Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa
File:                     34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa (raw, json)
Hash identifier:          WKGkuHDtxrYCttJ/8b9xX36FM8cV879DixF6GqYA7Jo=
Subject key identifier:   71:21:79:9A:48:C8:FB:D5:90:46:45:7E:FC:ED:EB:C7:61:3C:F3:90
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       24AA1539604056343A22542F5F4CFADA0C1CD1AB
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa
Signing time:             Wed 08 Apr 2026 03:17:42 +0000
ROA not before:           Wed 08 Apr 2026 03:12:42 +0000
ROA not after:            Wed 07 Apr 2027 03:17:42 +0000
asID:                     151261
IP address blocks:        45.112.228.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:aa:15:39:60:40:56:34:3a:22:54:2f:5f:4c:fa:da:0c:1c:d1:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:42 2026 GMT
            Not After : Apr  7 03:17:42 2027 GMT
        Subject: CN=7121799A48C8FBD59046457EFCEDEBC7613CF390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b3:4a:4a:52:f9:4c:70:62:0b:5d:79:5b:3e:
                    98:99:a0:69:80:3c:74:0e:47:25:ea:30:e3:14:41:
                    2d:35:6f:d9:4b:df:bb:e1:d4:70:a1:e2:d4:3c:df:
                    c5:7a:ae:3a:c0:e6:e5:c5:ed:97:8e:6c:5b:95:79:
                    e1:24:2e:d2:2b:9f:ad:16:21:cb:34:48:9d:de:8e:
                    a0:9e:82:7a:fe:08:24:de:28:c8:65:6d:89:53:e3:
                    b1:20:72:27:8f:b0:fd:09:4e:a1:5f:92:26:f8:41:
                    5e:02:f6:6b:19:fd:52:7f:02:09:86:d7:b0:a0:f6:
                    c3:f0:04:32:17:31:e0:77:4b:95:e0:d7:4d:ef:dc:
                    7a:fa:58:b8:9c:e9:c0:60:b1:62:ab:83:3c:5b:3a:
                    ec:c1:93:57:73:e7:3c:08:df:bb:5e:00:21:a5:9e:
                    31:e4:c5:8a:7c:d6:d9:e9:99:10:22:2e:29:8a:16:
                    27:44:06:02:2b:86:24:ae:58:45:67:25:c2:c9:0b:
                    4b:00:e6:4c:b5:3d:91:5d:40:ed:12:cd:b5:2c:7d:
                    d1:bb:8e:5a:1d:5b:15:21:e4:c2:bf:9d:5d:f8:55:
                    88:4b:87:21:1d:9e:19:68:64:8d:ea:6c:ef:24:06:
                    8f:ee:15:4e:9b:ec:c6:06:22:c6:b4:77:22:8e:22:
                    36:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:21:79:9A:48:C8:FB:D5:90:46:45:7E:FC:ED:EB:C7:61:3C:F3:90
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e20313531323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b9:a7:dc:20:b6:b7:f1:3c:8f:5c:2f:d1:16:8d:2d:da:4c:
         71:af:65:29:3a:c0:ae:9d:72:ed:f6:bd:2e:4e:53:8c:bb:b3:
         6c:4f:4a:b7:6f:d1:ff:1f:98:b1:74:51:ff:8c:83:21:0b:a3:
         bd:07:c0:90:3b:ca:54:bf:01:ce:9b:39:be:45:72:20:c4:91:
         d2:79:31:b6:08:7b:6d:8f:e8:8e:6a:a7:bb:27:13:05:27:d0:
         cf:09:9c:88:da:a5:24:6c:4b:af:a1:94:31:07:f9:c8:b7:f3:
         49:58:4f:a8:36:0a:89:8e:c8:a7:a7:bb:9f:b6:aa:14:89:1e:
         74:4c:86:d8:cb:60:9c:ae:e3:20:08:d5:98:53:e6:bd:6d:4e:
         fa:83:e6:c9:c7:35:5e:7c:b2:ce:7f:06:56:a5:e6:0b:0d:39:
         de:4c:e4:fb:4d:79:29:03:1e:8c:d6:8e:3c:83:87:7e:e0:89:
         48:15:5f:7c:01:c4:19:00:ce:9c:99:ba:88:8e:57:55:40:da:
         11:c5:a5:20:4d:06:d2:8c:d5:32:a6:06:9f:f0:4b:c8:20:3e:
         f4:ac:14:d3:22:e2:d0:7a:02:05:1b:ed:47:f1:f9:e0:15:6d:
         4c:aa:0c:a7:22:24:65:2d:04:b2:68:79:c8:0b:cd:ba:89:c1:
         b0:6c:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:25:03 2026 by rpki-client