Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33332e302f32342d3234203d3e203538343636.roa
File:                     34352e3131362e33332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          aB6HYu91QLkogF7NEuI1Mr5U979LZu4ToUHN6214DcM=
Subject key identifier:   A2:C0:5F:B6:6C:58:12:E8:10:D5:50:6D:E5:EA:61:A0:69:92:28:89
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       46CE690722873325EDF62113B70732D9D6F9BECE
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33332e302f32342d3234203d3e203538343636.roa
Signing time:             Mon 13 Apr 2026 08:47:51 +0000
ROA not before:           Mon 13 Apr 2026 08:42:51 +0000
ROA not after:            Mon 12 Apr 2027 08:47:51 +0000
asID:                     58466
IP address blocks:        45.116.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ce:69:07:22:87:33:25:ed:f6:21:13:b7:07:32:d9:d6:f9:be:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Apr 13 08:42:51 2026 GMT
            Not After : Apr 12 08:47:51 2027 GMT
        Subject: CN=A2C05FB66C5812E810D5506DE5EA61A069922889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7e:d6:7d:3b:4e:99:08:a2:7a:d7:d7:83:d1:
                    2d:c8:bf:6c:f9:2e:e2:93:3e:59:4f:e0:b5:27:1f:
                    47:71:ab:88:70:45:be:0c:7a:df:a5:d2:b2:f5:40:
                    4d:4e:31:6d:0a:8c:78:e4:4e:64:f5:b5:f9:33:6f:
                    24:09:9c:3a:a8:66:65:7d:d1:fd:c4:03:64:32:8d:
                    83:07:6c:76:6e:29:a1:e0:b2:74:e2:49:c2:39:00:
                    37:92:bf:6d:0f:2b:26:69:ae:8f:ce:d0:85:fb:e5:
                    00:64:05:50:25:d6:e2:ff:c8:1f:46:1c:b8:c6:10:
                    3a:40:44:e9:98:29:72:f4:7e:cc:be:e5:01:cc:63:
                    44:95:a5:53:5f:7d:66:37:b0:2a:13:89:b2:36:9d:
                    64:58:89:e8:c4:bf:d0:a4:14:c5:cd:1c:5a:7e:db:
                    38:bf:ff:d6:c9:22:d2:91:2a:dc:b2:fc:44:19:98:
                    0e:be:0e:0a:ce:d8:e9:27:44:c1:3c:e5:3c:47:ae:
                    e4:1d:a8:ce:e6:12:a5:32:a1:87:92:ef:99:f5:f2:
                    cb:52:5b:35:91:f8:fb:ab:4f:78:0f:5f:ab:58:04:
                    89:e1:b9:1e:b2:31:ad:3c:ad:34:74:5a:31:62:bd:
                    e0:be:01:67:a1:e5:7a:61:dc:4b:61:8a:48:41:1a:
                    c0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C0:5F:B6:6C:58:12:E8:10:D5:50:6D:E5:EA:61:A0:69:92:28:89
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33332e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e3:30:bd:9d:60:a3:ab:cf:88:59:e5:4a:32:92:8e:22:8d:
         a6:90:5e:3b:58:f6:b0:ba:64:97:19:99:0e:da:ca:f6:1f:d7:
         e2:eb:e6:05:5d:11:74:4b:5e:99:d9:c8:f7:ac:fb:42:94:6f:
         2e:c6:7b:bb:ae:f6:c0:55:a6:01:2c:7c:12:05:3c:cd:04:1c:
         e0:73:f0:a4:c9:2b:72:61:5f:7f:8c:22:9c:11:03:d3:f0:14:
         1b:fa:ba:7c:30:aa:36:67:13:a5:85:cd:d8:f2:ca:6c:ac:ca:
         43:c1:6b:18:f1:c4:c7:fd:4c:67:a7:7e:b4:2a:86:eb:40:97:
         71:69:a1:1c:c3:11:09:3a:54:f3:43:e4:bd:98:5d:89:e4:bc:
         8d:b9:66:bc:54:7f:2d:97:05:c4:25:04:7e:32:b1:3f:ab:dc:
         91:fc:33:77:9e:c0:93:50:48:2d:e4:79:d3:85:11:b8:84:53:
         03:df:86:2f:be:b9:da:b0:df:89:83:0d:a1:a3:2e:40:66:2f:
         3f:70:8e:34:aa:43:bf:cf:52:96:36:46:0b:2b:bb:7e:53:10:
         41:10:8a:15:14:de:83:77:3a:6b:7e:a6:d8:26:50:64:cd:2c:
         6b:27:ae:7a:47:05:8f:a9:41:73:2b:1a:8f:ad:37:65:22:43:
         b9:09:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:56 2026 by rpki-client