Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138302e302f32322d3332203d3e203233373234.roa
File:                     34332e3234372e3138302e302f32322d3332203d3e203233373234.roa (raw, json)
Hash identifier:          EMPMxp7WGYunb3+ocphXSeWOGTrTyusq1QllbU39Lhg=
Subject key identifier:   05:AB:24:98:B5:DA:B5:2A:C6:32:9A:2B:41:E7:2F:F9:3F:EB:4E:AD
Certificate issuer:       /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial:       5C532A2722C68F75329920421206DABE1DFFBFE8
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138302e302f32322d3332203d3e203233373234.roa
Signing time:             Wed 15 Apr 2026 07:53:44 +0000
ROA not before:           Wed 15 Apr 2026 07:48:44 +0000
ROA not after:            Wed 14 Apr 2027 07:53:44 +0000
asID:                     23724
IP address blocks:        43.247.180.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:53:2a:27:22:c6:8f:75:32:99:20:42:12:06:da:be:1d:ff:bf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
        Validity
            Not Before: Apr 15 07:48:44 2026 GMT
            Not After : Apr 14 07:53:44 2027 GMT
        Subject: CN=05AB2498B5DAB52AC6329A2B41E72FF93FEB4EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f4:2e:27:e1:2a:ee:28:7e:f4:9b:b3:da:6b:
                    c1:bb:fa:16:7b:a8:66:85:25:50:cd:56:90:92:2a:
                    60:f8:e5:7d:1b:3c:e5:2c:22:03:f7:85:69:0f:e4:
                    3f:ef:e9:5e:66:cd:60:e9:d6:89:5a:af:37:85:28:
                    da:9f:66:ea:1e:a8:69:27:1c:f4:86:b1:03:c3:fd:
                    0c:df:67:25:91:b3:65:9f:88:22:3a:64:08:51:bf:
                    68:3c:cd:2d:ca:af:16:eb:10:05:4e:3f:5b:20:4e:
                    58:2d:f5:09:f5:77:e5:48:f7:36:49:32:c3:50:7f:
                    c2:b2:05:da:0a:9d:16:4c:e6:da:f1:9d:30:27:06:
                    96:eb:f2:09:bc:c8:fb:9f:6f:93:1b:5c:9e:fe:8c:
                    8c:c2:e1:27:c3:54:09:d6:0d:11:40:75:54:da:3c:
                    38:8c:2e:c8:28:49:f6:e5:d9:59:60:bb:68:9b:52:
                    13:9e:f8:bc:94:22:cb:25:d6:e5:be:c7:09:33:a9:
                    de:ee:3a:53:58:da:85:de:11:ec:34:48:a4:7e:57:
                    87:5d:ea:94:05:56:83:83:75:af:f8:53:b0:7e:45:
                    28:97:b6:cf:a8:09:eb:dc:d1:2a:64:0d:3e:79:42:
                    69:15:d8:32:40:f1:3b:e8:c1:a8:f9:e6:9d:b4:6d:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:24:98:B5:DA:B5:2A:C6:32:9A:2B:41:E7:2F:F9:3F:EB:4E:AD
            X509v3 Authority Key Identifier:
                keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138302e302f32322d3332203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.247.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:f5:8d:29:68:b2:ee:76:29:90:57:97:12:3b:77:da:34:
         d5:b2:56:f0:4b:81:bc:05:85:31:e6:f1:07:8c:20:c2:89:b3:
         38:dd:d8:33:c1:a0:de:79:4c:2b:84:19:dd:46:89:6b:85:f5:
         e0:64:f2:65:1d:a9:c9:0c:2f:55:aa:aa:f7:ce:fc:0d:f6:a8:
         e3:ee:03:fd:6b:15:07:08:e2:11:ec:74:3d:8d:42:18:2e:f2:
         5e:5b:50:ec:26:1a:3f:43:99:d8:b4:e1:4b:3b:ec:a3:7f:db:
         db:af:02:9f:50:90:52:cd:f2:7c:95:6c:e7:c0:d9:45:21:f0:
         b1:28:23:88:d5:6c:e5:bd:c7:a6:cb:78:e5:73:3e:54:42:59:
         62:65:0e:18:92:14:3f:9a:38:5f:c8:04:42:fb:16:5f:3a:9a:
         b4:d4:fb:97:28:61:b1:8c:dd:b8:e0:c4:f2:cc:1a:00:46:1c:
         4b:33:09:ac:13:e5:ea:f5:e9:f9:62:db:2c:ad:cb:bf:6c:1c:
         ad:f6:65:e5:1d:62:43:54:1b:d0:f1:4f:10:e4:fa:99:a3:31:
         90:8e:7f:4e:2c:2e:10:c4:93:03:f6:bd:5f:72:da:b7:f3:a2:
         de:4d:c6:65:4e:1c:47:e2:8e:37:67:4b:99:56:47:8b:82:77:
         93:84:d4:d1
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUXFMqJyLGj3UymSBCEgbavh3/v+gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3
OEMxRTMxNTAeFw0yNjA0MTUwNzQ4NDRaFw0yNzA0MTQwNzUzNDRaMDMxMTAvBgNV
BAMTKDA1QUIyNDk4QjVEQUI1MkFDNjMyOUEyQjQxRTcyRkY5M0ZFQjRFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC89C4n4SruKH70m7Paa8G7+hZ7
qGaFJVDNVpCSKmD45X0bPOUsIgP3hWkP5D/v6V5mzWDp1olarzeFKNqfZuoeqGkn
HPSGsQPD/QzfZyWRs2WfiCI6ZAhRv2g8zS3KrxbrEAVOP1sgTlgt9Qn1d+VI9zZJ
MsNQf8KyBdoKnRZM5trxnTAnBpbr8gm8yPufb5MbXJ7+jIzC4SfDVAnWDRFAdVTa
PDiMLsgoSfbl2Vlgu2ibUhOe+LyUIssl1uW+xwkzqd7uOlNY2oXeEew0SKR+V4dd
6pQFVoODda/4U7B+RSiXts+oCevc0SpkDT55QmkV2DJA8Tvowaj55p20bXxxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUBaskmLXatSrGMporQecv+T/rTq0wHwYDVR0j
BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB
OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NTk4NDI5NDc2NzA5OTkwNS8wLzM0MzMyZTMyMzQz
NzJlMzEzODMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAiv3tDANBgkqhkiG9w0BAQsFAAOCAQEAkZr1jSlosu52KZBXlxI7d9o0
1bJW8EuBvAWFMebxB4wgwomzON3YM8Gg3nlMK4QZ3UaJa4X14GTyZR2pyQwvVaqq
9878Dfao4+4D/WsVBwjiEex0PY1CGC7yXltQ7CYaP0OZ2LThSzvso3/b268Cn1CQ
Us3yfJVs58DZRSHwsSgjiNVs5b3Hpst45XM+VEJZYmUOGJIUP5o4X8gEQvsWXzqa
tNT7lyhhsYzduODE8swaAEYcSzMJrBPl6vXp+WLbLK3Lv2wcrfZl5R1iQ1Qb0PFP
EOT6maMxkI5/TiwuEMSTA/a9X3Lat/Oi3k3GZU4cR+KON2dLmVZHi4J3k4TU0Q==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:01:11 2026 by rpki-client