Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232302e302f32342d3234203d3e203233383438.roa
File:                     34332e3233302e3232302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          RJT7ZvARAy9i5PeeQOlnZ09DexP+lMN+mCU+n9MP6Dg=
Subject key identifier:   43:6C:B5:FF:5B:76:BF:30:4A:F3:DF:8D:27:2B:CD:88:DE:9B:2B:6A
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       06FABE47C15B97E4B5E050028E2EC1AF14CD961F
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232302e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:32 +0000
ROA not before:           Thu 16 Apr 2026 09:02:32 +0000
ROA not after:            Thu 15 Apr 2027 09:07:32 +0000
asID:                     23848
IP address blocks:        43.230.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 05:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:fa:be:47:c1:5b:97:e4:b5:e0:50:02:8e:2e:c1:af:14:cd:96:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:32 2026 GMT
            Not After : Apr 15 09:07:32 2027 GMT
        Subject: CN=436CB5FF5B76BF304AF3DF8D272BCD88DE9B2B6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:85:b6:46:2c:32:7d:f2:08:0f:70:13:96:
                    e4:76:9f:dc:b0:13:03:15:53:f2:c8:f0:f0:1a:eb:
                    9f:6d:c3:83:28:7d:de:f9:18:8a:ff:bb:23:bf:44:
                    7a:3c:d3:bc:d5:e3:8d:72:8b:5c:70:bb:96:58:50:
                    3a:e5:9b:2e:5c:59:4e:04:70:ca:23:36:db:d8:d5:
                    a0:88:0f:31:c3:b7:c0:f4:e3:c9:0b:5b:53:93:fd:
                    0e:e7:10:4c:a6:5c:8d:e0:a5:a5:fc:57:0f:2d:92:
                    c1:61:21:ee:27:ba:95:58:b4:9e:04:94:cc:90:0c:
                    3d:b0:8b:9d:e8:b4:18:71:e2:95:b9:95:b3:19:fa:
                    df:25:e8:fd:b5:9e:47:28:ae:08:a5:01:d1:86:fc:
                    09:36:de:d8:b3:a3:e2:50:fd:a7:bc:57:94:da:01:
                    71:25:bf:36:0c:64:34:cb:26:97:bb:d7:d5:c8:48:
                    0f:d4:43:b6:ce:cc:cf:d0:36:bc:6e:f4:81:33:2e:
                    50:1d:4f:fe:bb:15:bd:87:35:e2:30:c5:8f:9c:d3:
                    83:f8:65:15:68:1a:24:01:ba:7b:62:ed:c0:56:49:
                    48:41:bc:d9:a3:3b:ab:30:44:7a:90:e0:6e:7e:59:
                    0d:2a:94:2f:33:45:de:ec:d8:4e:07:4a:f0:83:79:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6C:B5:FF:5B:76:BF:30:4A:F3:DF:8D:27:2B:CD:88:DE:9B:2B:6A
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232302e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:82:16:69:7b:ed:c4:58:35:b6:3f:35:1f:49:1b:bb:70:1f:
         90:93:53:02:32:75:99:77:60:e8:19:70:be:5d:1e:cc:88:fa:
         56:f0:37:67:0f:49:12:4f:5d:25:89:7b:7f:9b:4c:27:1a:d8:
         b5:68:b8:ea:58:14:0c:f8:f3:a9:47:af:eb:40:d7:46:f5:82:
         7e:3d:a2:4c:e0:b4:d1:52:66:14:c5:1a:59:f6:f2:38:28:0e:
         dc:9a:75:fa:23:8f:33:39:d4:26:ef:eb:3b:4f:b0:b9:39:68:
         8a:ce:ee:80:d8:fe:44:67:1c:3d:e9:ee:57:f4:21:9d:93:82:
         10:e7:70:39:59:2b:10:d6:62:dc:76:27:a2:d3:76:e9:a8:18:
         bc:4d:b1:4b:e3:07:74:6a:fb:a2:d5:65:46:82:c9:53:6c:d1:
         ac:38:bf:63:00:b2:13:df:1f:cc:6c:ef:d6:91:fc:f9:aa:60:
         d9:1e:24:33:0e:3a:61:35:af:be:51:41:e0:64:4f:86:33:41:
         00:ce:f3:b8:d9:36:eb:90:fa:13:20:34:96:3d:14:c1:d7:6a:
         92:2f:92:45:6d:33:09:9d:19:a4:9a:f0:76:48:0f:1d:a5:60:
         1d:c5:8f:03:43:6a:f0:09:90:a0:7a:87:ab:05:83:e0:c7:b9:
         0d:88:01:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:13 2026 by rpki-client