Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36382e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e36382e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          JGBBScDoX8ygOWl/V0pgJIN4iEaqjJDNtVGlN+XGi2A=
Subject key identifier:   EF:CE:3D:38:04:4F:52:53:FC:6E:C5:37:BD:3F:AC:B4:AD:E2:7D:AB
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       6F456A310E9500EAC23D34987D3AE51C0B5C5FFB
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36382e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:51:16 +0000
ROA not before:           Fri 05 Jun 2026 05:46:16 +0000
ROA not after:            Fri 04 Jun 2027 05:51:16 +0000
asID:                     24426
IP address blocks:        43.246.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:45:6a:31:0e:95:00:ea:c2:3d:34:98:7d:3a:e5:1c:0b:5c:5f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:46:16 2026 GMT
            Not After : Jun  4 05:51:16 2027 GMT
        Subject: CN=EFCE3D38044F5253FC6EC537BD3FACB4ADE27DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:66:cb:57:2f:9f:b0:96:7b:56:da:3a:57:a5:
                    96:86:bb:37:67:bd:a3:3f:fb:2c:08:4b:11:ff:cb:
                    92:e5:d8:79:86:7c:55:a5:c5:c3:1f:42:90:ab:d4:
                    65:f3:83:0f:a2:d9:4c:c3:3c:9a:bc:8a:f3:54:1e:
                    bb:eb:be:99:48:2d:b3:78:a6:b1:8f:75:68:c7:bd:
                    ce:27:44:46:90:15:99:17:15:25:b0:c7:43:09:d5:
                    bf:00:cf:c1:f3:4b:5f:a5:82:44:bc:6b:5c:bc:a4:
                    b0:f1:84:4b:db:b9:3b:e4:9f:55:56:be:97:27:c4:
                    b1:19:8a:99:6e:2c:ce:40:6b:71:68:f0:b8:e8:73:
                    79:6b:3d:27:ad:49:2b:a0:ba:45:7b:ba:6e:c8:70:
                    ef:41:4a:b8:f4:71:a2:97:a1:a1:b1:5f:72:22:7f:
                    6a:a0:f3:69:e3:a6:08:81:81:11:12:0b:cc:95:94:
                    48:79:78:2c:ae:ed:13:26:4c:1b:1b:12:87:95:3d:
                    f2:78:34:6d:66:bc:e9:f0:b3:bd:2c:d9:ea:7d:b3:
                    87:e5:08:2d:a3:24:38:84:18:6d:4d:81:21:aa:31:
                    f5:a7:8c:2d:c1:75:b8:33:dc:73:c6:1d:3b:c6:5e:
                    d9:b4:0f:99:ee:7b:27:28:33:25:bb:6e:da:21:84:
                    d9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CE:3D:38:04:4F:52:53:FC:6E:C5:37:BD:3F:AC:B4:AD:E2:7D:AB
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36382e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:86:8c:28:77:cb:59:07:7f:ca:c6:c5:41:62:fb:3a:3d:75:
         ce:8d:6f:ad:d2:5a:cf:0a:48:05:99:ba:4a:39:8d:e4:52:65:
         b5:0d:8b:2b:d0:84:7f:3d:14:73:28:49:de:1d:4d:bb:0b:87:
         8b:24:0c:f0:4e:ed:87:56:66:7d:29:82:fd:39:08:9a:84:10:
         ee:1f:78:f1:9a:0b:13:47:60:ac:78:fe:c1:86:8b:ef:eb:f5:
         1b:f4:97:05:c0:51:4c:75:f6:34:f7:7d:65:f5:86:cf:13:14:
         b8:4a:18:26:89:32:de:7c:f0:d0:2f:dc:a0:dd:0b:10:4c:12:
         5e:34:fa:5a:69:6c:10:3c:97:b4:98:ab:9b:a8:03:d9:04:ad:
         70:75:05:4c:4b:85:24:0b:4f:24:b1:15:3e:b5:d1:a2:c0:6e:
         7e:36:eb:85:f4:5a:4e:6a:37:47:3f:0f:9b:bf:2c:40:9f:20:
         a4:cf:8a:55:22:4a:7a:42:29:16:36:25:f0:ba:20:ea:f9:30:
         f8:c9:c6:9d:6e:0f:f7:79:3a:bb:97:48:e3:63:c6:39:16:f8:
         67:3b:ae:ac:0b:6a:66:c8:91:eb:82:99:b6:d7:57:29:d3:56:
         d9:c4:34:1c:cd:05:0d:0c:30:79:93:35:7c:2f:92:ce:5d:47:
         2f:fc:fa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:49 2026 by rpki-client