Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS17429.roa
File:                     AS17429.roa (raw, json)
Hash identifier:          HN0dXbgZGSc9qnYjM1vDXhmsEXJFkHuKRf+Pfjocylk=
Subject key identifier:   DE:55:24:0B:DD:0D:3A:E5:26:6F:73:DB:EA:38:EC:82:36:65:85:77
Certificate issuer:       /CN=845BB307E2A1100E89FA0C939A9389686796F0F6
Certificate serial:       1BF6BFC84588193B881F7444BA72A7973A791090
Authority key identifier: 84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS17429.roa
Signing time:             Thu 04 Jun 2026 02:33:42 +0000
ROA not before:           Thu 04 Jun 2026 02:28:42 +0000
ROA not after:            Thu 03 Jun 2027 02:33:42 +0000
asID:                     17429
IP address blocks:        240a:4002:1b00::/40 maxlen: 40
                          240a:4080:8000::/35 maxlen: 35
                          240a:4090:8000::/35 maxlen: 35
                          240a:40a8:8000::/35 maxlen: 35
                          240a:4180::/31 maxlen: 31
                          240a:4208::/31 maxlen: 31
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 16:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f6:bf:c8:45:88:19:3b:88:1f:74:44:ba:72:a7:97:3a:79:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=845BB307E2A1100E89FA0C939A9389686796F0F6
        Validity
            Not Before: Jun  4 02:28:42 2026 GMT
            Not After : Jun  3 02:33:42 2027 GMT
        Subject: CN=DE55240BDD0D3AE5266F73DBEA38EC8236658577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:34:82:73:e7:c1:9d:46:f1:04:e4:40:06:
                    bb:63:d1:fd:97:17:63:fe:12:25:9c:17:6b:08:5e:
                    54:e2:73:80:ee:4f:dd:fb:85:f0:c7:f0:cf:d1:9b:
                    9b:2b:7c:f1:c7:bc:93:41:b9:46:40:4e:98:4e:cd:
                    77:5e:5d:bc:b5:d4:a7:7d:e7:a9:0e:62:48:19:9f:
                    fa:07:89:96:63:a9:9a:01:b4:83:8a:e6:04:00:e1:
                    65:46:a4:b0:8a:91:e1:70:80:9b:68:bd:3b:e8:49:
                    f7:be:86:9d:c4:97:85:72:5e:0c:99:c7:37:5a:d8:
                    fd:64:32:8c:fc:53:87:39:60:01:a5:45:f3:aa:98:
                    9e:de:6b:15:c5:2e:b0:72:b4:d9:80:8b:5f:6d:a4:
                    4d:df:b6:2b:52:ed:c6:a5:eb:23:e7:d7:e3:34:3c:
                    50:eb:ae:fd:37:52:4a:cc:c2:b2:93:da:cb:18:ff:
                    f7:b8:41:68:31:e7:bb:ee:d0:07:25:08:21:ec:07:
                    78:6d:e8:2f:8c:56:ca:03:4d:2a:ad:bc:61:a7:b1:
                    7f:cc:84:9e:9e:6a:76:55:0b:f2:a9:88:39:aa:cd:
                    ab:06:e6:c2:da:96:d4:39:39:a8:07:5a:97:00:30:
                    5a:b2:d8:d4:70:be:8c:9b:92:64:a2:33:aa:77:59:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:55:24:0B:DD:0D:3A:E5:26:6F:73:DB:EA:38:EC:82:36:65:85:77
            X509v3 Authority Key Identifier:
                keyid:84:5B:B3:07:E2:A1:10:0E:89:FA:0C:93:9A:93:89:68:67:96:F0:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/845BB307E2A1100E89FA0C939A9389686796F0F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/845BB307E2A1100E89FA0C939A9389686796F0F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721793537/0/AS17429.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:4002:1b00::/40
                  240a:4080:8000::/35
                  240a:4090:8000::/35
                  240a:40a8:8000::/35
                  240a:4180::/31
                  240a:4208::/31

    Signature Algorithm: sha256WithRSAEncryption
         41:34:09:46:cf:b0:51:de:5f:dd:06:8f:76:4d:4c:f7:fb:cb:
         f5:a2:dd:14:d5:95:b3:2a:cb:6a:6c:87:4d:35:7f:05:b0:96:
         53:99:48:46:eb:f1:1b:dd:45:2f:81:e8:4f:eb:09:e2:ec:4d:
         30:f3:e1:e9:f0:e8:97:9a:dd:f6:52:67:fa:e0:f2:8f:9d:e3:
         ae:69:93:7e:d0:95:1a:d1:f5:57:2f:36:41:01:ac:9b:38:96:
         39:0c:d8:86:c9:3d:05:fd:6f:15:30:6a:1a:07:7e:0f:34:cf:
         ae:a8:59:9e:74:03:00:64:11:63:40:74:09:61:45:d2:9d:d5:
         b8:d0:65:b3:36:2e:46:a8:69:af:f7:7a:e1:5c:21:59:da:a2:
         a4:6d:fc:ce:33:f2:c5:81:16:c0:77:be:18:15:b9:4e:0b:a7:
         ae:3a:44:57:6e:c7:a6:6f:46:14:ca:d8:04:1e:c8:a5:82:bb:
         85:e6:b2:fd:d3:5c:a6:79:38:56:79:9b:86:92:22:53:ba:fd:
         fd:da:c6:6a:43:e7:63:25:cc:61:63:52:0b:97:2d:1f:f1:10:
         4a:2b:16:c1:7d:e4:42:a5:c6:98:d7:2f:27:1f:ef:a7:09:e9:
         71:a9:a8:58:2b:6b:fb:17:6f:d0:7e:65:77:8f:be:50:44:20:
         f8:71:24:cb
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUG/a/yEWIGTuIH3REunKnlzp5EJAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2
Nzk2RjBGNjAeFw0yNjA2MDQwMjI4NDJaFw0yNzA2MDMwMjMzNDJaMDMxMTAvBgNV
BAMTKERFNTUyNDBCREQwRDNBRTUyNjZGNzNEQkVBMzhFQzgyMzY2NTg1NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoQzSCc+fBnUbxBORABrtj0f2X
F2P+EiWcF2sIXlTic4DuT937hfDH8M/Rm5srfPHHvJNBuUZATphOzXdeXby11Kd9
56kOYkgZn/oHiZZjqZoBtIOK5gQA4WVGpLCKkeFwgJtovTvoSfe+hp3El4VyXgyZ
xzda2P1kMoz8U4c5YAGlRfOqmJ7eaxXFLrBytNmAi19tpE3ftitS7cal6yPn1+M0
PFDrrv03UkrMwrKT2ssY//e4QWgx57vu0AclCCHsB3ht6C+MVsoDTSqtvGGnsX/M
hJ6eanZVC/KpiDmqzasG5sLaltQ5OagHWpcAMFqy2NRwvoybkmSiM6p3WWaNAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU3lUkC90NOuUmb3Pb6jjsgjZlhXcwHwYDVR0j
BBgwFoAUhFuzB+KhEA6J+gyTmpOJaGeW8PYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU5MTE5NTcyMTc5MzUzNy8wLzg0NUJCMzA3RTJBMTEwMEU4OUZBMEM5MzlBOTM4
OTY4Njc5NkYwRjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvODQ1QkIzMDdFMkExMTAwRTg5RkEwQzkzOUE5Mzg5Njg2Nzk2RjBGNi5jZXIw
XQYIKwYBBQUHAQsEUTBPME0GCCsGAQUFBzALhkFyc3luYzovL3Jwa2ktcnBzLmNu
bmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE3OTM1MzcvMC9BUzE3NDI5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIA
AjAuAwYAJApAAhsDBgUkCkCAgAMGBSQKQJCAAwYFJApAqIADBQEkCkGAAwUBJApC
CDANBgkqhkiG9w0BAQsFAAOCAQEAQTQJRs+wUd5f3QaPdk1M9/vL9aLdFNWVsyrL
amyHTTV/BbCWU5lIRuvxG91FL4HoT+sJ4uxNMPPh6fDol5rd9lJn+uDyj53jrmmT
ftCVGtH1Vy82QQGsmziWOQzYhsk9Bf1vFTBqGgd+DzTPrqhZnnQDAGQRY0B0CWFF
0p3VuNBlszYuRqhpr/d64VwhWdqipG38zjPyxYEWwHe+GBW5TgunrjpEV27Hpm9G
FMrYBB7IpYK7heay/dNcpnk4VnmbhpIiU7r9/drGakPnYyXMYWNSC5ctH/EQSisW
wX3kQqXGmNcvJx/vpwnpcamoWCtr+xdv0H5ld4++UEQg+HEkyw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:16 2026 by rpki-client