Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134332e302f32342d3234203d3e203536303430.roa
File:                     34352e3131362e3134332e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier:          6e4lggZCBnIZSNoVsTuI/rCVl9xr5T9SABl5+ekw/48=
Subject key identifier:   18:9D:2D:1A:D0:B4:ED:CD:3D:A2:8E:FC:E2:06:1B:C8:10:2C:9C:51
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       7FF81B4FABF5CAB6B4F5CBB482223BD7053F0EA4
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134332e302f32342d3234203d3e203536303430.roa
Signing time:             Mon 13 Apr 2026 02:37:36 +0000
ROA not before:           Mon 13 Apr 2026 02:32:36 +0000
ROA not after:            Mon 12 Apr 2027 02:37:36 +0000
asID:                     56040
IP address blocks:        45.116.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:f8:1b:4f:ab:f5:ca:b6:b4:f5:cb:b4:82:22:3b:d7:05:3f:0e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Apr 13 02:32:36 2026 GMT
            Not After : Apr 12 02:37:36 2027 GMT
        Subject: CN=189D2D1AD0B4EDCD3DA28EFCE2061BC8102C9C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6d:99:df:0c:5e:8f:69:1f:51:26:77:49:47:
                    a9:6d:97:9c:8c:30:01:34:0a:42:82:c9:c4:9a:98:
                    ed:c4:ba:36:c7:0f:ea:d1:73:05:5c:df:a8:53:59:
                    e4:1d:ec:b9:81:f6:48:52:f1:a6:c3:b1:ce:36:9d:
                    e1:31:ba:80:db:66:c8:d4:1a:83:15:3e:ff:6f:eb:
                    78:77:50:f8:15:17:95:7d:c2:16:fd:85:ce:69:f1:
                    92:84:86:7d:8f:a9:6b:43:17:03:dd:8e:9f:dd:3d:
                    f3:cc:67:62:57:a9:98:f4:6e:0a:c2:ff:ba:ea:75:
                    81:61:07:ef:82:d2:25:9c:c8:ae:e3:bd:db:30:e0:
                    ce:44:c0:ab:95:be:6d:af:16:26:ef:4f:1f:5a:d7:
                    31:62:e3:08:c8:df:4a:82:65:26:e3:9f:8a:6e:e2:
                    24:7f:05:a6:25:c2:c5:e4:d4:11:2e:fc:e2:16:47:
                    15:89:61:de:cf:c3:e3:0e:10:15:e6:2a:76:cf:28:
                    14:a0:6f:2f:e7:02:e4:68:99:d0:37:28:d0:84:14:
                    52:7f:ec:d9:fc:44:7e:1c:a6:61:21:a1:38:1b:79:
                    35:6c:57:84:77:c1:69:05:dc:f8:25:bc:9b:95:38:
                    39:00:e6:12:9e:54:64:37:d3:97:a5:6a:92:3a:c9:
                    96:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9D:2D:1A:D0:B4:ED:CD:3D:A2:8E:FC:E2:06:1B:C8:10:2C:9C:51
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134332e302f32342d3234203d3e203536303430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:96:78:45:99:29:88:60:44:37:8b:29:a5:4f:57:eb:22:ba:
         8c:34:b1:48:0c:f7:9e:6b:50:76:d4:71:97:07:1c:8c:33:fb:
         4b:ea:9c:ad:f7:03:2c:70:c5:3f:95:2a:06:e7:a1:c2:72:f4:
         ed:8e:66:26:72:24:46:f0:56:f5:9e:c6:ac:21:6d:7d:61:e6:
         2f:94:ac:0f:52:74:83:25:4b:77:e2:b7:0a:81:07:9e:76:28:
         1a:68:df:ac:ad:56:e7:92:29:a3:15:56:0c:b4:d7:54:48:cd:
         1d:52:ce:8c:e6:35:ff:c3:60:3f:48:90:17:ce:02:cf:19:b0:
         e6:8b:b3:aa:32:b8:a5:52:10:bb:b1:f9:28:a8:99:ee:5e:de:
         01:12:ea:ac:5a:f2:d1:2d:15:96:b6:53:c7:69:37:9f:08:1d:
         14:7b:c5:4b:cf:bd:39:1e:b0:70:b1:c9:b6:8b:45:02:bf:47:
         5a:8a:22:37:9a:af:f9:ae:8f:71:06:8a:c7:9d:b5:59:a2:71:
         aa:fb:b4:09:e7:78:4f:69:a4:37:1a:e0:96:dc:1c:3b:57:cb:
         33:1e:19:41:5d:a2:94:9e:bf:ac:11:a8:de:ac:69:8f:15:a9:
         f2:13:1b:7d:73:af:20:50:9e:11:21:23:13:3c:89:67:02:f8:
         6b:50:8c:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:16 2026 by rpki-client