Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3135302e302f32332d3233203d3e203137363231.roa
File:                     34332e3234332e3135302e302f32332d3233203d3e203137363231.roa (raw, json)
Hash identifier:          wy0wI1YW9E9hNMG0sbtfRSr7LGiTue4V338PcZiQJ0E=
Subject key identifier:   24:31:6D:F2:E4:DE:08:D6:25:51:E4:27:93:BD:69:FD:E7:79:43:F7
Certificate issuer:       /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial:       494728CD8814EFDE0B62BFAF212C2C0B48C82D90
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3135302e302f32332d3233203d3e203137363231.roa
Signing time:             Wed 15 Apr 2026 04:15:18 +0000
ROA not before:           Wed 15 Apr 2026 04:10:18 +0000
ROA not after:            Wed 14 Apr 2027 04:15:18 +0000
asID:                     17621
IP address blocks:        43.243.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 12:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:47:28:cd:88:14:ef:de:0b:62:bf:af:21:2c:2c:0b:48:c8:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
        Validity
            Not Before: Apr 15 04:10:18 2026 GMT
            Not After : Apr 14 04:15:18 2027 GMT
        Subject: CN=24316DF2E4DE08D62551E42793BD69FDE77943F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:6c:0e:be:07:df:8d:9f:47:e0:34:ef:b0:f4:
                    55:5b:6e:5e:ee:c8:75:2f:bc:98:a4:04:9b:b0:58:
                    cb:6e:ae:9e:67:36:ac:23:46:fd:94:7e:c7:06:5b:
                    8b:06:b3:0d:4f:91:29:bc:1f:c3:4f:8d:09:6f:26:
                    68:c5:e2:ae:86:c3:cb:58:8d:6e:77:8a:e2:ef:e0:
                    a4:e3:9a:88:ff:05:c4:ff:77:1d:a0:3e:d2:2b:f8:
                    9b:4f:20:f9:ac:fa:ae:23:e0:a8:69:26:0e:d5:72:
                    12:bc:f3:63:75:fc:83:19:da:87:d0:8e:73:e6:5d:
                    9c:a7:86:a3:23:52:2f:93:0b:e0:0c:f0:2f:32:ea:
                    88:fd:c7:5c:43:11:d7:38:87:35:83:a3:93:cc:12:
                    f9:92:a1:d8:f9:7e:bf:dc:af:8c:78:19:95:14:57:
                    02:45:16:24:71:65:f7:3e:4e:bd:27:15:8e:cc:a1:
                    fe:e0:f2:54:f2:66:75:3b:d3:e0:b8:8e:27:34:b0:
                    aa:49:24:eb:e4:a5:56:fa:d9:de:c5:0c:0a:df:ce:
                    52:32:7f:9b:8f:9b:90:36:e1:b8:20:c4:8e:af:ec:
                    1c:72:22:2f:d8:a4:fb:d4:9a:dc:7d:bc:0b:fb:cf:
                    42:3c:c7:1b:44:bb:70:2d:45:7f:47:e8:dc:64:2a:
                    18:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:31:6D:F2:E4:DE:08:D6:25:51:E4:27:93:BD:69:FD:E7:79:43:F7
            X509v3 Authority Key Identifier:
                keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234332e3135302e302f32332d3233203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.243.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:48:24:df:dd:54:71:04:1e:35:e6:ae:49:23:4b:00:3b:92:
         73:84:64:f8:a4:f2:13:61:26:46:f1:3c:61:eb:8d:50:36:f6:
         20:e5:e9:1e:c1:1e:eb:de:e1:fa:a5:3c:61:35:d9:aa:93:80:
         75:4c:05:4f:ae:19:f1:65:79:51:e1:89:05:f9:5c:89:46:36:
         78:d9:96:59:5e:50:96:2c:52:b9:59:dc:6d:ea:64:0c:28:39:
         a3:ea:d7:a2:72:30:ca:56:46:6f:5f:a3:85:4a:7c:83:22:cc:
         2e:14:83:40:2c:90:9c:cd:48:00:7a:2e:c9:3b:a7:0e:54:79:
         64:96:d7:b9:cc:61:f7:19:60:09:74:52:dc:36:a2:f2:df:93:
         7f:d5:93:5e:cd:16:2e:93:78:ef:bc:ae:51:db:b9:e3:72:53:
         3c:fb:49:e2:da:d4:82:7e:c6:0d:ec:f0:0c:41:7c:a4:fb:df:
         2f:f1:0a:d0:ad:b3:e0:01:02:d9:5d:bb:33:15:e2:1f:9b:9d:
         41:77:11:10:c6:7e:49:41:1d:13:44:71:40:9c:fd:fb:6f:cc:
         b2:0f:f2:93:57:f0:0b:98:14:5d:37:63:a4:b3:e6:45:65:63:
         e1:ec:ee:ae:79:0a:ba:64:99:12:f6:64:44:f1:e4:f8:b7:b8:
         54:bd:9b:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:32 2026 by rpki-client