Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa
File:                     34332e3234372e342e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=
Subject key identifier:   6F:E7:37:B8:E3:1A:0D:8F:B8:D6:7E:75:4A:C0:9F:B2:8A:38:58:09
Certificate issuer:       /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial:       75E4411156A489793773979CD74BD1B00162AB7C
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 03:46:31 +0000
ROA not before:           Wed 15 Apr 2026 03:41:31 +0000
ROA not after:            Wed 14 Apr 2027 03:46:31 +0000
asID:                     4837
IP address blocks:        43.247.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e4:41:11:56:a4:89:79:37:73:97:9c:d7:4b:d1:b0:01:62:ab:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
        Validity
            Not Before: Apr 15 03:41:31 2026 GMT
            Not After : Apr 14 03:46:31 2027 GMT
        Subject: CN=6FE737B8E31A0D8FB8D67E754AC09FB28A385809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:db:64:07:f6:58:38:2a:24:d1:58:8e:65:
                    d0:bc:d4:01:7f:a5:ad:41:df:f0:8e:3d:a6:da:ca:
                    f3:78:d4:e2:46:df:9f:54:0e:48:3a:b5:78:e3:8e:
                    17:e2:39:91:d7:2e:4d:60:b1:bd:53:d0:a8:21:7a:
                    05:8d:60:be:b1:86:b4:fb:fd:61:c0:6b:a2:bb:f9:
                    a5:0e:ae:06:5e:91:89:bf:84:a7:07:2d:ce:2c:84:
                    72:36:1d:67:ab:ca:60:1f:38:12:7a:06:76:4e:38:
                    5f:be:45:15:d1:bf:c4:91:2d:8a:4b:21:f2:20:c3:
                    3e:93:6e:1d:d1:00:ec:de:ab:73:c6:b3:f2:8b:dd:
                    59:c7:4f:05:f1:66:05:85:87:14:df:be:21:01:74:
                    af:38:7a:b8:fc:22:34:6a:b3:d3:f0:0e:3f:e6:48:
                    c4:9b:e2:76:11:f1:ee:68:22:28:5b:3c:75:67:1a:
                    94:3e:a8:ab:3e:ee:15:82:49:86:5a:c8:c0:41:e2:
                    c2:b9:58:0b:dd:d2:90:3b:bc:ee:fd:bb:cb:84:12:
                    2a:57:5a:a3:d7:e9:f4:aa:d6:40:9e:6b:41:f5:21:
                    d0:b0:dd:bc:d4:fa:fd:80:2d:0c:60:56:d1:4f:de:
                    0a:d2:39:1c:7c:b3:02:c0:f6:58:86:a8:b6:22:f7:
                    92:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E7:37:B8:E3:1A:0D:8F:B8:D6:7E:75:4A:C0:9F:B2:8A:38:58:09
            X509v3 Authority Key Identifier:
                keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:f8:31:1f:b1:79:f8:8a:b3:f7:f8:8e:51:d8:a2:e8:60:d1:
         6d:dc:ca:99:3f:b2:0a:f3:17:57:e6:7b:8a:90:37:01:49:bd:
         a3:f6:8b:f4:59:b3:09:cc:68:ab:3f:6d:6e:31:94:e1:a7:0a:
         9e:8d:e7:13:3f:72:10:24:73:48:a0:46:08:56:23:87:52:6c:
         74:2b:e2:51:48:90:ef:80:8e:95:09:4b:77:61:6a:75:6c:c7:
         59:34:96:fd:85:a0:3f:69:12:66:f3:7f:8f:a0:16:e0:f0:14:
         c1:b3:4f:db:8b:27:12:fe:02:b1:0d:e1:66:22:bf:22:1b:9a:
         52:06:5e:5b:99:49:26:2e:45:42:cd:6e:0e:f5:c7:4a:a1:28:
         39:3d:26:03:7d:2b:f2:20:f7:bd:c8:da:3b:18:17:f2:3b:07:
         ef:e6:82:48:eb:bf:cf:f4:e4:b5:6a:cc:d1:dd:e6:4f:1d:10:
         a8:2a:35:12:ed:75:83:60:fd:ad:16:dd:b3:17:0a:53:c4:92:
         ac:13:a3:89:98:8e:77:24:1b:02:85:6d:a2:b6:9c:93:a7:99:
         e0:a1:8b:b5:03:35:eb:17:c1:61:41:42:7d:c5:f1:ac:52:2f:
         1e:59:dc:71:75:72:a2:90:68:35:1f:f3:61:72:cc:91:1b:39:
         f0:4d:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:50 2026 by rpki-client