Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203538383334.roa
File:                     34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (raw, json)
Hash identifier:          ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=
Subject key identifier:   44:DD:14:B9:03:B1:B3:B9:3C:0A:F1:47:7C:33:73:59:EF:02:6D:CE
Certificate issuer:       /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial:       2CF973D585A269DE8DD67B4533AE0D9CDEF9BA18
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203538383334.roa
Signing time:             Fri 17 Apr 2026 01:28:27 +0000
ROA not before:           Fri 17 Apr 2026 01:23:27 +0000
ROA not after:            Fri 16 Apr 2027 01:28:27 +0000
asID:                     58834
IP address blocks:        49.239.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f9:73:d5:85:a2:69:de:8d:d6:7b:45:33:ae:0d:9c:de:f9:ba:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
        Validity
            Not Before: Apr 17 01:23:27 2026 GMT
            Not After : Apr 16 01:28:27 2027 GMT
        Subject: CN=44DD14B903B1B3B93C0AF1477C337359EF026DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:69:ee:00:0e:bd:e0:9d:28:12:27:97:e1:
                    c3:6c:65:f3:29:d0:e8:53:97:08:4e:bf:ed:32:df:
                    ac:22:28:fe:e8:5b:38:bb:68:c0:bd:d6:b6:95:c5:
                    63:53:76:4d:d7:d3:e8:69:f7:5b:7e:1e:35:23:39:
                    74:6c:54:98:d9:8f:d8:f0:d3:aa:9b:c6:c3:a1:89:
                    f0:39:a2:12:86:95:a2:29:d6:3d:46:5b:27:e6:d8:
                    cb:c1:56:df:dd:03:92:04:50:f4:82:1b:50:49:e6:
                    0b:9d:11:b0:70:ea:36:d8:86:7d:b3:cd:fb:ad:29:
                    64:14:5f:68:2c:25:b0:9d:ef:23:c3:f7:68:19:e6:
                    61:19:54:dc:27:06:63:16:0b:6f:55:c5:e2:e1:cf:
                    a3:f2:60:26:62:b2:7b:4d:b0:74:b0:22:7c:ce:f2:
                    3e:43:71:cb:51:14:ba:b7:64:3a:76:45:8c:cb:24:
                    7a:24:c2:f2:95:0c:76:dc:f3:ca:8f:22:61:32:ea:
                    57:f1:63:b8:39:8a:ee:ba:8a:b0:10:4e:b8:a9:60:
                    4b:9d:46:69:1b:5d:ec:77:84:f2:98:ce:8e:dc:2d:
                    04:e3:97:4d:43:83:27:7b:2c:fd:05:c1:2c:6b:ff:
                    48:90:e5:91:40:8c:a8:19:83:58:1e:3b:5a:03:4b:
                    db:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DD:14:B9:03:B1:B3:B9:3C:0A:F1:47:7C:33:73:59:EF:02:6D:CE
            X509v3 Authority Key Identifier:
                keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203538383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         42:0a:8c:6f:60:80:2b:eb:5b:2b:63:7b:f0:6f:de:ec:9b:b7:
         79:dc:0f:91:fd:20:29:d5:9b:27:63:b3:b3:b3:56:49:a4:54:
         8d:33:27:cd:dc:9e:33:c6:fd:fc:8e:f8:19:1a:05:f5:27:c6:
         bf:cc:55:1e:39:be:b6:97:67:8c:30:fd:83:22:66:8d:c2:1f:
         08:13:6c:92:49:4d:ea:58:fc:c9:ce:bd:df:b7:1d:41:ee:86:
         19:2d:a4:87:0f:8e:28:93:7d:03:76:ae:9d:38:9a:62:c0:21:
         ba:26:11:3e:5d:37:f0:cd:cd:4e:49:f4:29:c4:c7:ee:18:2a:
         25:0a:e0:e2:37:8f:6c:b7:39:94:33:18:ba:69:44:1a:ab:19:
         24:fe:74:b6:48:11:4f:d2:ea:5e:14:58:7f:c9:40:5d:06:17:
         65:8c:cb:f9:d6:55:81:c7:9f:53:ac:fa:e4:b4:27:9c:13:cf:
         d4:46:79:a1:53:ce:10:86:db:7a:9a:09:f2:5d:ed:a0:6c:82:
         77:b9:77:3f:9a:f7:59:e4:3d:2f:b7:aa:b7:ee:a3:71:65:60:
         d8:b3:9f:1a:1b:4e:96:2d:a5:8f:89:db:78:b1:cd:77:37:96:
         d6:94:ed:5d:02:2a:0e:e4:90:a3:e5:15:dd:04:e3:bc:28:2d:
         96:bd:ef:e4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:36 2026 by rpki-client