Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3139322e302f32322d3232203d3e2030.roa
File:                     34352e3235302e3139322e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          OZPa+fvVCcahUq2MRJtIo/HGJOU8hQqbESNZEitTD2k=
Subject key identifier:   6B:14:75:90:2F:F6:8A:E2:4C:3F:CB:9F:8D:FD:C7:24:D5:AC:7F:12
Certificate issuer:       /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial:       4F67D7C9C2FFDE4BE1931AE1E566E678FB61972E
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3139322e302f32322d3232203d3e2030.roa
Signing time:             Fri 10 Apr 2026 05:58:05 +0000
ROA not before:           Fri 10 Apr 2026 05:53:05 +0000
ROA not after:            Fri 09 Apr 2027 05:58:05 +0000
asID:                     0
IP address blocks:        45.250.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 10:05:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:67:d7:c9:c2:ff:de:4b:e1:93:1a:e1:e5:66:e6:78:fb:61:97:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
        Validity
            Not Before: Apr 10 05:53:05 2026 GMT
            Not After : Apr  9 05:58:05 2027 GMT
        Subject: CN=6B1475902FF68AE24C3FCB9F8DFDC724D5AC7F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:62:aa:a9:b4:d4:2b:0e:6e:41:ef:8e:2e:ad:
                    ff:58:c1:95:50:49:3b:b8:cb:0e:b9:1b:c5:92:81:
                    12:e1:64:81:db:45:39:8b:8b:33:52:80:62:88:97:
                    b0:da:fb:71:a5:43:c9:48:eb:6c:0f:09:ef:d1:f2:
                    6f:2e:b1:6e:3c:96:33:c5:3f:55:54:58:63:8c:43:
                    44:d3:14:5d:60:7e:9a:b1:62:e8:19:9d:a3:d0:07:
                    13:11:3d:47:d2:e4:32:2f:42:f6:b6:24:ac:37:88:
                    ae:75:db:06:b9:55:ff:46:08:93:2a:26:05:91:f0:
                    d4:25:6b:55:c4:ec:c4:ee:8e:f0:57:7a:ee:7f:0a:
                    63:6e:0a:2d:07:c4:81:80:cc:82:28:50:a5:9e:71:
                    43:7a:89:f0:5e:62:e0:a8:87:74:47:df:81:c2:d5:
                    9a:05:3d:4e:30:0f:74:e6:29:14:16:54:fa:fd:5e:
                    bd:ee:53:88:c4:8d:cd:3d:5d:cb:4f:56:cc:2b:a8:
                    2f:2e:fc:37:fc:f6:f2:e0:64:a0:17:48:60:61:c8:
                    8b:17:4d:1f:7a:98:cc:1d:9d:ff:d1:01:b0:ed:9d:
                    eb:a6:16:83:80:c3:04:2d:43:89:7f:cb:fb:ad:44:
                    57:a6:10:84:ea:4c:65:91:be:06:92:0c:93:56:77:
                    33:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:14:75:90:2F:F6:8A:E2:4C:3F:CB:9F:8D:FD:C7:24:D5:AC:7F:12
            X509v3 Authority Key Identifier:
                keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3139322e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:26:46:40:9d:44:ec:b4:2a:26:5b:23:92:2c:aa:de:72:12:
         a1:62:0b:0f:c7:0d:83:98:69:dc:67:63:37:9a:88:e5:63:d8:
         4f:e2:ee:09:8f:f2:b4:87:93:1e:f8:50:e0:ab:fb:a9:53:e7:
         cb:b1:11:0b:16:fd:0f:71:76:a1:63:f3:9a:3c:bb:32:20:73:
         7d:e6:d3:24:dd:04:d0:90:2d:94:f8:87:6a:be:8a:c6:22:b7:
         d8:73:cf:91:93:25:ac:55:43:38:45:ba:cf:2d:58:cd:8a:ec:
         10:53:67:19:22:be:0e:a0:1f:ab:1b:9d:41:7a:40:09:d7:c9:
         0c:84:fc:43:a6:96:8f:64:b9:09:4d:92:08:d0:f6:ff:55:93:
         dd:53:32:ba:e8:48:42:c8:a7:b8:30:5d:b0:fe:c4:87:7e:f9:
         d6:1a:b2:c3:c0:e7:a4:7b:3d:e6:a0:cb:0a:d7:f9:8c:06:01:
         97:08:2a:d6:a8:c5:db:68:cc:b6:00:cb:ce:c2:d1:72:04:cf:
         3a:73:fb:ec:57:12:70:db:bb:a1:b3:0b:bd:41:c3:a2:2c:ee:
         73:cf:7f:68:50:b6:9e:55:11:32:d5:ee:f1:61:30:a5:ce:23:
         6b:a9:51:c3:d5:31:f0:a6:00:82:f6:9d:9e:52:42:46:f5:a7:
         3e:e6:14:3e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUT2fXycL/3kvhkxrh5WbmePthly4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA0MTAwNTUzMDVaFw0yNzA0MDkwNTU4MDVaMDMxMTAvBgNV
BAMTKDZCMTQ3NTkwMkZGNjhBRTI0QzNGQ0I5RjhERkRDNzI0RDVBQzdGMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfYqqptNQrDm5B744urf9YwZVQ
STu4yw65G8WSgRLhZIHbRTmLizNSgGKIl7Da+3GlQ8lI62wPCe/R8m8usW48ljPF
P1VUWGOMQ0TTFF1gfpqxYugZnaPQBxMRPUfS5DIvQva2JKw3iK512wa5Vf9GCJMq
JgWR8NQla1XE7MTujvBXeu5/CmNuCi0HxIGAzIIoUKWecUN6ifBeYuCoh3RH34HC
1ZoFPU4wD3TmKRQWVPr9Xr3uU4jEjc09XctPVswrqC8u/Df89vLgZKAXSGBhyIsX
TR96mMwdnf/RAbDtneumFoOAwwQtQ4l/y/utRFemEITqTGWRvgaSDJNWdzOJAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUaxR1kC/2iuJMP8ufjf3HJNWsfxIwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzQzNTJlMzIzNTMw
MmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi36
wDANBgkqhkiG9w0BAQsFAAOCAQEADSZGQJ1E7LQqJlsjkiyq3nISoWILD8cNg5hp
3GdjN5qI5WPYT+LuCY/ytIeTHvhQ4Kv7qVPny7ERCxb9D3F2oWPzmjy7MiBzfebT
JN0E0JAtlPiHar6KxiK32HPPkZMlrFVDOEW6zy1YzYrsEFNnGSK+DqAfqxudQXpA
CdfJDIT8Q6aWj2S5CU2SCND2/1WT3VMyuuhIQsinuDBdsP7Eh3751hqyw8DnpHs9
5qDLCtf5jAYBlwgq1qjF22jMtgDLzsLRcgTPOnP77FcScNu7obMLvUHDoizuc89/
aFC2nlURMtXu8WEwpc4ja6lRw9Ux8KYAgvadnlJCRvWnPuYUPg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:14 2026 by rpki-client