Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa
File:                     34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier:          IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=
Subject key identifier:   EA:C2:C4:0D:38:4B:94:CA:A9:ED:32:C6:34:B7:1D:F0:4E:E0:E2:8B
Certificate issuer:       /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial:       560BE3F91B742B431AA19DAB59E2A9422A3F5E3D
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa
Signing time:             Wed 15 Apr 2026 07:02:19 +0000
ROA not before:           Wed 15 Apr 2026 06:57:19 +0000
ROA not after:            Wed 14 Apr 2027 07:02:19 +0000
asID:                     4837
IP address blocks:        43.239.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 19:37:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:0b:e3:f9:1b:74:2b:43:1a:a1:9d:ab:59:e2:a9:42:2a:3f:5e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
        Validity
            Not Before: Apr 15 06:57:19 2026 GMT
            Not After : Apr 14 07:02:19 2027 GMT
        Subject: CN=EAC2C40D384B94CAA9ED32C634B71DF04EE0E28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d6:14:a4:50:02:db:a8:23:22:f1:78:d5:e8:
                    ed:e0:ce:ed:ce:83:6f:dc:1c:6e:65:16:9e:00:98:
                    dd:61:77:d5:ba:07:aa:23:a9:88:b0:b5:a9:b5:f4:
                    b2:df:ee:3e:da:ce:b9:4c:5b:1f:30:f5:94:1f:3b:
                    5e:18:4a:68:84:9e:bf:27:23:ef:2d:cb:11:b5:5e:
                    08:fe:a3:fa:22:d4:af:6d:c5:9d:ca:17:54:9e:75:
                    15:e0:bb:9f:e3:6c:58:61:40:d4:3b:c4:1a:09:09:
                    aa:a3:6d:47:38:39:96:f4:7d:53:ea:52:fc:8b:0e:
                    3f:8c:2c:a5:55:86:51:88:fd:68:94:68:bc:a9:0e:
                    72:45:d2:cc:08:5d:4b:6c:9b:e2:36:7c:cf:56:cc:
                    47:a0:5f:47:64:f6:60:f6:5e:5c:9e:a7:fb:40:0a:
                    a3:fc:82:46:7d:57:3d:14:4f:de:be:d3:ed:43:d8:
                    fd:30:91:8b:09:e7:e8:18:2d:d7:90:d0:a1:40:52:
                    c6:5c:6e:f7:17:df:c0:92:ce:d1:aa:ce:18:24:e3:
                    7e:73:d4:e4:1d:0f:c0:19:5a:76:6b:af:13:63:df:
                    ef:8e:e6:0d:33:f8:cf:48:94:af:fa:ce:27:53:15:
                    64:ff:95:8b:46:80:a2:fb:a4:cb:f3:50:15:85:43:
                    dd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:C4:0D:38:4B:94:CA:A9:ED:32:C6:34:B7:1D:F0:4E:E0:E2:8B
            X509v3 Authority Key Identifier:
                keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.239.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:0b:73:32:bf:7b:4b:62:3c:30:aa:dc:ad:1f:ab:e2:e5:86:
         ad:d6:69:ca:7a:c3:d7:bd:5d:04:cf:93:e5:f3:5d:fc:5c:1b:
         d5:6e:8b:f3:5b:6a:c4:09:d7:95:95:b5:a2:c7:bd:05:f7:2c:
         2b:d0:08:ca:61:61:b5:73:8c:00:b7:bf:1c:51:5f:00:9d:9d:
         7d:2d:62:bf:df:06:99:f6:4a:fc:b0:7c:c6:78:9a:d9:b1:08:
         1d:25:33:57:97:d1:ab:6b:a6:d5:b3:51:2b:6b:cd:37:c5:aa:
         08:aa:e1:24:82:ad:15:5a:b8:ce:46:45:a3:b1:84:ac:f5:f2:
         b1:54:53:c8:a2:9b:5f:f0:07:1f:29:5a:b2:5b:c8:d9:3e:c0:
         c6:fb:24:1a:be:b3:73:14:6f:3c:c6:f7:ff:8e:2c:c6:c9:31:
         02:56:ac:9f:b9:b4:7f:39:70:cd:13:ac:50:37:be:d6:38:29:
         a3:0b:f6:63:22:91:97:dc:28:ea:0e:53:4e:85:8d:7d:4e:0b:
         c6:86:8a:31:48:2d:5a:1c:e3:a1:1d:e1:f3:a2:66:2b:23:a6:
         40:9d:59:28:98:10:cc:40:60:ca:5e:16:74:75:25:12:b8:5f:
         4f:82:1b:86:59:7c:84:f9:09:ee:24:db:c8:eb:e2:b7:11:cf:
         98:ba:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:26 2026 by rpki-client