Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3134382e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3134382e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          DIJMW6D/mw0gXiTtAES04lH9zPx/nz/OvVQRL6akrK0=
Subject key identifier:   2D:BB:6B:C8:12:2E:13:36:A0:9A:73:16:4F:32:C0:EE:98:6F:D6:02
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       5648790A778014C14269570D549640700A37C5D4
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3134382e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:56:00 +0000
ROA not before:           Fri 10 Apr 2026 05:51:00 +0000
ROA not after:            Fri 09 Apr 2027 05:56:00 +0000
asID:                     45062
IP address blocks:        45.253.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:48:79:0a:77:80:14:c1:42:69:57:0d:54:96:40:70:0a:37:c5:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:51:00 2026 GMT
            Not After : Apr  9 05:56:00 2027 GMT
        Subject: CN=2DBB6BC8122E1336A09A73164F32C0EE986FD602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:a6:5a:e6:d6:4e:20:c0:cf:f3:d2:52:cc:
                    2f:3d:ab:0c:c5:30:58:aa:3f:f3:60:b6:a8:14:34:
                    84:c5:1b:df:e1:5e:65:01:e6:1f:58:1f:d1:69:8d:
                    98:61:39:c1:97:04:18:a1:29:03:5b:7c:f2:48:0f:
                    c4:9e:fa:db:9c:44:05:13:ce:4b:50:bf:04:86:4c:
                    88:02:52:9e:6d:db:c4:4a:ac:bb:2f:02:09:59:f4:
                    36:6f:14:a0:71:50:9e:47:e0:fb:05:d0:47:21:7d:
                    6f:e6:ed:35:5a:53:57:79:3c:52:b1:3c:11:10:2b:
                    98:85:3e:04:97:7e:fb:9c:f3:f0:2b:15:30:c1:ac:
                    33:b0:85:f0:5f:95:8d:78:12:87:10:00:94:9d:92:
                    3e:ab:40:c1:12:33:f7:b9:29:0f:8e:a5:63:fb:fe:
                    3f:ac:f0:c2:56:d0:69:c1:54:9d:3e:4a:23:cb:dd:
                    55:6e:3f:9b:e5:53:98:09:af:3b:0a:7e:32:1a:ff:
                    6a:e1:e8:3e:72:23:f7:bf:1e:93:80:d6:81:8f:6c:
                    6e:a5:bf:e2:6a:09:2f:1d:76:7c:08:2e:98:c3:8c:
                    9b:43:fa:04:b5:69:09:5f:f1:6e:88:72:68:42:73:
                    7e:be:95:4d:7e:8c:72:b6:ca:84:7a:6c:44:23:3d:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BB:6B:C8:12:2E:13:36:A0:9A:73:16:4F:32:C0:EE:98:6F:D6:02
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3134382e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:83:b9:44:37:7a:53:8c:80:d4:08:16:d5:1f:9f:72:d0:25:
         65:61:16:fc:f1:95:a4:98:c6:6d:ae:b3:97:b7:df:b0:f7:22:
         76:58:54:57:2d:7d:92:c0:e7:d8:83:2e:9e:c2:0c:b4:0e:8a:
         52:fd:cb:55:38:84:9c:83:42:aa:4e:d5:0a:dd:fc:bd:ed:6d:
         59:41:71:0d:3a:9d:22:05:3d:8b:43:0c:13:76:e6:46:ad:7d:
         82:53:6b:3f:e1:e7:9a:7e:4b:6c:01:92:2f:89:dc:81:a3:96:
         6a:94:a0:89:ef:2d:d0:14:92:3f:59:17:23:37:3f:30:a4:be:
         fa:f6:bd:fe:d1:bc:ec:d6:a9:fb:a6:17:53:d3:bd:a2:0c:a9:
         55:ef:a2:29:2e:b0:8b:26:fa:ee:cd:e6:99:55:ef:0d:6e:94:
         bb:ec:76:4b:f4:03:ee:fe:06:96:b0:91:54:c3:ab:1d:bf:95:
         63:cc:b3:1f:f0:35:b9:ef:8b:5c:2f:02:8d:bc:c4:62:3a:36:
         fc:f9:48:8f:c2:b7:02:e8:63:aa:14:74:90:07:38:41:f6:4b:
         0f:82:c5:97:5e:62:4d:ce:cb:0e:f5:ac:0c:c6:51:1f:5c:93:
         39:b0:c3:66:a8:40:3a:05:20:0f:93:44:65:36:f5:99:31:65:
         bd:9b:8e:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:17 2026 by rpki-client