Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa
File:                     34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (raw, json)
Hash identifier:          gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=
Subject key identifier:   91:23:1E:3A:06:93:94:61:F1:BB:26:CA:02:49:27:30:DE:D4:2B:6C
Certificate issuer:       /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Certificate serial:       217AC7A26BD73E1047BC46F9AA33BFB3CC644397
Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa
Signing time:             Thu 29 Jan 2026 10:03:57 +0000
ROA not before:           Thu 29 Jan 2026 09:58:57 +0000
ROA not after:            Thu 28 Jan 2027 10:03:57 +0000
asID:                     399138
IP address blocks:        45.121.96.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Feb 2026 11:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7a:c7:a2:6b:d7:3e:10:47:bc:46:f9:aa:33:bf:b3:cc:64:43:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
        Validity
            Not Before: Jan 29 09:58:57 2026 GMT
            Not After : Jan 28 10:03:57 2027 GMT
        Subject: CN=91231E3A06939461F1BB26CA02492730DED42B6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:0e:56:70:d5:93:d8:c0:97:50:2d:11:f1:
                    fc:58:d4:ad:92:e2:52:96:ee:ee:20:7f:59:b9:60:
                    72:0e:53:be:9a:11:92:c1:d2:94:9e:1a:ee:0c:52:
                    84:99:cf:b7:ef:3e:f0:3e:1f:84:74:2e:8c:95:b9:
                    d4:b6:38:2a:33:78:0a:03:a8:d9:01:a5:5b:16:80:
                    a4:5b:14:8e:5c:df:6f:b2:20:52:8f:02:ae:5b:15:
                    24:64:2d:7f:e2:c6:82:5d:18:16:a5:4d:9b:d4:0c:
                    f3:7c:d8:27:15:7b:8e:33:a6:e8:9d:77:35:fa:5e:
                    10:60:99:cc:4a:bd:35:12:44:e0:ea:a7:ba:cb:4a:
                    8e:61:c3:f1:69:dc:2b:14:ef:88:95:fa:7f:13:d2:
                    ba:c2:78:2f:e2:ec:dd:40:b3:b1:95:04:59:24:fb:
                    21:4f:46:70:fa:bc:c3:65:74:f2:59:e3:b8:59:6b:
                    d4:6a:2a:d8:9a:18:95:c9:fc:58:f0:a3:f3:09:bc:
                    47:5d:2e:87:04:2e:45:68:71:e1:63:ab:f0:07:53:
                    da:28:b0:82:f2:49:3b:94:03:2e:29:9b:c1:9a:13:
                    74:2e:91:ef:20:c2:eb:78:c8:16:cf:de:d5:a0:bf:
                    c4:b1:87:98:cb:f2:12:f0:60:1e:b3:7b:c0:2c:07:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:23:1E:3A:06:93:94:61:F1:BB:26:CA:02:49:27:30:DE:D4:2B:6C
            X509v3 Authority Key Identifier:
                keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:dd:cc:f1:43:49:a7:3e:59:53:a1:68:76:44:e6:d1:50:f3:
         77:dd:84:d3:da:ce:c7:42:ee:cc:b0:40:d3:72:ed:0f:6a:fd:
         c1:fd:d7:95:7a:20:d6:23:0a:72:03:87:cd:c4:e6:b9:a1:dc:
         ca:80:ab:7f:ce:12:cc:12:71:06:1b:e4:71:69:f9:b9:19:3a:
         3c:05:13:08:fd:31:88:d4:4a:f0:d1:ad:b2:6b:4a:ca:db:c7:
         b7:26:d0:71:9b:0e:09:b1:11:5c:93:bc:c7:03:7c:de:d8:fa:
         1e:fc:49:22:cf:d8:10:32:1f:a0:7e:37:ae:b2:e8:3e:1b:05:
         fc:ac:43:ed:4d:fe:68:ba:3b:c1:0a:fc:ac:b7:8e:90:07:67:
         e7:b7:5e:19:40:2f:30:49:75:ce:64:f2:4e:12:c1:4c:bf:ce:
         0e:01:62:da:2a:36:fe:96:73:30:3a:79:3f:85:70:db:09:49:
         43:3f:d4:f8:26:25:e8:c0:18:f5:2d:64:96:ba:48:0d:63:32:
         54:54:4a:6f:45:9c:d3:a2:5f:bd:0d:a4:52:16:28:cc:e3:30:
         b2:05:eb:54:9b:61:56:31:46:76:24:cd:01:9e:62:fe:26:f6:
         4e:9c:d7:95:b3:a9:3e:05:73:f0:0d:e9:0d:b4:86:3b:77:71:
         53:0f:68:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:36:15 2026 by rpki-client