Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39362e302f32322d3232203d3e203234343236.roa
File:                     34332e3234362e39362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier:          XLrVF1xhlMl+iKJ9bAQd3yWe2evyT/eplgqFwFvstEY=
Subject key identifier:   88:9E:54:29:07:D4:1C:4F:DD:6A:92:BD:91:44:51:9C:3E:C1:F6:9E
Certificate issuer:       /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial:       7AB737F690443CB521BAA5DB9AC28D8B54C8CFA9
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39362e302f32322d3232203d3e203234343236.roa
Signing time:             Fri 05 Jun 2026 05:48:47 +0000
ROA not before:           Fri 05 Jun 2026 05:43:47 +0000
ROA not after:            Fri 04 Jun 2027 05:48:47 +0000
asID:                     24426
IP address blocks:        43.246.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:b7:37:f6:90:44:3c:b5:21:ba:a5:db:9a:c2:8d:8b:54:c8:cf:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
        Validity
            Not Before: Jun  5 05:43:47 2026 GMT
            Not After : Jun  4 05:48:47 2027 GMT
        Subject: CN=889E542907D41C4FDD6A92BD9144519C3EC1F69E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:bd:f1:49:1f:27:4e:d9:ab:ff:d0:38:6b:02:
                    a1:c4:54:64:86:9c:f9:2d:0a:5d:ed:60:d3:15:0b:
                    f6:99:48:32:ec:ad:9c:03:d9:e5:31:73:29:bd:c9:
                    83:33:a8:d8:59:b8:35:fb:41:96:db:a0:c6:cc:a1:
                    3b:e7:5c:0c:1b:ee:47:fb:55:6e:cf:e8:1c:f9:a2:
                    74:e0:78:b1:07:f1:e9:4a:35:50:bc:1a:2e:7f:67:
                    b8:4d:b2:3d:e9:44:d3:8f:22:74:18:72:66:46:e7:
                    3c:7f:d2:c7:67:36:6b:07:98:23:0b:2f:ef:1c:fd:
                    0a:bf:cd:21:02:be:c2:10:fe:91:76:24:12:c6:0b:
                    ec:b0:ad:21:9e:0e:ee:b0:f6:1a:ee:56:80:dc:db:
                    e3:4a:60:cf:89:0b:e4:ac:42:0e:8b:0b:18:e3:c5:
                    03:39:59:b3:a3:4b:ee:2a:fd:25:02:e6:2d:61:45:
                    a2:9e:37:6b:32:05:b5:e8:e1:d7:8f:16:f8:63:8c:
                    cb:e2:38:62:37:76:82:b3:40:f9:fa:9f:6a:ed:a1:
                    66:ee:30:48:e9:ca:de:87:11:8b:b5:96:f4:91:03:
                    e7:fc:1c:48:ad:42:8b:0b:04:0a:5b:09:79:76:27:
                    c2:4e:eb:65:25:1f:7f:f8:aa:11:13:fb:f4:e4:2b:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:9E:54:29:07:D4:1C:4F:DD:6A:92:BD:91:44:51:9C:3E:C1:F6:9E
            X509v3 Authority Key Identifier:
                keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39362e302f32322d3232203d3e203234343236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.246.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:7c:1d:17:ec:27:6f:65:17:4e:ef:c5:1f:bc:47:51:ba:06:
         69:01:ca:53:f6:f8:ff:55:15:09:3e:b2:81:58:ba:e0:fb:63:
         f5:be:95:f6:53:bc:70:26:9e:e5:9c:13:0b:86:31:e4:3d:d8:
         ac:7e:8f:ec:f0:98:e2:a4:e8:27:fb:b3:2f:9e:74:7e:bb:c5:
         51:61:b3:2c:55:c0:26:ec:77:aa:4d:b2:b4:24:ad:99:9d:71:
         5d:7a:64:73:9b:35:ef:f8:a6:9d:34:19:ef:1b:57:9e:d4:17:
         dc:22:98:e5:7c:61:3c:59:46:3e:de:c8:e2:98:c4:f0:a3:92:
         d4:a4:09:ae:47:1a:b3:1a:9a:63:f6:70:d1:45:c1:6f:55:34:
         fe:3e:fa:01:71:da:89:26:3a:34:1a:4a:1a:fa:fc:d8:a4:68:
         d5:b1:6b:d4:85:e9:dc:22:31:eb:0e:a1:34:82:8c:d0:2f:ea:
         5d:82:5e:ce:0a:58:05:a6:94:b4:e7:92:e9:ac:46:5a:68:36:
         92:6a:e0:33:1e:f9:9d:49:b7:6b:57:fb:e6:e8:f3:5b:be:d1:
         93:6c:e4:4c:5b:64:ae:53:c9:54:40:1e:a6:42:ed:85:fc:90:
         8a:96:59:c2:89:23:10:98:e7:e9:c7:32:d6:9b:31:38:76:65:
         1a:67:13:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:47 2026 by rpki-client