Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa
File:                     34352e3234382e392e302f32342d3234203d3e20313331353339.roa (raw, json)
Hash identifier:          UNGSqN3ZxABRfGtjDCVajUiZE/Pw0Zi0ODtjLQjOJDA=
Subject key identifier:   ED:A9:ED:87:F1:62:20:F3:99:8C:89:C5:BD:20:CF:85:4D:EF:7E:90
Certificate issuer:       /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial:       072CF52E6281837E991367D794E3D61AE7F7A08E
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa
Signing time:             Wed 17 Jun 2026 10:03:13 +0000
ROA not before:           Wed 17 Jun 2026 09:58:13 +0000
ROA not after:            Wed 16 Jun 2027 10:03:13 +0000
asID:                     131539
IP address blocks:        45.248.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 20:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2c:f5:2e:62:81:83:7e:99:13:67:d7:94:e3:d6:1a:e7:f7:a0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
        Validity
            Not Before: Jun 17 09:58:13 2026 GMT
            Not After : Jun 16 10:03:13 2027 GMT
        Subject: CN=EDA9ED87F16220F3998C89C5BD20CF854DEF7E90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b4:4e:f7:21:d2:b1:3c:34:d6:37:fb:08:1b:
                    a6:6a:f1:12:50:56:8f:86:56:b4:cb:45:1a:27:aa:
                    2d:93:eb:f0:0b:69:4a:b6:e4:1e:a2:78:b0:71:b6:
                    dc:a1:ae:f8:a9:ef:18:b7:1e:b6:3a:53:a2:42:1d:
                    a9:44:34:67:0b:88:53:d7:02:4c:5a:80:08:3c:c9:
                    ef:06:e6:d5:ee:ea:56:c5:9f:a5:78:83:8f:8b:86:
                    cb:8d:ab:d4:f2:26:e1:fb:1b:a2:6d:a8:bc:bc:34:
                    df:63:3f:79:9e:ee:0c:a1:fe:ca:de:50:9f:9e:21:
                    a6:09:24:30:ac:05:ba:c0:d5:5d:03:21:17:62:9b:
                    aa:6a:26:60:4f:98:eb:0e:20:2d:e3:18:a6:8d:8c:
                    6d:5f:aa:e8:59:ee:85:9d:ff:78:15:ac:55:60:32:
                    06:2c:0e:c3:42:b3:03:f2:58:3c:f4:d6:54:67:b6:
                    42:9c:dc:9a:f2:3c:82:2b:93:f6:f4:01:09:ec:01:
                    83:e5:5b:04:58:70:4e:67:ae:94:c3:58:d6:b7:e1:
                    e6:e0:5b:50:b8:a8:19:49:67:3b:ef:da:0f:eb:bc:
                    a9:38:d0:94:36:ed:7a:1b:c8:c0:fe:d0:8b:40:b3:
                    4a:d9:1c:22:7e:21:f5:43:7d:d4:43:3b:4b:70:1d:
                    eb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A9:ED:87:F1:62:20:F3:99:8C:89:C5:BD:20:CF:85:4D:EF:7E:90
            X509v3 Authority Key Identifier:
                keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:82:92:6e:02:a6:ff:dd:3d:a0:21:9b:24:13:87:62:59:
         d7:77:2a:b6:a0:6c:84:bd:6e:9d:63:18:3c:ea:a0:a9:93:50:
         c0:04:24:f5:7f:75:09:11:8b:02:5a:4a:43:ce:7d:60:f5:d5:
         92:d7:50:36:e4:0b:7a:a5:d1:66:f5:55:41:c2:54:26:4d:34:
         72:9f:7d:7a:64:70:e8:16:96:7a:d6:f3:16:7e:b8:f4:5b:49:
         cc:e4:6d:2c:32:b2:61:72:6e:20:a6:63:71:cc:57:95:46:10:
         51:6c:6e:e1:0f:dc:20:12:c0:fc:c0:7d:08:d6:7e:8d:df:20:
         df:3a:e6:92:fd:d6:69:e3:87:53:93:38:4e:a2:f3:57:43:a3:
         0a:ab:cf:3c:c7:bc:bf:7d:00:87:47:e7:61:6d:9b:4c:a9:a1:
         7e:51:7e:3a:c6:45:5a:4a:d5:83:61:56:04:93:bf:25:ca:d6:
         99:85:18:39:a7:f2:78:bb:f7:85:63:7b:e9:83:14:89:f6:97:
         f4:ac:df:9c:28:4f:41:04:ef:62:94:e2:56:7c:43:ef:17:8f:
         3d:04:e0:be:45:c2:63:1a:f2:a2:9c:df:11:9c:bd:1d:6a:56:
         69:33:e7:12:23:fb:cf:3e:80:0c:9f:6f:9e:66:8a:5e:aa:98:
         52:81:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:49:52 2026 by rpki-client