Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34332e3233302e33322e302f32322d3234203d3e203337393633.roa
File:                     34332e3233302e33322e302f32322d3234203d3e203337393633.roa (raw, json)
Hash identifier:          GyLL7fSBScqfTXcCR4SVo8rLkBgXu9tEDOUbiqv1bGU=
Subject key identifier:   74:34:14:E8:9C:52:2F:20:BE:C5:99:01:2C:ED:FE:18:04:B1:72:00
Certificate issuer:       /CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
Certificate serial:       04EF627820E0EE5F488C9B10D21AD8C6AE8CABB9
Authority key identifier: 05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34332e3233302e33322e302f32322d3234203d3e203337393633.roa
Signing time:             Fri 27 Mar 2026 02:25:05 +0000
ROA not before:           Fri 27 Mar 2026 02:20:05 +0000
ROA not after:            Fri 26 Mar 2027 02:25:05 +0000
asID:                     37963
IP address blocks:        43.230.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 16:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ef:62:78:20:e0:ee:5f:48:8c:9b:10:d2:1a:d8:c6:ae:8c:ab:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F
        Validity
            Not Before: Mar 27 02:20:05 2026 GMT
            Not After : Mar 26 02:25:05 2027 GMT
        Subject: CN=743414E89C522F20BEC599012CEDFE1804B17200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:20:c0:b8:88:94:81:a5:6c:7c:17:68:47:54:
                    31:23:6a:48:b0:94:12:99:8a:fe:35:7a:f6:6c:72:
                    00:8f:e7:df:04:81:77:98:a9:a5:70:44:66:d6:45:
                    4f:77:78:d9:63:2f:ba:2c:b4:34:d6:58:2a:ca:6c:
                    12:da:f2:c1:1b:af:77:74:aa:d1:3e:5f:cf:84:39:
                    95:39:9e:37:8b:5a:96:e7:83:91:3c:59:3b:7a:4c:
                    2b:fd:6d:23:c9:a1:04:70:3a:7f:48:7d:7f:77:27:
                    ff:32:cb:6a:ec:62:2f:17:f4:5a:20:8e:a8:27:8f:
                    23:b9:5c:e7:ea:96:58:f3:5b:5f:4c:c2:72:04:74:
                    1d:27:cc:3b:a0:8f:ce:98:d7:f3:a5:52:0f:c5:64:
                    cc:fd:bf:24:6c:c3:fd:0c:0c:c6:ee:50:ec:43:07:
                    a5:90:0d:fe:05:36:35:88:0a:b4:34:ad:de:24:74:
                    e3:92:14:01:24:59:1c:38:b8:82:e0:94:e3:52:9a:
                    ac:1b:f8:6e:c1:ac:4d:f3:a8:9b:63:3c:c8:cc:66:
                    e4:fd:29:27:48:f5:56:35:62:97:a7:81:01:04:48:
                    4b:85:0a:c0:e8:75:97:25:5f:6e:d0:ef:77:2c:83:
                    f3:ca:72:db:a4:4a:ec:38:ff:6e:d0:24:5d:d5:f7:
                    22:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:14:E8:9C:52:2F:20:BE:C5:99:01:2C:ED:FE:18:04:B1:72:00
            X509v3 Authority Key Identifier:
                keyid:05:6F:7F:9E:03:58:7D:DF:EC:6A:04:9E:A0:F2:0F:A1:C0:CF:15:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/056F7F9E03587DDFEC6A049EA0F20FA1C0CF157F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948337155/0/34332e3233302e33322e302f32322d3234203d3e203337393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:c2:36:09:a8:1c:8d:51:84:c4:5a:dc:e6:79:bb:67:4e:8e:
         50:3a:ab:bf:03:05:08:69:8b:a4:73:4b:b7:be:08:5b:09:d0:
         dc:ef:5d:f6:a7:02:da:e0:be:27:2a:f1:bf:56:e2:43:aa:33:
         0f:d1:1f:65:df:4a:62:c0:5c:4f:98:18:19:59:8e:1c:7c:0c:
         da:2f:18:5d:0f:fb:fe:70:11:98:8c:24:57:e8:2a:bc:7f:f5:
         48:57:4e:29:0f:f1:4f:60:7b:7c:4b:03:f6:09:96:ee:08:80:
         69:d7:6d:95:01:b1:05:73:49:e2:41:9d:91:72:ac:a9:7f:4c:
         69:2d:9e:8b:87:65:b5:f3:0e:0e:e4:18:71:a4:cc:9b:5b:32:
         98:dc:06:58:08:4f:b2:4b:d8:7c:fa:59:3d:7f:90:72:35:17:
         fb:6f:58:4a:8d:57:a8:b3:8c:14:7d:38:4e:82:1e:18:65:d5:
         ef:4b:0e:ff:13:db:22:fa:20:e4:44:21:9b:cb:a7:2c:64:01:
         48:d6:16:0e:ed:04:5c:c2:6a:19:ca:22:31:1b:5b:a3:40:07:
         3c:75:2a:7b:5e:ae:8d:bc:6c:b2:05:c2:4e:88:17:e4:ec:18:
         ef:79:32:18:ff:1c:ac:08:23:00:18:f3:8c:cc:48:56:ee:f6:
         c9:42:2d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:39 2026 by rpki-client