Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa
File:                     34352e3234382e31302e302f32342d3234203d3e20313331353339.roa (raw, json)
Hash identifier:          kTmgmU2jPoiu1tMuu2eklPhK8+hC1cXtiJ4brC+0d/w=
Subject key identifier:   E5:CA:7F:02:5F:E2:17:6E:A6:A0:E2:B9:36:4B:77:B6:BD:29:0D:75
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       3376195C2D030A46A45EEAC7A20A999F5DA5FB61
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa
Signing time:             Wed 17 Jun 2026 10:03:12 +0000
ROA not before:           Wed 17 Jun 2026 09:58:12 +0000
ROA not after:            Wed 16 Jun 2027 10:03:12 +0000
asID:                     131539
IP address blocks:        45.248.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:76:19:5c:2d:03:0a:46:a4:5e:ea:c7:a2:0a:99:9f:5d:a5:fb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Jun 17 09:58:12 2026 GMT
            Not After : Jun 16 10:03:12 2027 GMT
        Subject: CN=E5CA7F025FE2176EA6A0E2B9364B77B6BD290D75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:0a:f8:b2:48:8a:d4:c3:07:cb:ba:a1:b1:
                    4f:49:b2:a9:95:8a:0a:79:6b:70:22:15:a9:ec:10:
                    a8:e9:20:c0:64:14:b7:c2:de:00:2f:89:0b:a6:7e:
                    f4:39:5b:92:5f:06:c8:e7:d6:98:16:8f:47:5e:bd:
                    8d:6e:80:01:fb:49:72:27:63:48:9b:ff:ce:b4:db:
                    26:d0:e9:96:06:84:d4:d1:5b:39:7c:5e:cd:77:a0:
                    d2:3c:7e:f0:f2:8e:9f:87:5b:6e:4a:11:7b:b5:00:
                    95:33:f1:18:d0:b0:ce:24:05:4b:22:dc:4d:34:f3:
                    a6:82:f6:61:2a:19:e9:9b:d7:d3:f0:18:fc:d0:dd:
                    67:90:83:26:c3:50:1f:f0:09:cc:58:80:89:b3:f8:
                    0f:03:d1:e8:f4:6f:f0:f0:b7:a2:53:bf:6c:4c:26:
                    5f:fa:ce:62:71:79:a3:c8:83:51:29:3f:71:10:bf:
                    6f:eb:f9:1b:41:ff:00:16:3f:fa:6b:51:1c:7a:e6:
                    52:a4:1c:17:78:cb:7d:44:3b:92:38:79:4f:e8:0d:
                    a5:41:25:a1:da:ae:7b:cc:b9:9d:22:59:90:99:80:
                    79:d0:53:06:ed:2c:78:8b:94:74:da:41:6d:e7:e9:
                    ba:e0:0b:0f:8f:f3:b1:c1:ec:c7:81:b7:7c:70:a8:
                    cb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CA:7F:02:5F:E2:17:6E:A6:A0:E2:B9:36:4B:77:B6:BD:29:0D:75
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:8b:db:d5:29:03:71:ab:0a:9e:53:cc:50:3c:a5:5f:ad:
         45:04:86:21:fa:41:a5:c6:b0:3a:5a:23:eb:28:e3:f4:da:5f:
         94:52:a5:02:fc:d0:36:65:04:34:2e:6c:95:08:c5:94:a0:36:
         ea:dc:56:f9:25:26:fe:56:25:e2:12:4b:0d:ff:42:ef:e6:4f:
         8c:e6:04:d5:fe:ef:db:70:27:27:4f:7a:90:a1:07:6d:39:bd:
         4a:66:9e:6b:88:cd:a7:6b:05:0e:5e:48:0a:74:c6:a5:22:2a:
         2d:ad:71:20:7c:18:25:60:b5:60:a5:e1:3c:cd:de:62:25:0a:
         0b:6d:d2:74:72:d3:02:93:4c:49:8b:4d:24:7d:53:8d:c8:b8:
         d6:c3:2d:d1:05:e3:3c:10:25:79:64:21:98:cc:fd:b1:05:d5:
         4f:62:29:40:65:0e:1e:99:bd:91:68:f1:ad:e2:f7:da:b1:e9:
         e6:0c:64:25:c8:eb:da:ce:22:ee:9b:1e:52:00:7b:e3:d6:f0:
         1b:06:fe:79:4f:c4:71:f4:d8:3b:15:1e:a1:24:a1:b5:93:fb:
         a8:21:f9:b8:a6:ee:5a:64:7c:64:c5:f3:e5:2e:91:99:eb:08:
         70:6c:5a:16:b3:f6:9c:4b:06:fc:37:2b:83:95:69:ad:af:23:
         1f:f3:75:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 22:50:08 2026 by rpki-client