Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e37322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          WokROlztnbUqflAAcMORCXjX14AzJzMYClm3aIsW5bc=
Subject key identifier:   6D:53:0F:52:C5:44:F4:0D:21:10:A0:FD:A1:63:42:4A:BE:6E:78:D5
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       141FD8CE0AEB948EEC7BF20CC30EE18B5DDBC1E6
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:51:16 +0000
ROA not before:           Fri 05 Jun 2026 05:46:16 +0000
ROA not after:            Fri 04 Jun 2027 05:51:16 +0000
asID:                     24426
IP address blocks:        43.246.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1f:d8:ce:0a:eb:94:8e:ec:7b:f2:0c:c3:0e:e1:8b:5d:db:c1:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:46:16 2026 GMT
            Not After : Jun  4 05:51:16 2027 GMT
        Subject: CN=6D530F52C544F40D2110A0FDA163424ABE6E78D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:03:bb:9b:53:2b:ba:93:5c:01:65:f9:22:d8:
                    fd:07:62:f3:8e:06:0f:12:cd:fb:ea:74:44:65:a6:
                    51:66:dd:8a:1d:6b:4c:40:3a:9c:58:5a:05:49:fe:
                    75:32:65:49:2a:8c:b8:53:b8:57:cb:9f:41:88:b6:
                    13:7c:ca:2f:09:67:4c:fd:39:6c:2f:f5:86:81:f0:
                    74:20:c6:02:a1:a5:b1:cd:5e:fe:21:5d:c9:d7:9d:
                    cf:ad:60:c0:0e:31:25:27:d3:40:6c:d5:ff:c2:a2:
                    4f:e6:9c:8c:a5:fd:3d:9e:28:b0:e6:6f:ae:df:3a:
                    ba:e8:1b:ae:da:bd:16:a1:80:ca:c3:9d:36:f8:02:
                    c7:d5:55:af:3e:de:ab:57:40:7c:16:a9:5b:56:44:
                    6a:a6:a0:3b:84:f2:d1:ae:cf:31:bd:df:69:40:38:
                    0c:9d:29:11:de:b5:69:a3:6b:b3:80:a5:c6:b5:d2:
                    53:6c:bf:0b:e7:79:fd:6e:5c:61:e1:1b:53:ca:c2:
                    d5:f4:3d:6d:00:48:aa:31:ff:b7:08:60:a6:c7:1b:
                    9b:ea:e0:1f:a1:8b:8c:12:11:d0:f6:bf:12:b4:9f:
                    68:70:0a:ae:14:6c:fc:2d:b4:3d:56:a0:a0:de:ed:
                    6d:2d:13:c1:7f:99:53:db:66:b0:e8:24:04:44:1c:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:53:0F:52:C5:44:F4:0D:21:10:A0:FD:A1:63:42:4A:BE:6E:78:D5
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:8e:8a:37:2f:d5:a3:c7:86:85:92:90:98:e9:ed:fb:2b:12:
         90:9e:a2:ba:c8:df:03:f3:c1:c8:b7:81:53:49:50:96:fa:a1:
         5e:1d:37:11:0d:1a:a3:ad:e6:95:0d:1a:83:a5:b4:57:3a:bb:
         d0:f0:f0:79:cd:c7:2d:63:21:9e:6f:1b:11:92:ab:f9:61:d5:
         28:62:74:ba:06:c5:de:ef:d9:ef:d5:c4:bd:47:0f:8d:9b:86:
         31:ff:f7:24:c6:26:2a:2a:b1:5a:7f:f2:f1:46:32:d3:28:de:
         63:d0:fc:e9:32:8f:d9:f6:93:5d:27:8e:c4:78:b9:f9:79:16:
         18:d5:6c:34:a5:91:f1:5e:8a:a5:29:c2:27:dc:0e:74:eb:1f:
         36:a1:2d:75:9f:9a:6e:5b:8d:78:6c:6b:31:3c:25:53:fc:57:
         98:4b:3e:ce:ea:c9:1c:c1:34:c8:be:70:9d:40:0b:3f:7d:f1:
         2d:d9:8a:3b:d6:ae:f6:06:61:68:87:bb:21:1f:6b:90:6d:6f:
         86:30:e8:d1:f9:48:10:98:c6:d1:8b:fb:26:33:3b:2b:51:6e:
         95:fc:54:45:32:06:02:a9:49:65:7d:c7:00:0a:91:6c:30:55:
         f6:42:52:00:4c:f9:21:77:ec:21:27:b7:9c:50:a3:bd:2a:28:
         b3:24:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:43 2026 by rpki-client