Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20313436383036.roa
File:                     34322e3230312e382e302f32312d3231203d3e20313436383036.roa (raw, json)
Hash identifier:          l7KxGHMZsrugLU6DOWi2US2ynt095cae/B0rDXlD9wM=
Subject key identifier:   22:E4:F8:6B:FF:EC:D8:EE:59:0A:2C:B0:42:FF:37:80:A8:6A:03:23
Certificate issuer:       /CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
Certificate serial:       1B0D6477624BE2CC9EE0EC906E057A7477176856
Authority key identifier: 63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20313436383036.roa
Signing time:             Sat 30 May 2026 07:31:22 +0000
ROA not before:           Sat 30 May 2026 07:26:22 +0000
ROA not after:            Sat 29 May 2027 07:31:22 +0000
asID:                     146806
IP address blocks:        42.201.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 15:46:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:0d:64:77:62:4b:e2:cc:9e:e0:ec:90:6e:05:7a:74:77:17:68:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632A01C4F1D5C990BF6B363A67894CC7D69E478B
        Validity
            Not Before: May 30 07:26:22 2026 GMT
            Not After : May 29 07:31:22 2027 GMT
        Subject: CN=22E4F86BFFECD8EE590A2CB042FF3780A86A0323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0e:cc:42:8f:45:b0:f8:f7:25:89:51:dd:a0:
                    66:3a:f7:9e:7b:cb:88:26:80:fb:45:19:f4:83:d9:
                    34:82:5b:87:4b:d8:ae:e6:d3:60:13:a1:ba:15:77:
                    78:c3:16:14:db:a6:93:8d:7c:67:db:a3:1e:0e:b9:
                    49:99:d1:81:c9:f3:24:aa:93:e0:e1:2f:b8:a4:d3:
                    88:8a:4c:1c:d5:d2:ed:a8:42:96:52:1a:61:1a:85:
                    9e:6f:c8:e7:51:02:21:b6:7a:5a:28:7e:3a:4d:cc:
                    8e:75:b7:7c:9f:36:c6:0c:67:01:08:fb:a9:ae:2a:
                    c2:8e:d0:67:e5:d5:51:8f:0d:af:7a:76:2e:b5:f5:
                    99:1e:79:57:a6:a3:2e:1f:09:c0:be:3c:96:f0:39:
                    a2:8b:b8:07:b6:c1:72:1a:62:b9:37:e6:f7:63:ce:
                    17:35:90:64:d7:97:2d:1d:dc:d2:29:52:ad:f2:2f:
                    27:10:a0:d5:dd:08:47:64:32:11:12:c4:49:90:c5:
                    72:32:c5:d0:9d:e4:72:14:ef:86:ab:fd:e5:e8:6b:
                    ef:99:15:fa:4d:e6:21:46:74:a9:6d:db:a0:f5:4a:
                    7e:b3:2f:05:a2:a6:a8:c6:a1:0a:d8:b6:35:a7:49:
                    30:5c:ba:cb:d2:b5:ad:3c:2d:13:a2:b8:30:d7:70:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E4:F8:6B:FF:EC:D8:EE:59:0A:2C:B0:42:FF:37:80:A8:6A:03:23
            X509v3 Authority Key Identifier:
                keyid:63:2A:01:C4:F1:D5:C9:90:BF:6B:36:3A:67:89:4C:C7:D6:9E:47:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/632A01C4F1D5C990BF6B363A67894CC7D69E478B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/632A01C4F1D5C990BF6B363A67894CC7D69E478B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265485825/0/34322e3230312e382e302f32312d3231203d3e20313436383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.201.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         87:6d:a2:56:db:53:10:c4:4b:6f:72:31:65:ad:41:d0:91:66:
         3e:ee:f3:12:d5:ab:f5:b2:d5:4c:3b:a1:ee:41:eb:f2:7f:28:
         92:5c:52:d3:64:84:13:6d:f1:9f:f4:d9:6d:ba:39:9f:83:ce:
         c2:81:7b:e6:aa:27:c1:ee:03:d4:3a:61:5b:9a:ae:b5:61:e9:
         9e:b6:d1:7d:3b:a4:6a:21:e9:57:b6:46:67:3d:bb:9a:52:47:
         ed:b6:2b:a8:f8:e0:c9:55:76:46:76:cc:21:6e:f8:8e:a3:d8:
         f8:f6:2c:e0:5c:ce:0a:36:2e:65:5a:f9:33:a5:78:4e:2e:f1:
         53:0a:a9:75:0a:52:06:a8:6d:cc:dc:a0:69:1e:f6:6a:4e:45:
         fd:1a:c8:d3:26:a8:62:8c:21:25:d5:8d:38:ff:fa:15:52:81:
         de:56:74:0e:fa:50:e9:9d:aa:67:7d:1a:48:98:b2:d0:1d:4f:
         1b:e5:a9:d4:d7:00:f6:81:da:35:5a:da:c2:76:54:dd:34:a3:
         54:e0:85:56:61:67:07:52:c5:97:35:56:ad:9d:a5:8c:cf:63:
         5e:20:e4:04:d3:6e:88:7c:63:d4:62:98:38:29:55:6e:40:19:
         6e:9d:0f:c5:06:76:5f:64:b5:1e:23:2b:43:dd:87:4d:0b:81:
         62:66:cd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:03:12 2026 by rpki-client