Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e203338323833.roa
File:                     34352e3131322e3233322e302f32322d3234203d3e203338323833.roa (raw, json)
Hash identifier:          haoQyJ5P4rqM2coEsFaVZye1CMpH0XoElAMWHpbOmt0=
Subject key identifier:   2D:C6:1E:D9:EA:95:35:B6:0D:3D:D6:D4:E7:39:9B:75:AA:15:74:30
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       64F860B9E2C3AAAD735967CA850C129EAD180CAF
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e203338323833.roa
Signing time:             Wed 08 Apr 2026 03:17:42 +0000
ROA not before:           Wed 08 Apr 2026 03:12:42 +0000
ROA not after:            Wed 07 Apr 2027 03:17:42 +0000
asID:                     38283
IP address blocks:        45.112.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f8:60:b9:e2:c3:aa:ad:73:59:67:ca:85:0c:12:9e:ad:18:0c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:12:42 2026 GMT
            Not After : Apr  7 03:17:42 2027 GMT
        Subject: CN=2DC61ED9EA9535B60D3DD6D4E7399B75AA157430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ae:fb:b2:84:b0:16:7d:c8:06:7a:1e:be:c6:
                    27:5d:29:bf:a5:99:43:fb:d3:87:bf:c1:f3:6c:c1:
                    18:69:ac:eb:16:d4:39:c9:36:19:9a:59:09:0a:10:
                    d0:1a:60:70:96:46:bc:cf:78:18:b6:c8:dd:30:d9:
                    11:44:1d:2c:87:fa:26:9c:c7:ca:24:08:9b:9b:b0:
                    95:34:8e:97:b9:de:2e:d8:93:df:58:a4:be:3c:68:
                    6d:1d:b8:5b:fe:8c:47:c4:b2:bc:ca:6b:3b:50:57:
                    8b:1e:f0:0b:4f:33:3d:31:a8:d1:68:cc:34:be:41:
                    7e:79:9e:8a:d4:e4:33:f1:69:d0:73:19:b1:6f:72:
                    d7:45:fd:de:ed:31:73:a7:da:a1:b0:3e:a0:67:07:
                    f0:52:45:ab:38:47:fe:b9:0e:63:5f:d0:52:1d:77:
                    a6:a4:d5:1b:7a:41:bf:be:ff:11:04:96:2b:f1:d7:
                    1d:d7:c8:fe:7d:45:e1:3a:13:98:3d:cd:e8:20:3f:
                    e2:8e:99:01:a9:d6:1f:d8:01:cc:ed:24:ab:0d:ad:
                    19:60:62:bc:23:56:d1:96:f0:b9:8f:75:ea:7c:c9:
                    22:d1:64:95:32:28:4b:47:bf:9e:49:b3:ce:2e:7d:
                    16:81:7f:72:13:51:a8:93:94:1d:50:47:18:5f:9f:
                    57:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C6:1E:D9:EA:95:35:B6:0D:3D:D6:D4:E7:39:9B:75:AA:15:74:30
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3233322e302f32322d3234203d3e203338323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.112.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:eb:91:c1:5e:e1:b3:af:14:d9:57:13:e8:a5:4e:49:b7:2d:
         12:38:26:a7:2d:c9:d9:75:83:d6:85:82:98:7f:c4:68:99:20:
         04:04:7f:28:ba:e9:97:24:af:f0:fd:cc:e8:ff:4d:9a:7b:a2:
         3c:15:22:02:9a:52:d4:14:87:56:d3:32:51:cc:1e:0c:a7:61:
         21:1b:16:f6:e8:bb:d9:2f:49:cc:d0:6d:51:f9:ef:0e:71:f5:
         c4:1b:d9:10:b7:dd:a8:dd:4d:cf:e7:17:a0:c4:8e:f7:1c:46:
         39:10:b3:57:89:d8:6e:8a:fe:3c:17:67:89:84:a0:75:bc:c2:
         9b:17:e6:2f:4a:b9:5a:78:96:ec:f9:96:e6:55:84:a0:13:e1:
         b3:43:7d:1f:44:22:3c:18:62:10:8e:49:b6:9a:0c:3e:93:86:
         72:e3:3f:0b:e0:38:98:55:94:ab:97:bb:53:2f:30:d4:c0:c5:
         2e:cb:3c:01:9a:8c:59:3b:85:ec:3e:ce:c6:d9:0d:f3:2c:b9:
         50:66:d9:68:95:a4:2e:70:06:eb:56:ea:8d:f1:8f:35:87:77:
         02:8a:7a:6d:ef:78:8c:5d:49:b0:ed:52:2b:14:18:a8:b4:01:
         a6:18:b8:23:c8:7a:86:e3:38:72:f0:cc:c1:73:0e:92:94:76:
         70:f0:3a:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:16 2026 by rpki-client