Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa
File:                     34352e3131362e3134322e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          QGr+zWvjHYnvlfuyUD70L+P+SEKlqqKcZjvIvcIqHxc=
Subject key identifier:   0B:C1:19:37:5B:60:F6:2D:88:75:C6:A8:71:63:48:BC:FB:3D:5E:06
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       60E71A20744A03F329CC1FED8AA5703F2F3A7E2B
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa
Signing time:             Mon 13 Apr 2026 02:37:34 +0000
ROA not before:           Mon 13 Apr 2026 02:32:34 +0000
ROA not after:            Mon 12 Apr 2027 02:37:34 +0000
asID:                     56040
IP address blocks:        45.116.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e7:1a:20:74:4a:03:f3:29:cc:1f:ed:8a:a5:70:3f:2f:3a:7e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Apr 13 02:32:34 2026 GMT
            Not After : Apr 12 02:37:34 2027 GMT
        Subject: CN=0BC119375B60F62D8875C6A8716348BCFB3D5E06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:1a:ef:58:74:63:48:73:4e:73:ef:57:75:
                    b1:5f:d6:6c:55:c9:d2:ba:56:8b:9c:01:67:66:56:
                    77:ea:1a:d5:9f:17:21:b8:69:b5:8d:41:6e:65:e4:
                    88:f8:e4:43:14:fe:6c:1c:18:d0:a3:e5:25:88:44:
                    27:c0:cd:da:0e:bf:25:28:eb:dc:28:83:85:d7:cf:
                    5e:3d:15:c9:7a:b5:ba:77:17:4c:fb:a4:8e:63:e4:
                    b4:bb:27:99:ce:87:6e:1d:ca:c6:fa:d0:35:2c:5a:
                    9f:10:ef:63:08:a4:d5:e5:b4:34:f2:0b:5f:2d:98:
                    e6:8e:55:c1:fe:95:fb:52:98:2c:fc:4a:06:cc:62:
                    3b:4e:33:d3:51:08:0b:d3:19:4a:6e:67:9d:b7:07:
                    ee:48:6f:a4:2b:55:fe:ca:9a:eb:a2:7c:29:81:75:
                    d1:81:7f:7b:82:de:30:5f:28:45:e9:ca:89:57:a7:
                    ee:ac:00:da:2e:a2:18:e7:7d:6d:66:54:e6:06:fb:
                    ad:d6:65:ff:94:9d:17:3a:90:44:60:9e:2b:4d:f0:
                    fd:20:0a:1c:6e:f6:f0:f3:e1:4f:08:38:7e:d2:3e:
                    2f:75:0b:02:4d:c6:fa:7f:56:e7:48:c7:2f:a2:c9:
                    85:5e:4c:58:4c:b3:45:c1:7d:73:d6:43:a6:8f:b3:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:C1:19:37:5B:60:F6:2D:88:75:C6:A8:71:63:48:BC:FB:3D:5E:06
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:b3:16:07:f5:c4:e9:e0:c7:50:c2:13:70:55:34:ff:46:1c:
         3c:4c:85:f7:02:68:38:61:cd:88:1f:70:6d:be:6b:bd:48:ca:
         88:a6:81:5f:a3:09:92:06:f2:02:83:85:54:ef:d4:e0:f1:bf:
         7c:97:4d:e5:20:e1:30:e8:c8:79:3b:d3:2a:75:95:6c:bf:0b:
         10:d7:31:da:ce:7c:bd:de:8f:c4:8c:9b:aa:42:df:36:7a:e5:
         fb:2a:1b:00:b0:fc:38:b8:d1:db:f0:0f:e2:1b:2a:fe:2d:0a:
         6d:e5:56:11:26:dd:c3:8e:dd:f2:6b:e3:b7:74:e7:52:99:84:
         3b:4e:d7:27:2e:25:68:18:4a:14:89:5f:a9:5c:25:21:7e:8d:
         f2:0c:a2:06:b6:63:b4:8a:3d:34:32:cd:89:ae:7a:d0:44:e1:
         a4:fd:2b:9b:58:09:7c:b9:52:ce:b3:6f:a7:71:17:10:92:7d:
         ac:45:a1:59:90:b2:d3:aa:5b:bd:25:f3:ab:71:dc:12:26:7a:
         f2:e5:3e:bb:2c:8c:0e:d2:2d:ec:f1:7c:98:65:5b:83:cd:5c:
         47:c9:49:6a:d3:ec:a0:d3:86:b3:c3:cb:c4:09:92:f0:77:0a:
         0a:3d:79:52:1b:92:25:c9:fc:0b:e4:58:c6:d3:b6:41:d8:20:
         47:32:5c:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:16 2026 by rpki-client