Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e203538343636.roa
File:                     34352e3131362e33352e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier:          qxdUkd5rdUjl2maTgpkv+yjhay0+7ctRGe4ff8DLO+g=
Subject key identifier:   B5:B8:B5:99:D6:91:0F:02:27:09:4F:10:C4:91:8C:B3:3D:6F:91:A8
Certificate issuer:       /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial:       2456188D731498794D9391B59A92853203802726
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e203538343636.roa
Signing time:             Mon 13 Apr 2026 02:37:34 +0000
ROA not before:           Mon 13 Apr 2026 02:32:34 +0000
ROA not after:            Mon 12 Apr 2027 02:37:34 +0000
asID:                     58466
IP address blocks:        45.116.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:53:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:56:18:8d:73:14:98:79:4d:93:91:b5:9a:92:85:32:03:80:27:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
        Validity
            Not Before: Apr 13 02:32:34 2026 GMT
            Not After : Apr 12 02:37:34 2027 GMT
        Subject: CN=B5B8B599D6910F0227094F10C4918CB33D6F91A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:9a:d5:b8:85:cf:a0:7e:e7:34:a5:aa:b3:
                    84:a8:ac:c5:60:dc:a6:d4:c6:f8:19:63:c1:dc:d0:
                    39:21:d1:97:fa:83:78:99:56:d0:15:0f:d2:d3:d3:
                    54:01:d7:eb:6a:d3:1c:14:ae:41:05:52:80:a7:bd:
                    3d:63:71:81:db:1d:b1:98:14:ef:09:b8:bc:7f:64:
                    06:44:86:4c:b8:2c:da:aa:39:a2:06:c8:c1:61:a1:
                    a3:b1:75:20:e0:ba:f0:47:09:91:ed:bd:36:d6:14:
                    2e:36:b9:31:62:3b:2f:6c:17:b6:9c:b0:b7:bb:e6:
                    2f:44:82:26:80:7d:fa:9d:d8:b7:f2:5f:4b:77:2b:
                    db:b3:5a:36:de:f8:63:58:0b:e5:38:0a:ae:1e:1a:
                    36:dd:fd:bb:1b:1f:b6:bc:07:d1:81:32:33:4a:31:
                    74:42:8f:ca:65:0d:61:6b:2b:e2:72:88:15:a6:7e:
                    0d:b2:a6:aa:89:8b:84:e4:7c:5d:4d:9e:14:40:b2:
                    38:cf:9a:ba:2c:df:6b:aa:d9:75:6a:9c:f9:81:2d:
                    68:03:f4:56:0e:62:e3:a4:cd:19:93:99:85:e3:ca:
                    31:f6:20:48:93:3f:2a:70:f1:af:d8:cc:9c:e6:d0:
                    8a:62:f8:2c:fd:62:8c:26:be:71:c0:91:d8:3e:29:
                    01:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B8:B5:99:D6:91:0F:02:27:09:4F:10:C4:91:8C:B3:3D:6F:91:A8
            X509v3 Authority Key Identifier:
                keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e203538343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:77:ab:05:b1:21:7a:bc:74:af:41:92:5b:e0:c6:c3:5a:71:
         d3:99:41:bf:c4:e2:d8:23:69:38:d7:fb:8f:bb:45:9a:8d:ff:
         74:14:85:fa:62:ea:3a:2b:64:63:39:11:cb:91:ef:a1:3a:f3:
         bd:7e:65:75:fc:74:3b:f8:80:fa:97:85:4e:e3:25:41:32:f9:
         78:90:33:49:35:d2:06:56:c0:c9:63:90:5b:11:1c:61:6c:7b:
         c4:1c:bf:22:08:9c:59:b9:d2:ae:70:82:eb:29:bd:e4:1e:9e:
         ef:d4:99:5c:ff:7b:94:1c:e0:f3:10:5e:ae:d1:5f:31:bb:bb:
         47:54:86:93:49:02:8e:01:bf:3c:e6:f1:ab:27:a4:bc:ff:5b:
         1f:82:4b:a5:1a:92:3b:b6:37:d9:b0:2c:7b:71:ac:4d:96:d4:
         05:d8:11:3c:90:f0:fb:9a:09:45:85:17:8a:11:90:c7:cd:79:
         d0:22:09:11:a4:5b:55:7e:2e:09:e7:b9:c4:26:85:ee:a1:e0:
         5f:98:a8:b4:28:da:37:46:3f:f4:29:22:01:99:05:5e:dd:56:
         b1:87:58:1a:8d:51:b9:91:b4:e7:43:33:c8:f8:96:94:1a:af:
         a4:00:ca:1d:c7:b9:01:3a:ba:ec:1b:ab:5b:c5:41:6c:03:42:
         77:d6:20:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:56 2026 by rpki-client