Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3137362e302f32322d3332203d3e203233373234.roa
File:                     34332e3234372e3137362e302f32322d3332203d3e203233373234.roa (raw, json)
Hash identifier:          kXh1aILFGsqzSX5a1B6lL34KgEHffHxai+cPwwEYSjM=
Subject key identifier:   14:AD:14:18:DE:17:77:DF:61:3B:6B:EB:9E:87:C5:2D:F5:43:F8:45
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       23C8BF9230B17B45857EF6B3AA076BF658CC4B39
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3137362e302f32322d3332203d3e203233373234.roa
Signing time:             Wed 15 Apr 2026 07:53:25 +0000
ROA not before:           Wed 15 Apr 2026 07:48:25 +0000
ROA not after:            Wed 14 Apr 2027 07:53:25 +0000
asID:                     23724
IP address blocks:        43.247.176.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:c8:bf:92:30:b1:7b:45:85:7e:f6:b3:aa:07:6b:f6:58:cc:4b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:48:25 2026 GMT
            Not After : Apr 14 07:53:25 2027 GMT
        Subject: CN=14AD1418DE1777DF613B6BEB9E87C52DF543F845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:83:32:02:7f:96:d2:8c:93:11:10:33:6f:71:
                    5f:6d:1d:c6:89:ec:c3:dc:55:6e:73:d9:5d:35:83:
                    e8:58:5e:da:77:71:5e:3c:de:c0:0a:ad:c7:19:41:
                    bb:5f:56:a2:c9:90:b4:04:dd:d0:ea:33:53:25:9c:
                    a8:6b:34:17:9a:9b:e2:51:b4:30:f1:bd:c1:62:84:
                    3a:b1:d0:c9:c4:9f:96:80:6c:2d:7b:a0:59:ed:01:
                    ff:64:81:5e:c1:77:af:ee:c2:39:b7:ae:19:73:45:
                    18:7c:b0:01:31:f4:a5:c3:a1:95:44:85:5d:6e:d1:
                    2f:ab:43:d6:2f:f9:78:93:b7:d0:d0:a8:57:b6:f2:
                    0b:33:64:57:66:8d:61:56:84:57:9e:cf:c6:b3:82:
                    22:d8:d2:b4:e2:8a:c9:61:53:aa:c5:2b:87:28:59:
                    5d:03:29:37:8d:65:94:98:28:a1:63:7b:8d:8a:df:
                    44:79:b7:5f:6e:8c:4e:ca:50:db:1b:00:6f:7a:0f:
                    bc:7b:af:2c:18:b4:fb:66:39:1e:2a:8d:2f:2a:78:
                    ff:82:5f:10:0f:c9:93:53:11:3c:07:9a:87:83:a1:
                    7b:f7:43:eb:04:0c:d7:48:87:83:b9:f3:79:e3:ff:
                    ce:10:3f:7b:38:ab:4d:42:9a:f7:d7:d0:74:df:55:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AD:14:18:DE:17:77:DF:61:3B:6B:EB:9E:87:C5:2D:F5:43:F8:45
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3137362e302f32322d3332203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:57:4d:a2:98:e4:88:c1:e5:50:32:63:9b:e4:97:f2:90:b8:
         d3:3c:d5:3f:38:38:e1:ce:3a:68:91:72:7c:34:27:7a:1c:27:
         22:a1:e3:c9:d3:66:d5:1b:30:b1:94:06:e5:fc:3b:0d:0d:3a:
         0e:98:a0:b9:39:1e:8c:18:ac:a7:1c:d4:e0:8a:e6:c0:07:ec:
         72:be:f1:fe:e6:7f:ae:cd:0e:cd:44:76:0f:c4:79:4f:81:9c:
         0d:7f:0c:eb:de:11:6a:96:2b:51:af:80:58:bc:4d:a2:d9:eb:
         a9:20:c7:cb:92:d6:f4:8e:5e:4f:01:97:e2:1d:9b:6f:d0:cc:
         49:58:82:f0:a4:23:bc:fb:4b:70:33:e2:c3:c4:db:f4:7c:85:
         20:ae:f0:45:63:35:b4:59:28:54:30:ea:46:d6:4f:99:e3:c1:
         1d:8b:0d:25:ff:36:74:bb:6c:db:75:19:f9:59:90:21:75:2b:
         c9:08:9d:a9:59:f1:cc:fa:4f:f0:0e:be:c0:1e:ad:66:f4:29:
         a8:81:92:d2:2e:e7:fd:a7:8b:a4:e7:9b:db:7b:a8:8a:26:90:
         b4:d9:7b:48:a0:8d:36:b3:2d:82:20:f8:00:91:82:3c:15:ea:
         03:08:e1:6d:cd:82:f5:87:ca:fe:5a:cd:ce:4b:d8:fb:db:cb:
         82:51:fd:99
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:27:58 2026 by rpki-client