Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa
File:                     34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa (raw, json)
Hash identifier:          du6cVuCJAXoQmdbE62AUXdNYTUJ0MRQG8Drk9eKo8No=
Subject key identifier:   37:F5:0F:1A:4D:7F:6F:D8:9E:59:5D:1F:D9:69:69:5A:81:8E:A7:1D
Certificate issuer:       /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial:       0B2D21D10BDC7C373FE2A49B43C9DC49033D9E3A
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa
Signing time:             Thu 09 Apr 2026 05:22:29 +0000
ROA not before:           Thu 09 Apr 2026 05:17:29 +0000
ROA not after:            Thu 08 Apr 2027 05:22:29 +0000
asID:                     151253
IP address blocks:        45.119.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 04:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2d:21:d1:0b:dc:7c:37:3f:e2:a4:9b:43:c9:dc:49:03:3d:9e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
        Validity
            Not Before: Apr  9 05:17:29 2026 GMT
            Not After : Apr  8 05:22:29 2027 GMT
        Subject: CN=37F50F1A4D7F6FD89E595D1FD969695A818EA71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:da:3e:19:00:86:50:73:8b:5d:99:4d:2f:
                    be:b6:f2:99:6d:53:64:09:9a:cf:e0:d2:73:a3:0a:
                    76:25:12:f7:a5:60:65:a4:1a:3c:9e:d0:c8:b3:42:
                    74:22:5f:af:68:05:ca:c7:52:2e:7d:bc:01:ef:a1:
                    99:dd:05:ae:d1:09:ab:f5:9d:b8:6b:7c:ec:2e:d8:
                    94:51:f9:8a:38:ab:6b:67:88:b2:9c:a9:05:37:65:
                    31:ed:6b:42:d5:9d:72:ca:d6:84:81:50:cc:0a:da:
                    cc:28:62:9d:b9:9b:0e:75:b7:7b:98:7e:57:8d:33:
                    c5:13:df:9a:c9:5e:47:da:47:4b:a5:6d:ff:97:34:
                    5c:94:7f:be:79:7a:8b:15:f1:90:b0:5f:71:fc:b6:
                    5f:c6:c1:ff:a0:d5:ec:34:2a:f5:ef:e9:69:74:4e:
                    00:4b:92:7c:12:96:b5:44:af:12:9b:fd:c7:f3:19:
                    85:6f:d2:1d:6a:8a:09:d7:e4:17:cf:99:aa:b0:34:
                    9c:88:a6:52:c0:4d:33:5f:35:a5:9d:9d:ae:e8:12:
                    24:b3:e0:39:23:8e:a2:db:fb:4d:06:ae:a1:fc:95:
                    12:8b:61:86:39:50:dd:07:55:76:3b:47:be:a3:cf:
                    c9:45:4a:e8:f8:6a:11:ad:56:b7:91:e8:c5:91:78:
                    e8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:0F:1A:4D:7F:6F:D8:9E:59:5D:1F:D9:69:69:5A:81:8E:A7:1D
            X509v3 Authority Key Identifier:
                keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130352e302f32342d3234203d3e20313531323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.119.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:3e:84:67:2d:d3:35:8c:68:05:30:b0:5f:32:0b:91:51:7b:
         8a:1a:dc:f7:40:3c:75:61:02:3e:8b:6b:37:73:f3:10:72:67:
         52:dc:14:ce:29:e3:34:0c:ff:82:a8:5d:2e:14:59:f0:a2:b4:
         c1:90:f8:f6:da:7b:03:f9:d9:ff:85:f9:70:34:4a:b7:06:73:
         06:7f:91:86:42:9f:4d:3a:cf:2b:e2:14:45:3d:6a:99:c8:58:
         6b:ce:fc:b1:59:ac:3c:b4:1e:44:33:73:f3:5f:64:42:17:6a:
         61:87:51:9a:de:1f:c5:90:06:bc:74:3f:1c:db:26:02:9f:5b:
         6f:2b:90:fa:3e:40:f1:7f:79:c1:91:ee:d7:c7:cd:94:ef:ad:
         64:7e:11:92:7d:c0:f2:cf:91:cf:3b:44:82:1f:8e:3f:c3:28:
         fb:2e:78:8d:a8:0d:2d:29:4b:67:1a:af:99:6d:88:f2:72:6f:
         95:a0:e9:24:c7:b7:7f:78:85:89:7f:0b:7f:71:60:30:62:31:
         83:d8:2b:e3:5f:d4:25:38:d4:81:5a:c4:d4:f0:0b:3d:5a:c0:
         0b:87:8e:6d:e7:c7:0c:65:5c:a1:99:92:72:3a:1b:05:d8:6b:
         6c:11:7f:88:89:9b:c1:e5:8c:d2:78:2f:1c:e5:b3:41:d1:44:
         1f:97:47:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:33 2026 by rpki-client