Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa
File:                     34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa (raw, json)
Hash identifier:          7oa2kTENkUrrhZuO8E0qYQsNSb3CZOgzY84ZsFhWVl4=
Subject key identifier:   62:1D:37:4F:AE:7B:BF:02:64:E2:BB:ED:49:4A:E3:A7:44:80:0F:D2
Certificate issuer:       /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial:       7471153552FA0CECAFE8EFF64BFE01DA9E3E90A0
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa
Signing time:             Tue 14 Apr 2026 09:24:46 +0000
ROA not before:           Tue 14 Apr 2026 09:19:46 +0000
ROA not after:            Tue 13 Apr 2027 09:24:46 +0000
asID:                     131516
IP address blocks:        43.255.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 14:52:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:71:15:35:52:fa:0c:ec:af:e8:ef:f6:4b:fe:01:da:9e:3e:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
        Validity
            Not Before: Apr 14 09:19:46 2026 GMT
            Not After : Apr 13 09:24:46 2027 GMT
        Subject: CN=621D374FAE7BBF0264E2BBED494AE3A744800FD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0c:26:90:f5:37:53:64:3c:3c:68:02:a7:41:
                    10:c2:34:d5:4d:7a:2b:f0:71:10:1f:d5:8a:e6:84:
                    c3:ea:7c:8b:da:fd:45:b5:50:e9:73:a4:e7:41:7b:
                    75:a8:6a:92:6f:4a:45:c5:67:40:7e:a6:12:50:cd:
                    e0:8b:9b:48:e2:41:c6:a4:f9:12:8b:3a:01:ca:60:
                    63:b0:80:3c:ae:95:db:5c:5c:cf:1c:36:85:8c:b4:
                    a3:fd:c2:71:78:50:05:50:01:94:30:a1:e0:77:28:
                    7f:43:a1:67:33:dc:b8:8c:2a:22:c7:d2:a3:40:4e:
                    e9:dc:6b:ff:b7:39:4e:de:6c:82:5b:a0:8c:d2:07:
                    b0:af:0b:c7:f6:6b:bc:37:ee:82:56:8a:4f:99:a8:
                    97:c4:da:ec:c6:e1:e4:5f:18:3e:1d:e6:8d:44:05:
                    61:71:bf:5e:53:8e:40:e3:75:26:66:89:58:d8:65:
                    1d:a0:59:8e:92:ea:41:16:28:73:dc:5a:1c:05:7c:
                    fb:d0:74:ff:aa:71:f1:b3:21:ad:62:52:e8:3d:64:
                    3d:de:8a:64:b5:43:c8:ce:af:7b:e7:ba:ca:40:4b:
                    d9:64:e2:a8:b0:db:d3:00:b7:81:a7:2c:3a:49:df:
                    af:5e:1c:43:83:b4:0a:b3:e5:35:8d:d5:3f:a5:a2:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1D:37:4F:AE:7B:BF:02:64:E2:BB:ED:49:4A:E3:A7:44:80:0F:D2
            X509v3 Authority Key Identifier:
                keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/34332e3235352e3138342e302f32322d3234203d3e20313331353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:c2:c9:75:92:0d:c6:7c:8c:ad:91:0d:0a:9d:97:3c:b4:d4:
         3b:50:74:f4:f3:64:0e:c7:35:b1:8b:b2:01:f2:f9:6d:36:5d:
         d0:6e:97:74:4b:68:ea:9f:9b:ce:bf:8d:09:83:a4:94:45:fb:
         b6:be:14:ff:1e:33:5e:86:96:dc:74:8a:3e:b2:47:8c:03:24:
         07:ce:bd:33:c0:e3:29:49:f6:f5:ab:09:25:f4:c6:0a:d4:a3:
         e0:c2:bc:27:90:70:b4:60:3f:51:70:7e:0d:f1:8c:c5:64:1c:
         f1:99:06:3a:e4:cd:0c:45:64:d9:15:30:41:1b:ba:74:f0:ac:
         3e:18:83:60:97:ac:d1:3a:f6:61:e0:20:72:b3:09:6a:9e:5a:
         b5:48:5c:ee:bf:17:60:6c:a7:f7:bb:a3:24:ad:12:9b:01:c9:
         94:29:84:cc:3c:af:00:a2:a6:87:70:61:88:52:ef:84:ba:26:
         29:95:4d:06:05:54:b1:b4:e6:c1:01:9f:88:20:b0:ac:26:be:
         1c:a6:6d:fa:a6:63:d8:3c:0e:45:55:e5:8a:99:52:25:51:57:
         73:5e:6d:ee:be:f4:c7:80:97:3a:78:53:d4:88:dd:ca:4b:97:
         8f:a8:ad:31:f9:90:a1:a2:60:c4:06:91:f3:5b:4e:73:40:db:
         25:02:f3:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:06 2026 by rpki-client