Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34332e3235302e3233362e302f32322d3232203d3e203539303239.roa
File:                     34332e3235302e3233362e302f32322d3232203d3e203539303239.roa (raw, json)
Hash identifier:          yDMG2xBFbP/fV4vCPYabz9wbUIwX/13/VFMSeiY77pk=
Subject key identifier:   62:1B:93:BD:CB:9C:3D:D2:D6:CA:64:16:77:16:45:18:0E:53:A0:00
Certificate issuer:       /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
Certificate serial:       3226321B5B170F47C66DB841E39BE8DF62D17BEE
Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34332e3235302e3233362e302f32322d3232203d3e203539303239.roa
Signing time:             Thu 16 Apr 2026 07:14:30 +0000
ROA not before:           Thu 16 Apr 2026 07:09:30 +0000
ROA not after:            Thu 15 Apr 2027 07:14:30 +0000
asID:                     59029
IP address blocks:        43.250.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:26:32:1b:5b:17:0f:47:c6:6d:b8:41:e3:9b:e8:df:62:d1:7b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551
        Validity
            Not Before: Apr 16 07:09:30 2026 GMT
            Not After : Apr 15 07:14:30 2027 GMT
        Subject: CN=621B93BDCB9C3DD2D6CA6416771645180E53A000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:01:87:7e:fa:c1:b3:eb:d1:7c:1b:0a:db:
                    b6:8b:c6:97:58:40:1b:dc:9a:3b:39:da:19:a1:50:
                    1f:1e:cc:9c:66:7e:24:67:08:54:ed:71:e9:8e:f6:
                    54:db:d4:de:32:6f:29:5c:17:75:80:81:20:cb:50:
                    c8:1c:60:1d:88:7b:02:c9:4d:dd:b2:0a:3a:23:08:
                    83:83:fc:ae:f6:b6:f6:71:47:ff:73:ce:93:95:0e:
                    35:20:06:9e:18:b1:be:bc:f2:01:35:9f:2f:00:af:
                    c6:eb:70:dd:4c:c2:e7:fc:b8:22:f6:2e:86:55:24:
                    5d:17:d9:06:32:fb:6d:2a:c1:29:c6:1a:4c:9d:ff:
                    06:17:3f:3b:8b:b0:77:e0:f9:92:3f:97:de:10:b5:
                    be:7b:4a:2c:c3:4a:80:46:4b:88:02:fd:d6:d7:db:
                    e8:a2:d2:3a:d5:dd:2d:82:2d:51:62:05:2e:e0:9d:
                    e2:e9:b5:f0:78:47:4d:9e:24:ac:c4:84:57:81:1d:
                    a6:96:cf:5d:80:73:b1:b7:e6:80:f4:19:a7:ab:71:
                    7d:e0:92:43:74:08:b6:01:a8:32:1d:df:f0:0e:e5:
                    a5:f5:85:1f:4c:95:e7:0d:f1:00:24:db:43:a8:93:
                    2c:e9:1f:7a:20:ca:ac:3e:b8:ef:e4:22:14:59:67:
                    68:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:93:BD:CB:9C:3D:D2:D6:CA:64:16:77:16:45:18:0E:53:A0:00
            X509v3 Authority Key Identifier:
                keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/34332e3235302e3233362e302f32322d3232203d3e203539303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.250.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:b2:61:b2:ff:f9:0f:46:89:b1:a5:ad:e4:2b:d9:be:6f:a3:
         a3:69:d1:d6:80:1e:ca:88:b3:af:d5:72:ce:6f:5d:49:16:9f:
         8b:dd:a2:d2:fd:d3:11:ae:ea:54:28:f2:0d:7c:a7:2b:17:2f:
         a7:f0:37:bf:6c:4e:c4:5c:60:3f:c5:c7:04:a1:20:82:cb:29:
         25:18:41:65:14:fa:94:35:da:19:2e:3f:ac:82:0c:f4:9a:dc:
         4c:70:58:dd:e6:0b:49:96:a6:85:9c:d0:dd:ef:c3:88:50:72:
         4a:bd:1e:3b:f9:95:eb:ee:7f:38:cd:ea:ca:03:20:38:0a:71:
         f9:89:9e:4f:99:df:40:56:6b:3b:32:9a:7a:74:05:68:51:7f:
         5e:6f:6b:90:91:b0:7c:7a:e3:be:1b:4b:a9:fa:a2:67:19:34:
         95:7e:f5:55:ed:34:62:cf:9c:f3:a8:5f:4c:c2:9f:7b:6f:6f:
         6e:09:c3:23:a3:d0:58:56:62:88:4f:e0:04:9b:75:8b:19:a0:
         d8:40:42:92:56:a2:da:fd:9d:23:bf:ee:b8:8c:54:d5:32:06:
         61:fa:88:b9:0c:28:e0:d5:2d:c4:dc:ba:23:7c:f8:80:1c:9e:
         22:96:74:ce:49:f0:cc:b3:d4:81:2c:32:65:a5:4a:3b:cd:b1:
         ad:cf:16:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:43:21 2026 by rpki-client