Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa
File:                     34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier:          Sw6wLQbg5UOeroFPC15hffs2jWYywjmXzXsJ3KN/Sxk=
Subject key identifier:   EF:E9:10:1F:F7:BB:8F:F6:4D:42:86:E7:14:30:15:61:A6:E8:56:9B
Certificate issuer:       /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial:       727E5F60B321C72B3ADD1DBECE9105F7D9B73343
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa
Signing time:             Wed 08 Apr 2026 05:59:10 +0000
ROA not before:           Wed 08 Apr 2026 05:54:10 +0000
ROA not after:            Wed 07 Apr 2027 05:59:10 +0000
asID:                     132883
IP address blocks:        43.251.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 07:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:7e:5f:60:b3:21:c7:2b:3a:dd:1d:be:ce:91:05:f7:d9:b7:33:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
        Validity
            Not Before: Apr  8 05:54:10 2026 GMT
            Not After : Apr  7 05:59:10 2027 GMT
        Subject: CN=EFE9101FF7BB8FF64D4286E714301561A6E8569B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:f3:88:ad:8f:7d:c9:58:90:01:0d:1e:b0:
                    6e:a8:2d:25:35:07:7b:ae:a2:3f:14:43:12:fd:06:
                    9e:d9:75:9e:9f:8d:5c:e5:b2:94:09:51:dd:21:14:
                    60:3d:c5:93:be:4a:87:bb:16:52:f2:4d:21:2b:42:
                    25:9c:05:c2:7e:6b:32:30:86:7c:59:7a:5b:f5:29:
                    9f:fd:e8:ad:ec:ee:f5:b1:f6:d6:d7:91:c0:66:f1:
                    fe:07:62:ee:fc:c3:63:4e:ca:60:71:fe:75:a6:59:
                    d0:c9:cb:fc:db:6a:f1:2b:26:e9:43:9b:37:b2:fb:
                    be:41:f1:0d:c6:a3:90:dc:57:3f:dd:7b:a4:0f:20:
                    2f:b7:b5:8c:3d:0f:6f:6e:f0:cb:ed:2c:3a:ce:15:
                    7a:b9:e2:5e:63:4b:f2:d8:06:ce:4b:c0:7e:9e:ec:
                    f1:34:0b:6f:b0:2b:f4:41:f6:a0:f0:de:19:74:e0:
                    9c:5e:e5:62:9b:4f:83:f3:4b:6a:5c:2c:e5:39:d2:
                    af:22:9a:5b:12:f1:d7:2c:f8:95:e7:1e:29:f1:36:
                    62:32:71:e5:71:89:b7:a8:6c:3c:83:a4:df:c6:e4:
                    14:7a:a3:66:75:eb:dd:7a:2d:ff:17:68:a2:90:a5:
                    eb:3e:b8:70:d6:d3:04:b5:32:d6:c2:a5:35:bd:35:
                    92:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E9:10:1F:F7:BB:8F:F6:4D:42:86:E7:14:30:15:61:A6:E8:56:9B
            X509v3 Authority Key Identifier:
                keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34332e3235312e3233372e302f32342d3234203d3e20313332383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.251.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:4d:d9:d1:c3:c0:6e:ca:52:38:04:73:3b:18:e3:be:75:
         db:09:3b:90:55:ec:cd:8f:43:27:54:14:7f:9a:3b:bb:d1:79:
         ff:1b:41:b7:87:45:60:0f:fb:e6:00:80:85:1f:34:26:7e:a7:
         c7:b3:b4:b4:e7:58:87:5c:c7:b4:80:99:4b:fb:99:88:f9:57:
         fe:ab:f8:14:50:76:a4:a0:79:8e:aa:87:29:66:95:9f:8a:ec:
         7e:01:26:a8:f7:4f:55:56:ca:50:bd:eb:89:1b:bc:e1:c8:05:
         f1:5e:7b:5b:e5:a8:51:db:ba:41:b6:e1:da:f5:0e:98:18:95:
         92:c5:d5:71:41:5d:72:85:a2:e6:9c:2f:97:a1:d0:d4:07:f0:
         ed:3b:6a:88:5d:d9:23:18:8c:aa:81:06:64:5d:48:bd:13:50:
         63:f1:db:16:88:d5:e9:70:48:67:38:ac:56:89:15:8f:ec:38:
         a0:59:6b:0b:92:6d:17:93:6e:47:6a:b8:ee:b6:45:79:b8:b5:
         f8:98:27:cb:23:df:25:0c:bc:ac:42:47:d7:9e:1d:ce:0c:4b:
         9f:da:ed:e1:09:05:87:2d:e0:dc:a0:a0:ab:87:1b:5e:92:6e:
         49:2a:75:b0:a0:fa:de:4d:71:b2:bb:0b:45:78:4c:8f:85:5d:
         5e:ac:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:48 2026 by rpki-client