Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa
File:                     34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          mykK8in4gkNBTc8c/xTtkT3MIICTpH8yR5T2MvvUOPo=
Subject key identifier:   B3:E7:0A:01:C0:DF:29:F9:6C:89:F7:A7:88:D1:E9:E4:70:C9:7C:F5
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       5312E7DC2E0EDE738BDBC7D4F751B546540DDEA9
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:10 +0000
ROA not before:           Wed 08 Apr 2026 05:54:10 +0000
ROA not after:            Wed 07 Apr 2027 05:59:10 +0000
asID:                     132883
IP address blocks:        43.251.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:12:e7:dc:2e:0e:de:73:8b:db:c7:d4:f7:51:b5:46:54:0d:de:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:10 2026 GMT
            Not After : Apr  7 05:59:10 2027 GMT
        Subject: CN=B3E70A01C0DF29F96C89F7A788D1E9E470C97CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:fc:f4:cb:ec:3b:db:59:5c:04:03:18:25:f8:
                    65:f8:0b:c9:05:d0:71:ec:3b:57:85:73:80:b6:f2:
                    43:87:8c:b9:e0:0d:81:e4:41:94:62:6c:0b:d8:a2:
                    b6:83:6f:b2:da:6a:79:e9:79:5e:15:35:e7:f6:f1:
                    c7:82:5b:01:e6:20:4e:4b:68:fb:ba:94:37:72:c3:
                    07:7e:65:af:1f:37:f8:fd:93:ad:77:1a:3b:25:74:
                    ef:c8:27:f3:9d:e4:81:7d:68:5e:99:6f:1b:05:61:
                    df:26:a1:8a:9a:7f:18:61:27:9f:6d:a0:18:1f:77:
                    0e:35:0a:30:d5:09:ce:dc:0c:6f:ed:f2:cc:ef:5b:
                    21:c4:48:d1:04:a2:06:63:a4:b3:fb:40:51:88:28:
                    2e:16:15:eb:17:0f:76:32:8e:7d:0f:13:66:fa:5d:
                    fe:e5:b5:ce:7f:55:49:25:16:67:ac:de:c0:6c:52:
                    1a:17:12:97:90:f6:bd:d5:c6:2f:4d:d8:28:5c:c6:
                    4a:22:1f:a5:4b:ef:a8:4c:4f:ad:a2:fa:c6:bf:0a:
                    52:de:b9:92:47:17:d0:27:50:b0:7f:56:94:3b:10:
                    db:1f:35:c5:4f:23:36:11:93:42:7d:42:f0:77:d4:
                    71:76:cc:cb:e3:a2:da:0f:09:9c:52:28:56:48:6b:
                    d2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E7:0A:01:C0:DF:29:F9:6C:89:F7:A7:88:D1:E9:E4:70:C9:7C:F5
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233362e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:1e:0a:48:6c:33:6e:72:60:8f:71:14:db:cb:a0:24:28:bf:
         57:41:86:72:3a:a8:25:9a:ec:f4:ad:e0:5d:58:d4:89:a6:ca:
         ab:d8:36:41:84:e6:3b:3e:f3:12:f2:55:2f:85:be:07:02:78:
         88:ad:5a:4a:79:87:ee:91:d9:c3:15:b5:41:98:89:4e:d7:80:
         2e:29:72:95:8f:ad:aa:11:3a:43:52:a6:aa:95:3e:26:06:05:
         4d:6a:36:ca:9c:87:62:70:49:ad:e4:88:13:9e:02:69:4c:89:
         04:37:fb:83:31:be:9d:38:ea:a6:25:b8:64:20:e2:ac:ad:f0:
         0a:88:17:75:32:b8:eb:70:7f:b3:a6:ef:79:0a:bc:7b:56:d9:
         c2:2c:ff:75:d0:72:13:ef:c5:74:2f:88:ec:72:d1:99:00:45:
         5a:62:4f:50:1c:22:06:74:c9:49:72:95:84:e6:6c:28:11:2a:
         48:5f:56:c1:ed:ef:21:cc:5b:e9:15:3e:90:96:44:a3:b1:e0:
         12:e6:7e:c5:68:5b:2e:26:e3:09:71:52:fc:07:02:06:6c:46:
         57:bf:4c:a4:47:46:20:3e:6b:05:78:44:e2:69:ba:0c:3e:84:
         ab:8b:5d:29:1d:9c:d5:7b:4c:e7:81:b7:6c:45:fe:35:5e:fa:
         73:85:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:29 2026 by rpki-client