Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa
File:                     34322e3139352e302e302f31362d3136203d3e2030.roa (raw, json)
Hash identifier:          5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=
Subject key identifier:   18:FD:DA:D8:73:99:A7:E3:96:52:42:DC:24:8F:B8:5D:96:90:E6:AD
Certificate issuer:       /CN=786588C287D0F949A379F4D51335F9423A0E03E3
Certificate serial:       28EE57CBA18BB7D9BD7B51CAD5BDA273F2C70B36
Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa
Signing time:             Wed 15 Apr 2026 13:29:37 +0000
ROA not before:           Wed 15 Apr 2026 13:24:37 +0000
ROA not after:            Wed 14 Apr 2027 13:29:37 +0000
asID:                     0
IP address blocks:        42.195.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 11:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:57:cb:a1:8b:b7:d9:bd:7b:51:ca:d5:bd:a2:73:f2:c7:0b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3
        Validity
            Not Before: Apr 15 13:24:37 2026 GMT
            Not After : Apr 14 13:29:37 2027 GMT
        Subject: CN=18FDDAD87399A7E3965242DC248FB85D9690E6AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:29:93:d2:3c:ab:b8:fe:3d:0b:e7:ce:78:9b:
                    56:99:7e:6e:fc:48:34:bc:e6:f5:8c:eb:59:2c:95:
                    30:87:b1:8f:10:fa:72:78:37:2a:ff:c1:ff:c4:7d:
                    16:73:82:02:04:8e:26:93:78:a2:1c:e0:83:96:84:
                    a0:85:0c:c2:c4:79:15:5c:8b:b1:68:79:36:36:6b:
                    ad:f3:d5:fc:e3:8f:9f:fd:1d:ab:81:34:8d:0b:8d:
                    2f:14:81:07:bc:ec:68:a4:2b:51:af:2d:16:10:b2:
                    21:fd:49:9d:0e:c9:bd:cc:2c:7a:f1:ff:b4:9e:98:
                    e6:42:3a:63:f4:cf:b0:bc:7d:d6:e1:f9:2b:99:a7:
                    48:8c:3d:7a:b1:a2:12:16:f5:94:0f:18:92:f1:c4:
                    a5:23:ae:8c:ce:ee:61:91:aa:e4:1e:0c:a5:6c:2a:
                    23:1c:45:fe:d1:cb:b6:bf:17:e6:d0:17:f4:c8:a3:
                    f7:81:5f:ad:8e:af:42:ee:e3:28:36:3d:be:19:ca:
                    c5:9d:64:5b:f1:e6:89:ce:4d:60:c9:42:31:96:8f:
                    bf:9c:00:5f:75:a2:ec:9b:a4:96:ad:98:0d:e6:7f:
                    5b:46:98:e3:75:a3:ad:f9:e9:5a:32:e6:05:41:a0:
                    ba:ba:a2:46:cb:2c:cb:f4:70:47:cb:85:e4:9c:a0:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FD:DA:D8:73:99:A7:E3:96:52:42:DC:24:8F:B8:5D:96:90:E6:AD
            X509v3 Authority Key Identifier:
                keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:15:b6:bd:a1:09:94:60:04:02:37:79:77:6b:a1:92:bd:8a:
         da:08:9a:5b:8a:bb:dc:da:43:b1:d6:7b:50:18:17:54:ee:d3:
         ff:17:44:3e:95:de:22:05:17:7c:6e:2a:d5:15:e5:dc:63:f4:
         7f:1d:42:6d:7b:b1:ff:a6:e3:52:f8:c2:6e:e6:3b:25:d2:ed:
         2d:64:03:34:59:7b:b0:53:79:24:4f:1c:bc:ee:2c:83:a0:46:
         76:d2:6a:1d:e9:73:2c:d5:80:4e:f8:46:0a:ee:c8:e8:6f:9a:
         cb:1e:25:b6:53:5b:28:88:de:66:fa:57:53:a9:9f:37:81:11:
         36:98:5c:9e:72:f1:78:6a:83:dd:b9:54:1c:f9:0e:ee:64:d5:
         f2:85:ff:49:5f:3a:07:52:27:f5:08:d8:2b:92:0c:04:b2:69:
         0a:54:61:8c:d7:f0:55:12:b3:f8:75:e3:fc:c8:4c:39:01:e7:
         eb:54:26:49:7a:ea:b7:4f:26:6a:da:c7:67:80:dd:48:7b:b0:
         d8:6a:fa:f4:46:4d:3f:30:b8:f6:c3:2b:aa:61:d1:f1:23:0b:
         bf:9c:2c:5e:e7:46:24:ee:14:38:af:44:7d:b8:81:22:25:4a:
         11:4a:ea:85:1d:c8:2c:1f:46:11:bf:9e:a6:d1:01:a7:6d:ac:
         42:d9:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:42 2026 by rpki-client