Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232322e302f32342d3234203d3e203233383438.roa
File:                     34332e3233302e3232322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier:          MA+6BO+K2mL7pRLBNwpvK47snrxxHNG1clm/UkMcmeY=
Subject key identifier:   5C:25:26:65:BC:0C:A2:1D:B8:2B:40:E1:8D:E0:9E:E7:43:A3:B9:D0
Certificate issuer:       /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial:       13B60695106D0C4C87B5D9E5FF1C73A6C1727194
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232322e302f32342d3234203d3e203233383438.roa
Signing time:             Thu 16 Apr 2026 09:07:31 +0000
ROA not before:           Thu 16 Apr 2026 09:02:31 +0000
ROA not after:            Thu 15 Apr 2027 09:07:31 +0000
asID:                     23848
IP address blocks:        43.230.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 17:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:b6:06:95:10:6d:0c:4c:87:b5:d9:e5:ff:1c:73:a6:c1:72:71:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
        Validity
            Not Before: Apr 16 09:02:31 2026 GMT
            Not After : Apr 15 09:07:31 2027 GMT
        Subject: CN=5C252665BC0CA21DB82B40E18DE09EE743A3B9D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:ab:de:c3:00:17:7f:84:25:3c:26:8a:1c:
                    db:86:4e:52:ac:fa:20:74:e5:1d:cf:c8:9f:ae:8a:
                    89:a9:83:16:e5:d8:cf:6d:78:8f:67:7e:7a:91:a2:
                    60:4e:7c:00:1b:4b:93:8c:25:07:52:09:d2:fd:f5:
                    41:74:b7:53:c6:bc:bb:6e:39:c0:ab:ba:ce:2c:9b:
                    71:dd:c7:32:45:b3:6a:9e:1b:e8:48:5e:92:a0:b4:
                    c8:79:4d:b6:39:dc:50:8f:cc:b3:59:ad:47:e4:b3:
                    38:6f:bc:32:c4:a9:41:b5:54:9f:84:89:42:96:a2:
                    9b:52:b9:25:ce:e3:41:38:00:b0:da:dc:81:15:64:
                    69:62:f2:da:14:07:6c:b5:e4:d1:d3:b7:98:47:c1:
                    25:65:16:51:83:c1:75:a3:8a:b6:a4:d5:4b:02:b6:
                    4c:bc:bb:a8:c6:ec:14:45:21:b6:b9:7e:54:75:e4:
                    73:13:5c:bd:51:79:c1:27:5c:1e:86:c9:23:f6:e5:
                    1b:ab:db:70:70:39:31:bf:e8:70:b2:f8:0b:3c:d3:
                    28:e4:af:b7:5f:b3:7a:30:d3:10:e0:de:1b:8c:92:
                    59:5e:a0:00:27:87:1b:17:72:0f:b9:fb:ec:a0:15:
                    d7:2a:21:17:bd:44:14:44:50:58:f5:95:68:f6:3b:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:25:26:65:BC:0C:A2:1D:B8:2B:40:E1:8D:E0:9E:E7:43:A3:B9:D0
            X509v3 Authority Key Identifier:
                keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34332e3233302e3232322e302f32342d3234203d3e203233383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:3f:a4:df:f5:59:cd:e6:4d:5c:84:08:0f:49:8b:c6:05:99:
         5f:fd:18:62:da:b5:bb:7e:f2:ce:73:ae:b9:a3:f8:c7:fc:78:
         fb:2a:21:4f:3c:75:68:74:d3:54:29:eb:a7:35:06:1a:a4:f0:
         f2:d3:70:ea:c0:48:6f:9e:39:d7:86:9f:91:5e:ac:69:f5:89:
         82:05:58:43:ed:4b:69:83:b3:cb:ed:ce:ea:18:28:de:f6:2c:
         85:03:10:a6:2f:2e:c0:74:02:a7:3b:3b:f3:66:c2:db:82:7e:
         1f:00:c6:01:0a:d1:1b:c4:01:04:8f:32:14:68:6f:f2:67:5b:
         43:98:3f:7c:67:0a:07:6d:82:ad:80:9b:da:31:58:d6:d0:74:
         34:10:12:61:48:37:93:cd:1f:c1:10:65:31:e7:bd:c6:01:ec:
         fa:b2:ea:e2:16:2d:48:9f:b6:15:3b:36:f7:d9:4e:e5:21:eb:
         78:07:02:79:1f:a0:6f:b3:e2:f7:3d:a4:e4:22:3f:b2:be:62:
         a1:94:69:c3:02:62:36:72:0a:fe:67:89:f9:70:b6:3a:1d:92:
         62:16:48:f1:08:a4:3f:8f:dc:5f:55:e3:c4:c6:26:4c:14:d6:
         d2:07:da:6a:5a:cc:69:25:b0:72:1b:46:5a:cc:15:72:92:96:
         9b:9e:a4:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:16 2026 by rpki-client