Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34322e3138362e302e302f31362d3234203d3e203435303632.roa
File:                     34322e3138362e302e302f31362d3234203d3e203435303632.roa (raw, json)
Hash identifier:          v9ZeeAZpRx8jkQ01s53WJpjj5q6TH6oADtXd4JRALU4=
Subject key identifier:   BE:48:74:0B:00:CD:12:E3:C8:13:62:7E:A4:8A:8F:43:3D:D7:9B:F3
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       764AC4876BD0A193FF73E642624CFC5F7B0888CB
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34322e3138362e302e302f31362d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:49:15 +0000
ROA not before:           Fri 10 Apr 2026 05:44:15 +0000
ROA not after:            Fri 09 Apr 2027 05:49:15 +0000
asID:                     45062
IP address blocks:        42.186.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4a:c4:87:6b:d0:a1:93:ff:73:e6:42:62:4c:fc:5f:7b:08:88:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:44:15 2026 GMT
            Not After : Apr  9 05:49:15 2027 GMT
        Subject: CN=BE48740B00CD12E3C813627EA48A8F433DD79BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c1:b6:d1:fa:ae:72:e2:f9:22:fa:76:0e:bd:
                    00:05:35:52:07:a8:81:ab:f5:67:ea:2d:90:f5:34:
                    3e:1b:66:af:51:f2:6f:e3:c8:3d:c1:1e:fe:b5:a3:
                    43:2f:2f:2e:9d:68:13:9a:88:46:ba:7a:ed:57:6a:
                    4b:ac:0e:52:83:0e:2e:0e:75:db:92:f4:19:64:0f:
                    ed:cb:72:0c:fa:b2:43:c8:76:73:fc:d1:0e:13:2f:
                    8a:c2:6d:19:e8:76:b7:0d:0f:3c:c4:82:5b:6f:19:
                    bc:ba:67:0e:66:c0:5a:13:72:b8:ab:e5:25:f0:b9:
                    cd:6a:7b:0c:89:74:9c:7a:23:55:e0:df:02:fa:b6:
                    74:de:a6:10:e3:da:c4:ed:71:a4:46:94:31:3b:f9:
                    32:ad:fa:24:9b:7f:51:d6:60:49:9e:5e:f1:35:ad:
                    c4:2f:4d:87:49:ea:9f:1e:fc:a5:95:dd:83:b7:83:
                    c1:8d:2b:9e:8e:09:d0:16:ae:87:a2:9b:a0:67:8d:
                    02:51:5b:6e:1b:e7:c2:f5:54:e5:7e:78:1e:c4:af:
                    f7:c6:0d:96:43:25:f2:43:99:7d:9e:62:6e:23:26:
                    27:65:65:80:54:58:eb:a3:e9:94:20:84:19:93:13:
                    54:60:ef:6b:72:f2:0f:c8:48:db:5a:61:ee:a0:10:
                    ce:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:74:0B:00:CD:12:E3:C8:13:62:7E:A4:8A:8F:43:3D:D7:9B:F3
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34322e3138362e302e302f31362d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.186.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:38:3d:fe:31:8e:20:17:40:31:ba:75:95:9e:18:f6:62:16:
         69:40:fc:8b:22:a3:b2:ef:14:9e:53:6d:43:07:6f:24:6a:62:
         38:9a:99:08:4a:3f:2a:eb:ff:c5:ff:9e:3d:cd:23:24:7c:17:
         14:d4:a8:75:35:0d:e2:c2:75:35:2b:47:05:a4:83:ff:41:24:
         23:61:2f:a8:70:d8:5b:9c:0b:6e:2c:09:cf:9f:c1:f8:5a:8b:
         fc:10:fb:5c:c7:04:95:aa:c0:82:c6:fc:8f:5c:2b:90:f0:5a:
         7a:2f:b3:5c:b3:ea:fc:60:d4:66:65:9e:18:03:9e:61:ae:1b:
         6e:19:d0:88:a9:e5:2e:4b:08:a9:ca:ad:7f:a3:58:e3:9f:4d:
         55:27:34:85:d6:09:22:3c:55:98:86:c4:c9:e5:ba:79:ef:e3:
         54:ca:95:6d:85:4a:12:a9:8e:5d:26:c1:b8:0f:45:93:be:3b:
         df:3f:4c:e5:ae:a0:fd:72:6a:cb:e0:36:cc:f4:b4:70:33:4c:
         c0:f0:18:8f:0b:5c:a5:dc:5f:52:de:39:9d:31:93:7f:ef:fa:
         fc:16:86:a6:e8:10:9b:49:d3:9c:f7:db:39:9f:4e:89:52:8a:
         59:3b:fd:7b:e5:d2:20:25:69:4a:31:2f:69:81:16:d0:8d:00:
         49:19:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:13 2026 by rpki-client