Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa
File:                     34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier:          a934j/iciW9ztDPRfJ2/eFivVbtEeHlpgklOM2lTbzA=
Subject key identifier:   16:17:51:90:39:C0:22:E7:59:FB:19:70:21:10:A4:95:94:56:32:4B
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       0A76619AA1B07D420AD7C3BFE331F76FCC88D8C6
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa
Signing time:             Thu 14 May 2026 07:27:37 +0000
ROA not before:           Thu 14 May 2026 07:22:37 +0000
ROA not after:            Thu 13 May 2027 07:27:37 +0000
asID:                     137697
IP address blocks:        45.120.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 15:28:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:76:61:9a:a1:b0:7d:42:0a:d7:c3:bf:e3:31:f7:6f:cc:88:d8:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: May 14 07:22:37 2026 GMT
            Not After : May 13 07:27:37 2027 GMT
        Subject: CN=1617519039C022E759FB19702110A4959456324B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:f5:57:82:1c:70:7b:a7:8a:98:29:41:f6:
                    1d:92:ff:df:ba:0e:2c:00:84:fc:59:7c:b1:62:35:
                    6e:b8:a2:c2:4a:b9:e3:33:a2:b4:be:f4:01:fc:16:
                    03:28:84:e9:f4:46:74:f2:29:13:88:1a:28:5c:74:
                    57:e0:b2:cd:0c:e6:3a:76:19:8e:6a:d7:d0:28:72:
                    77:59:6b:d8:7b:99:ae:1c:31:1f:ed:5d:28:a4:79:
                    89:b4:22:6b:35:96:3c:be:5d:6f:12:a4:b8:03:26:
                    67:66:ed:ca:7a:2b:fb:a1:09:99:c9:0f:a8:67:cf:
                    0f:d3:cf:4b:ac:e9:cd:16:ad:d8:70:63:47:c7:02:
                    cb:58:62:d4:17:df:88:66:e6:39:d3:e5:b6:9a:d0:
                    ed:56:e9:c5:dc:d1:07:ce:14:9c:4a:0e:f3:83:ec:
                    7e:02:1b:61:7a:50:36:9c:43:e6:33:58:0c:1c:74:
                    ce:3a:6c:de:c9:67:24:a7:4a:3e:34:e7:04:a0:b8:
                    53:4b:cf:04:0a:a1:0c:73:40:af:cd:67:8e:7e:b8:
                    0c:d2:f8:21:35:fb:7b:89:bb:bd:03:3c:7d:cd:26:
                    75:f1:ec:e8:c9:40:87:df:3d:20:0d:31:bf:d4:c3:
                    61:8d:47:38:f3:f0:1f:a9:9b:fd:9b:ea:d6:77:67:
                    26:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:17:51:90:39:C0:22:E7:59:FB:19:70:21:10:A4:95:94:56:32:4B
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:17:e5:16:a0:eb:9b:f9:3b:ca:44:59:67:54:ef:e6:76:d8:
         1e:a5:51:3d:93:03:e5:f1:6e:02:8f:e3:9d:a9:e8:c9:3c:d0:
         eb:ff:4b:84:d3:a1:58:4a:45:0b:8a:73:ff:c0:a0:19:2e:c0:
         e4:0e:53:1d:b0:56:e4:ee:29:06:e6:a9:ff:31:15:d2:99:ce:
         ac:f6:9f:c2:34:20:5d:b4:f9:95:51:c6:51:be:02:3b:e5:6d:
         23:2d:83:81:82:cc:b2:10:8c:89:61:17:da:fd:9c:0a:c2:75:
         90:99:8e:57:85:a8:e8:85:65:c9:3a:37:e5:e4:b7:85:72:63:
         29:3e:a8:68:52:e5:08:c0:11:5d:92:05:70:e8:a6:f5:c8:33:
         22:01:11:35:b0:d5:ef:73:2f:f4:de:4a:69:1d:f9:7b:5f:c0:
         f2:61:35:08:99:5c:ee:9c:e8:df:48:a3:d5:44:0e:1f:fb:3a:
         0a:f1:ba:5d:de:b9:24:e6:64:66:e4:f6:ef:22:8f:51:83:dd:
         17:c6:15:12:db:79:46:a1:11:ee:a5:68:db:e5:62:22:39:9a:
         09:5a:97:f8:10:74:19:61:8d:55:b0:f0:cc:be:aa:ee:f5:b9:
         e4:9e:15:06:a8:f5:7d:8f:50:20:3c:2f:d0:01:7e:cd:b5:19:
         81:98:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client