Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa
File:                     34332e3234312e3234382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          WR5+MMV6fcmpEl32Y/itrNkE2lY4uxL4vkWnSxWvFIo=
Subject key identifier:   F9:D9:5B:73:3D:B0:23:1B:57:52:4B:02:BB:74:00:B3:13:99:A9:60
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       2B5F8B931EE292867F1170AA05766D6BBAD6A3F5
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa
Signing time:             Wed 15 Apr 2026 03:58:43 +0000
ROA not before:           Wed 15 Apr 2026 03:53:43 +0000
ROA not after:            Wed 14 Apr 2027 03:58:43 +0000
asID:                     0
IP address blocks:        43.241.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 17:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:5f:8b:93:1e:e2:92:86:7f:11:70:aa:05:76:6d:6b:ba:d6:a3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 03:53:43 2026 GMT
            Not After : Apr 14 03:58:43 2027 GMT
        Subject: CN=F9D95B733DB0231B57524B02BB7400B31399A960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:96:98:5e:9b:e7:e8:0a:24:32:c4:97:26:
                    b6:05:c4:1f:4c:3b:fe:e0:92:54:67:b9:1f:06:60:
                    be:b9:14:32:06:f6:ca:1b:ce:93:da:4a:20:00:28:
                    2c:c6:c7:4f:c1:30:82:dd:ee:8f:ef:df:3d:8f:a7:
                    ee:bf:5c:fc:1b:2c:e5:7c:6c:84:95:ac:21:51:b3:
                    f9:dd:0e:47:d9:9b:75:15:27:f5:34:82:72:a0:92:
                    27:4f:40:35:cd:97:55:1a:ad:d9:c3:d2:0e:59:fb:
                    3b:14:0c:31:c8:83:09:fc:da:b4:cd:39:fb:ef:93:
                    0a:d5:7b:a1:1a:db:b5:49:d4:81:a5:04:b7:e2:3e:
                    84:f5:45:a7:70:68:ec:d9:63:ed:a7:42:e5:ec:7f:
                    52:c4:c3:80:73:04:ac:9a:88:de:c8:59:99:ae:53:
                    26:8a:f2:0f:4e:62:b8:46:e2:de:8d:e6:ed:55:7c:
                    0a:b7:22:f8:49:56:19:44:1c:d0:ef:60:65:de:29:
                    91:3f:2a:4a:95:56:87:56:b3:d0:70:42:ca:ed:13:
                    76:73:50:b9:c5:5e:c8:f8:b6:f5:95:d1:20:90:6a:
                    ad:68:e8:c9:fa:28:37:77:89:7e:3b:da:73:e3:01:
                    e5:41:5b:8d:00:7d:2c:27:ab:15:12:9a:08:2b:ed:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D9:5B:73:3D:B0:23:1B:57:52:4B:02:BB:74:00:B3:13:99:A9:60
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.241.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:cb:7c:af:47:39:c3:78:9e:4d:a8:5f:e1:e3:69:b4:01:51:
         8b:aa:d9:5e:39:bd:bd:93:62:60:cd:b5:74:e8:0b:4f:d9:86:
         1c:fc:e5:d7:f2:50:d3:0d:cc:98:f7:cc:20:96:e9:8d:64:8b:
         2e:60:8c:60:4d:c0:30:5f:1f:32:39:cd:43:06:42:3e:52:3f:
         20:9b:3c:e1:0d:7b:b9:9f:3c:b4:61:00:90:36:5e:6d:39:07:
         f8:e8:61:8d:7d:98:e9:66:e5:12:71:e9:68:0b:ba:5d:08:56:
         3e:79:39:ad:50:a5:bb:e4:e2:b1:c7:dd:69:84:f3:6f:dd:2e:
         7d:0c:d7:20:ea:97:65:52:21:ad:34:ab:f0:33:21:dd:f0:41:
         06:a5:d5:7c:c7:ba:dc:2b:21:1e:d7:33:c7:1b:09:1a:8f:35:
         fe:08:d0:08:48:15:93:7e:e0:63:a3:70:ef:54:e3:67:3c:87:
         2e:c0:0a:05:a7:71:d9:25:5e:e4:a1:82:20:b9:a1:d5:2c:e2:
         bd:73:ed:b3:eb:da:08:36:c2:07:eb:24:fb:4f:b1:c5:9c:a5:
         eb:93:40:20:49:1e:71:c1:71:50:90:7d:0f:8d:f6:e6:4e:7a:
         ed:96:97:ab:02:64:c3:aa:7e:a3:d6:fa:07:ef:98:53:15:76:
         94:8b:c3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:38 2026 by rpki-client