Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa
File:                     34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa (raw, json)
Hash identifier:          0PNm1wYORANto7MzptePtdXw0ZdJCb3dg7bB6r8PNeA=
Subject key identifier:   EB:21:BA:56:70:EB:F5:FE:18:59:93:6A:0B:AE:CB:B9:BA:02:09:E6
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       52F3C0F2C98EC6CEBEB3DD5B4BA523479F4DC8E2
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa
Signing time:             Wed 08 Apr 2026 03:17:41 +0000
ROA not before:           Wed 08 Apr 2026 03:12:41 +0000
ROA not after:            Wed 07 Apr 2027 03:17:41 +0000
asID:                     151261
IP address blocks:        45.112.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f3:c0:f2:c9:8e:c6:ce:be:b3:dd:5b:4b:a5:23:47:9f:4d:c8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:41 2026 GMT
            Not After : Apr  7 03:17:41 2027 GMT
        Subject: CN=EB21BA5670EBF5FE1859936A0BAECBB9BA0209E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:40:05:b8:af:94:7c:37:22:d9:40:52:42:b7:
                    38:43:a9:24:cc:05:29:ca:0b:60:09:cc:55:df:74:
                    e6:42:ed:94:5f:68:70:55:52:a8:e9:a1:db:98:d3:
                    13:5e:0c:2d:57:7a:57:bd:0b:54:1c:0e:4b:26:e9:
                    d7:e6:a3:23:e9:d2:ed:1e:93:7d:37:45:c2:1c:b5:
                    a9:74:26:6f:c6:97:a5:94:cf:47:29:1e:46:75:d0:
                    c7:0c:d8:37:49:4e:fb:65:d8:62:b1:94:73:f1:bc:
                    c5:53:76:c3:03:2e:71:8d:da:71:77:1a:61:77:cb:
                    bf:71:e6:2e:52:bf:4c:38:b7:b7:8c:22:0f:84:c1:
                    71:19:70:34:15:7d:b1:b9:a1:df:f4:2d:d4:c8:85:
                    7e:a8:c6:28:8f:78:85:4c:5f:4b:52:78:7d:8a:d2:
                    2e:b0:a3:af:19:41:77:a5:39:e7:df:c0:aa:dd:6f:
                    15:94:13:3d:60:9d:92:bc:c0:ae:27:6b:b1:98:c9:
                    5c:f2:c7:ef:d1:5b:47:78:bd:82:95:94:df:88:f7:
                    e4:b3:17:93:2b:81:98:76:ca:8c:12:aa:0f:de:85:
                    8f:1f:46:e9:79:29:88:05:34:aa:80:70:30:ed:b2:
                    3f:ed:a0:5d:dc:20:60:d4:3b:35:d9:98:2a:76:99:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:21:BA:56:70:EB:F5:FE:18:59:93:6A:0B:AE:CB:B9:BA:02:09:E6
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e20313531323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:02:b3:a6:30:67:a5:42:d2:2b:30:60:a1:8b:ae:1b:db:08:
         c8:92:18:91:5d:77:bc:ac:8d:64:5c:36:44:95:17:bb:3d:c2:
         83:13:70:23:14:2f:43:f1:d7:a8:13:e7:dc:99:7a:38:86:83:
         a8:33:36:7c:b3:f1:9f:42:3a:01:be:25:c6:05:7a:9a:82:0b:
         a0:52:33:04:26:c5:58:95:f0:b8:29:ca:62:24:d0:20:f2:eb:
         54:1d:dd:bf:7f:5e:26:9a:f4:58:de:ab:a6:d6:4a:c2:a4:df:
         2b:bd:c8:d6:46:d8:48:d8:82:c8:e3:0f:b9:1a:61:fc:8d:ad:
         06:84:a0:9b:8d:26:6d:2b:23:83:a0:a7:93:72:e1:a3:bc:f3:
         3a:cf:84:8c:61:e4:ea:dd:fe:b6:c7:a0:84:30:76:90:44:28:
         53:2e:4d:15:06:50:8b:4e:21:46:18:aa:3e:0f:0f:36:68:45:
         ec:c8:de:f1:b9:85:ee:ae:18:cc:58:c7:53:8e:a5:3a:20:fe:
         9f:82:d3:0b:49:b7:30:7b:7e:d8:cd:78:4c:6b:9b:7b:f7:9b:
         5a:0a:b9:cd:80:7a:2c:60:b8:4d:39:e3:9b:32:f5:ec:dc:88:
         11:74:50:85:8b:91:ec:51:bf:2e:78:31:c4:a0:26:d3:67:8a:
         15:0a:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:25:04 2026 by rpki-client