Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3135362e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3135362e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          ECtIBz2errxoXD4wfcDJ3Bw2SDh912IeOEtizuheQig=
Subject key identifier:   3C:6E:02:FB:BF:F4:E1:75:23:1D:A5:60:38:02:F4:24:03:A6:13:DE
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       317CC805938EBE43801DA466BD6B5ACBFA7ABC23
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3135362e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:56:01 +0000
ROA not before:           Fri 10 Apr 2026 05:51:01 +0000
ROA not after:            Fri 09 Apr 2027 05:56:01 +0000
asID:                     45062
IP address blocks:        45.253.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7c:c8:05:93:8e:be:43:80:1d:a4:66:bd:6b:5a:cb:fa:7a:bc:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:51:01 2026 GMT
            Not After : Apr  9 05:56:01 2027 GMT
        Subject: CN=3C6E02FBBFF4E175231DA5603802F42403A613DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:e0:71:97:9f:03:47:0a:8e:1e:67:9d:ec:
                    45:33:91:cf:ea:43:10:a6:58:d6:34:d5:8b:69:46:
                    f1:30:7e:14:6c:58:69:12:09:ac:ed:0c:4c:4e:6d:
                    87:ee:5b:95:34:ef:ae:3b:7a:12:e9:17:59:75:06:
                    19:ac:1e:7c:fd:7c:28:a5:bb:24:f2:60:f2:f2:0d:
                    94:ca:33:4b:6f:f7:5d:8d:76:72:7f:3d:bf:b3:c3:
                    e5:c5:70:58:6e:d5:48:17:29:4e:a1:81:a7:b7:77:
                    22:34:3b:4e:ff:dd:ae:23:d1:8e:e4:a7:1d:13:cd:
                    b6:bb:96:88:67:92:67:5a:0d:cb:f8:79:87:9d:e6:
                    46:0e:e1:fc:46:fa:20:59:21:fb:3f:7c:62:9a:d8:
                    b6:e2:ed:45:9d:8f:4b:a1:2d:23:c8:bd:b5:28:05:
                    c4:3e:1d:a5:6a:0f:51:a8:12:51:1e:bd:b5:a0:02:
                    91:f8:95:89:7c:bd:44:23:c4:2d:85:c8:73:65:d9:
                    57:6c:aa:d0:a1:3a:8e:7b:69:3e:1f:0f:e8:fc:e6:
                    95:02:fb:f5:23:52:79:5e:35:d0:87:a2:5a:16:02:
                    8e:06:92:d7:37:12:8c:40:aa:e1:1e:61:86:55:1f:
                    6f:cf:88:51:f8:d8:b8:87:99:10:d6:53:d3:3e:0d:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6E:02:FB:BF:F4:E1:75:23:1D:A5:60:38:02:F4:24:03:A6:13:DE
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3135362e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:6d:dd:f8:58:eb:46:04:cd:db:b0:aa:e6:bd:e1:7a:7a:
         ed:c1:c1:7f:1b:76:88:3e:42:9f:06:f4:4f:0f:e0:47:31:65:
         1a:52:95:0b:a8:18:4e:2f:b6:d6:a7:a0:10:18:f0:57:ac:90:
         3f:8f:c5:bf:d5:40:b1:b5:58:bf:69:38:aa:a9:42:0a:e5:78:
         1d:61:01:81:c1:a1:e6:d9:e7:f3:1f:63:88:f7:22:e1:85:bb:
         12:b5:ee:e7:7a:ed:24:31:14:0e:81:a2:70:57:a9:dc:4f:c5:
         c2:b1:14:57:37:c9:27:a6:56:a1:93:98:9e:52:58:41:85:3a:
         15:e0:69:24:d9:25:39:d4:ae:7b:ed:74:c1:60:e0:1c:90:be:
         0a:6a:5c:99:02:16:b5:88:4f:a0:a5:ad:50:95:97:c3:bf:91:
         c8:e8:48:98:8b:0b:e7:fd:af:9e:4c:4f:03:e0:48:a9:fb:4d:
         c1:a4:c6:6c:0a:a6:fe:87:2e:22:b0:43:82:ef:6e:c0:f3:9f:
         e4:94:ee:e6:3d:1e:c3:48:ed:55:3c:97:a1:45:47:2c:dc:79:
         bb:fa:25:48:cf:6e:75:d5:fe:c2:d9:1c:c6:79:dd:f9:1e:56:
         3d:c1:58:3e:cc:b4:00:f0:a5:ee:86:ab:ed:0c:7c:e3:26:02:
         cb:3a:bb:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client