YwB+L
H9i2Q5svHotbXVYCIcTx9sZEo7sbv2tJtICF773+ga1FHWeRs8hknaPTEnzKTu7v
Ypr/DQyXFQIQVX3wGP1HU6ngd57fMEl6jK03CGCXEHcuCOvcB0fREk7rs1jYwlyP
2MgCym9SyLr41Soh9i1sh7X/ntcCMK+j3kv3tS4ifmQLiWNIKTyi8v5Rsw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:51 2026 by rpki-client