Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131332e31362e302f32332d3234203d3e20313531323631.roa
File:                     34352e3131332e31362e302f32332d3234203d3e20313531323631.roa (raw, json)
Hash identifier:          hC/84JY2KNiAMCH0NriUAl+JqNNd3fAUHMdQjmbmZuY=
Subject key identifier:   E0:39:C6:CC:50:61:38:F4:7D:60:73:14:96:BB:16:DC:E7:A4:8F:7E
Certificate issuer:       /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial:       01018CBC3DCB95047F478D5BDD8F701EDA181CE3
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131332e31362e302f32332d3234203d3e20313531323631.roa
Signing time:             Wed 08 Apr 2026 03:18:14 +0000
ROA not before:           Wed 08 Apr 2026 03:13:14 +0000
ROA not after:            Wed 07 Apr 2027 03:18:14 +0000
asID:                     151261
IP address blocks:        45.113.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:01:8c:bc:3d:cb:95:04:7f:47:8d:5b:dd:8f:70:1e:da:18:1c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
        Validity
            Not Before: Apr  8 03:13:14 2026 GMT
            Not After : Apr  7 03:18:14 2027 GMT
        Subject: CN=E039C6CC506138F47D60731496BB16DCE7A48F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fc:85:b7:e9:1a:df:66:6f:78:23:1b:70:ba:
                    8c:a0:3a:4c:50:77:27:45:44:7d:49:64:e5:dc:10:
                    0f:34:a2:92:31:59:42:d2:1b:24:f9:b0:53:b3:70:
                    49:70:9a:cc:29:a9:9a:c6:03:7c:70:ba:01:c9:aa:
                    bc:e3:ad:f5:f9:30:ca:b7:0e:00:46:c6:18:25:06:
                    fc:44:35:3a:15:68:69:22:e0:a1:15:27:d9:7f:8c:
                    1a:76:48:e3:5b:60:5a:dd:7e:4b:10:3e:fc:cd:e0:
                    49:3c:7a:e4:09:4c:4c:77:70:ca:e5:64:dc:a7:73:
                    23:b1:6d:a4:1e:2c:dd:41:6e:5e:6f:57:3b:d0:a8:
                    09:18:30:d4:12:cf:16:76:ec:8b:08:ea:44:dd:7f:
                    b9:78:6e:16:e6:4c:56:f0:26:c9:77:aa:37:05:37:
                    73:f5:97:00:af:49:bb:2c:c2:e1:bf:77:73:c6:3c:
                    9c:a1:7a:8f:eb:0f:1c:4b:3a:66:eb:bd:60:55:5a:
                    2d:c0:0a:91:f3:cf:8d:e1:b1:d2:ea:6f:8b:e6:4e:
                    52:ab:c7:62:b1:99:27:62:2f:0f:91:15:56:4d:30:
                    4f:da:cc:34:d4:f0:98:31:1e:90:07:a3:f2:d6:0c:
                    e2:5c:e4:70:05:31:19:b5:21:79:3e:5a:b0:25:50:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:39:C6:CC:50:61:38:F4:7D:60:73:14:96:BB:16:DC:E7:A4:8F:7E
            X509v3 Authority Key Identifier:
                keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131332e31362e302f32332d3234203d3e20313531323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.113.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:0d:0a:a6:48:4e:83:e5:65:24:ac:16:2d:d6:7b:03:76:9c:
         c1:3d:9b:41:ff:e0:75:1e:82:c6:87:7e:30:2e:1f:58:f3:68:
         47:55:29:8a:cb:ef:e8:b7:36:a6:29:d2:af:9f:76:c1:fd:ac:
         2b:9f:1b:3c:94:34:df:cf:88:f2:59:ca:ef:d8:9f:4e:94:43:
         e9:9c:b2:1b:03:90:a0:e8:77:86:98:3d:ce:99:e9:24:02:c6:
         25:51:9c:37:d4:bd:3f:05:8b:04:ba:02:5f:57:1d:78:fc:d2:
         3b:d0:1d:bc:ca:89:3b:67:6d:de:62:7d:28:38:9b:bf:b4:c4:
         5b:f3:9a:a9:d8:bd:6e:2f:db:7a:cc:ad:61:04:5a:be:4d:4d:
         06:c1:ba:1c:a3:0c:fb:49:d1:bb:3a:64:7a:46:82:4b:12:60:
         f6:89:0f:3e:3a:64:41:7e:76:0b:fd:b2:f0:a3:68:19:c5:08:
         54:d5:29:b1:93:b3:10:d7:e3:c5:7b:c6:5c:e5:3f:d7:72:e6:
         5b:c3:ea:ef:f9:40:44:09:92:df:a4:32:55:38:be:e8:a9:ec:
         90:d8:44:70:6c:9e:9b:df:3d:af:8a:d2:e8:08:2c:c1:15:ff:
         fb:af:a4:9e:41:c8:b3:13:2c:d8:10:0d:70:d7:94:c4:62:67:
         d0:81:07:93
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:24:37 2026 by rpki-client