Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3132372e3132382e302f32322d3234203d3e203435303632.roa
File:                     34352e3132372e3132382e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          eRchTryyQprBb7JjBwjHloACKHjHjo3VrbSjeRJiHsM=
Subject key identifier:   DC:22:61:7C:19:1A:F5:13:D1:5B:33:54:3B:AC:76:1E:77:83:74:A6
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       5F890D837D96F4098C3F393BFA727861647B2749
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3132372e3132382e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:49:15 +0000
ROA not before:           Fri 10 Apr 2026 05:44:15 +0000
ROA not after:            Fri 09 Apr 2027 05:49:15 +0000
asID:                     45062
IP address blocks:        45.127.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:89:0d:83:7d:96:f4:09:8c:3f:39:3b:fa:72:78:61:64:7b:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:44:15 2026 GMT
            Not After : Apr  9 05:49:15 2027 GMT
        Subject: CN=DC22617C191AF513D15B33543BAC761E778374A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:28:81:0d:f8:55:10:2e:41:35:e8:c2:84:84:
                    13:3d:28:b5:83:c4:8c:4f:3c:2f:b7:be:71:e5:7e:
                    5c:3b:75:8d:4d:d1:95:aa:fa:a1:11:aa:d4:93:8f:
                    e5:88:0a:a5:da:ba:b8:c5:d0:46:3a:97:c3:44:db:
                    b7:e7:a7:73:28:9d:6e:60:f9:3b:a6:bd:a2:7b:f8:
                    c6:b1:91:40:ba:56:05:26:42:6c:17:a2:80:2f:c8:
                    a6:1e:2c:43:eb:9c:ad:77:70:31:ce:1d:7b:68:f4:
                    ec:50:89:29:d3:b3:96:8f:a8:39:36:62:3f:aa:a9:
                    17:68:74:60:2a:9e:dc:7f:19:f8:88:ec:1f:76:b2:
                    d4:78:45:b4:29:31:47:4e:92:a5:9e:95:52:f1:11:
                    c5:04:d3:2a:b7:1f:fe:a2:a1:bc:44:7d:5e:79:31:
                    9d:f1:6b:bc:8c:1b:b4:71:1c:0e:fa:e0:9b:4f:05:
                    a9:54:ea:da:51:f0:a4:46:51:80:ea:93:7e:28:c5:
                    11:d8:55:03:84:7b:7c:c5:2f:19:06:91:fe:dc:96:
                    d7:06:6c:11:74:2e:56:a7:e1:0f:06:f6:f5:e5:e4:
                    40:ac:25:b6:95:fe:48:0c:0e:4c:b7:77:dc:fd:81:
                    c2:3b:ba:11:03:69:32:25:f7:df:5d:cd:d5:8e:80:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:22:61:7C:19:1A:F5:13:D1:5B:33:54:3B:AC:76:1E:77:83:74:A6
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3132372e3132382e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.127.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:b8:fa:ec:49:a6:72:46:67:63:ac:cc:67:a6:08:2d:69:
         4a:95:35:01:67:8c:7f:33:91:7d:a2:80:36:86:fe:1f:de:d4:
         72:bd:65:c2:13:6b:c4:f4:a7:3e:af:93:60:41:bd:b0:a3:51:
         b9:58:b9:53:b5:1c:6c:b4:69:53:cb:dc:1e:33:d0:80:02:3f:
         1e:f9:f9:ff:5c:a4:6b:bd:4a:d2:c6:0d:f8:7d:c6:37:40:b8:
         b8:ed:e6:70:43:be:01:a0:9c:4d:9c:82:97:d7:48:0a:6c:e8:
         b5:e0:8a:d9:62:5e:81:4d:6e:db:48:ea:be:c1:3e:a1:e5:7b:
         b9:0a:e8:2d:66:b8:c3:93:c7:40:ef:08:31:4b:6b:35:a4:3f:
         7f:99:e7:27:25:be:c8:44:45:48:04:f1:a3:54:c9:67:aa:aa:
         62:b3:36:da:8b:c3:88:90:f9:53:9d:2e:cc:39:b1:b0:60:0c:
         34:8a:f5:0a:66:0a:cf:92:f6:95:8e:ae:f8:32:34:f0:8c:73:
         61:4e:a0:35:84:b4:0c:72:30:5f:8f:24:64:db:09:13:0f:4e:
         99:2a:37:b4:61:cc:fb:23:ee:fb:50:dc:ac:7d:fa:ac:fa:4c:
         b1:28:dc:14:23:3a:d2:02:c1:94:d1:5e:38:25:fe:f2:77:3b:
         52:fa:a6:b9
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUX4kNg32W9AmMPzk7+nJ4YWR7J0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTQ0MTVaFw0yNzA0MDkwNTQ5MTVaMDMxMTAvBgNV
BAMTKERDMjI2MTdDMTkxQUY1MTNEMTVCMzM1NDNCQUM3NjFFNzc4Mzc0QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1KIEN+FUQLkE16MKEhBM9KLWD
xIxPPC+3vnHlflw7dY1N0ZWq+qERqtSTj+WICqXaurjF0EY6l8NE27fnp3MonW5g
+TumvaJ7+MaxkUC6VgUmQmwXooAvyKYeLEPrnK13cDHOHXto9OxQiSnTs5aPqDk2
Yj+qqRdodGAqntx/GfiI7B92stR4RbQpMUdOkqWelVLxEcUE0yq3H/6iobxEfV55
MZ3xa7yMG7RxHA764JtPBalU6tpR8KRGUYDqk34oxRHYVQOEe3zFLxkGkf7cltcG
bBF0Llan4Q8G9vXl5ECsJbaV/kgMDky3d9z9gcI7uhEDaTIl999dzdWOgDqxAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU3CJhfBka9RPRWzNUO6x2HneDdKYwHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMxMzIz
NzJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi1/gDANBgkqhkiG9w0BAQsFAAOCAQEAhi64+uxJpnJGZ2OszGemCC1p
SpU1AWeMfzORfaKANob+H97Ucr1lwhNrxPSnPq+TYEG9sKNRuVi5U7UcbLRpU8vc
HjPQgAI/Hvn5/1yka71K0sYN+H3GN0C4uO3mcEO+AaCcTZyCl9dICmzoteCK2WJe
gU1u20jqvsE+oeV7uQroLWa4w5PHQO8IMUtrNaQ/f5nnJyW+yERFSATxo1TJZ6qq
YrM22ovDiJD5U50uzDmxsGAMNIr1CmYKz5L2lY6u+DI08IxzYU6gNYS0DHIwX48k
ZNsJEw9OmSo3tGHM+yPu+1DcrH36rPpMsSjcFCM60gLBlNFeOCX+8nc7UvqmuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:24 2026 by rpki-client