Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa
File:                     34332e3234312e34382e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier:          y/7myJs5XPVoIiKvb3vZer8dw79yEH6TJGBD204stLo=
Subject key identifier:   9A:BC:BC:46:4E:A5:98:59:E7:47:F5:F6:25:7A:7F:11:6D:82:41:03
Certificate issuer:       /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial:       4689B640BA5AB623D1F04378B1AE293C2D6D93DB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa
Signing time:             Fri 17 Apr 2026 01:38:16 +0000
ROA not before:           Fri 17 Apr 2026 01:33:16 +0000
ROA not after:            Fri 16 Apr 2027 01:38:16 +0000
asID:                     63567
IP address blocks:        43.241.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:89:b6:40:ba:5a:b6:23:d1:f0:43:78:b1:ae:29:3c:2d:6d:93:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
        Validity
            Not Before: Apr 17 01:33:16 2026 GMT
            Not After : Apr 16 01:38:16 2027 GMT
        Subject: CN=9ABCBC464EA59859E747F5F6257A7F116D824103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f7:7a:d7:a3:0f:79:e5:07:05:58:89:2e:eb:
                    bd:25:bf:3f:02:8b:25:82:73:f2:e6:84:4d:0f:5b:
                    7d:6f:2c:85:5c:b9:8c:96:ad:f6:f9:8f:63:0c:72:
                    f0:48:df:88:fb:b1:ad:51:2e:63:17:12:f5:41:f7:
                    f0:49:28:2d:07:f3:10:39:03:5d:ea:d8:6a:ed:c6:
                    90:b6:65:64:32:5e:01:b8:72:8f:ef:55:5d:b4:c1:
                    db:4e:0a:3a:83:04:bd:a5:1d:e5:5a:74:4f:f4:a6:
                    84:2f:44:c9:27:75:3b:9e:4d:0d:86:30:64:7e:ea:
                    97:4a:46:42:73:19:64:fe:ea:47:d5:5b:93:20:e2:
                    9d:24:25:9c:7b:48:e7:c5:b0:da:b2:90:61:f1:d4:
                    d1:ca:91:96:df:72:03:e3:2e:c6:ac:97:e7:29:9e:
                    68:74:cb:b7:ce:7d:f9:7d:ad:d2:cc:68:53:5d:4f:
                    38:5e:17:88:3a:f1:b2:08:ab:3c:8a:9c:6b:f2:1a:
                    81:77:dc:d0:21:60:eb:6f:32:b8:1b:4b:aa:86:47:
                    16:08:af:13:a9:c6:b0:a8:fc:67:55:7b:3b:3b:29:
                    46:54:6a:26:1d:ab:f0:4f:31:aa:3f:9f:90:d0:84:
                    45:e3:68:84:bf:c3:44:c1:c6:35:8d:c4:53:0f:05:
                    31:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BC:BC:46:4E:A5:98:59:E7:47:F5:F6:25:7A:7F:11:6D:82:41:03
            X509v3 Authority Key Identifier:
                keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.241.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:11:b8:8e:97:c7:8c:b9:38:18:be:93:7d:36:65:0a:32:cc:
         eb:d8:4c:05:e6:3e:32:ff:ef:8c:e3:10:bf:47:18:ae:64:36:
         c6:cd:a1:fc:b1:08:85:e9:ce:4a:0a:f7:9a:d3:23:40:c6:44:
         a2:0d:65:5d:9a:44:a8:d5:4a:3e:de:ee:a6:84:84:42:1e:b6:
         aa:57:e2:e5:91:92:ce:1c:bc:a0:c7:2c:62:2f:47:2e:c3:f9:
         2f:93:50:aa:0f:c0:75:84:46:31:3c:df:5b:41:78:43:d1:35:
         87:51:83:ba:39:fa:20:1e:46:88:48:bb:ae:83:4d:b3:b2:de:
         a6:7a:fb:6b:74:22:ab:0e:5e:fd:a2:f7:f6:57:08:0e:01:b0:
         cf:56:39:e1:11:da:47:cd:19:25:fe:db:2f:f5:dd:54:4c:19:
         99:30:36:6d:b0:7b:12:c6:c2:ee:c8:16:b8:a4:08:5e:47:37:
         3f:63:9a:31:7d:b2:0e:f6:05:e3:a0:b1:91:e2:88:f7:80:93:
         b3:82:09:e3:22:7f:40:74:1e:12:9c:03:6a:d2:5b:55:a9:30:
         b9:65:df:9a:7e:47:b3:8f:d0:90:9f:42:f1:bf:b8:b8:69:6d:
         28:13:f0:7c:8a:d8:d8:cc:05:ff:9e:13:80:b4:85:e8:55:fc:
         de:3b:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:55 2026 by rpki-client