Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3136302e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3136302e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          l9RX9o1ovgRrOqLZVaI8y4P+r2ohUTXA3b9Eq5uuJsk=
Subject key identifier:   74:D9:EC:E9:DE:65:FC:64:7C:7A:A1:E2:A3:F5:19:8F:71:88:F8:B2
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       3B8B8FC1847F0F9101F598D28161FFC3F7AA7FB8
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3136302e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:56:00 +0000
ROA not before:           Fri 10 Apr 2026 05:51:00 +0000
ROA not after:            Fri 09 Apr 2027 05:56:00 +0000
asID:                     45062
IP address blocks:        45.253.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8b:8f:c1:84:7f:0f:91:01:f5:98:d2:81:61:ff:c3:f7:aa:7f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:51:00 2026 GMT
            Not After : Apr  9 05:56:00 2027 GMT
        Subject: CN=74D9ECE9DE65FC647C7AA1E2A3F5198F7188F8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:4c:87:0f:d8:fd:47:81:95:4c:22:c2:ec:
                    81:c3:18:2a:a8:0c:d9:0b:17:25:c6:1f:e8:d5:59:
                    4c:98:1d:f0:7b:c6:e5:ef:e5:19:ab:ec:ed:fd:c3:
                    17:05:a9:c5:fa:ca:bd:fc:4c:36:68:8f:8c:c4:6f:
                    cb:f8:e5:4b:c4:c5:3d:5d:aa:2d:c5:52:14:2f:e2:
                    51:b6:1b:a9:00:c5:c2:e3:b6:6d:53:e6:1c:86:7b:
                    8d:59:04:58:c5:2e:a9:24:c4:7c:5d:28:69:eb:54:
                    39:1d:96:85:4c:a4:6d:6f:50:ab:14:85:2f:15:58:
                    6f:bd:4b:4f:01:ee:f0:e3:e5:9c:58:01:43:d1:bb:
                    78:93:90:d4:0c:f6:f8:d3:c0:01:69:02:fc:c4:c8:
                    15:47:e4:2e:5f:6f:bf:7f:d5:98:61:57:95:09:5a:
                    76:0b:cd:ee:f9:40:f3:67:fe:0a:29:75:e2:80:ff:
                    c2:84:ee:90:7e:1b:43:44:10:e8:11:c3:7a:2a:1f:
                    85:1e:25:1c:a5:b0:f5:60:28:ab:4f:ef:fe:4f:16:
                    9c:c1:01:a8:23:27:13:17:22:66:f9:2b:6c:a9:96:
                    07:f3:03:f9:51:ca:ac:13:2c:be:5f:7b:5b:08:45:
                    ed:2d:b4:61:84:da:16:ee:15:35:42:d3:2a:42:71:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D9:EC:E9:DE:65:FC:64:7C:7A:A1:E2:A3:F5:19:8F:71:88:F8:B2
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3136302e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:08:a6:c3:e6:40:ce:94:1d:82:ab:de:64:86:3a:ee:53:23:
         19:d5:07:35:e3:10:02:00:54:ff:bd:20:52:ff:73:b5:73:a5:
         c7:84:d3:0e:fc:3b:4a:86:ef:96:05:95:2a:00:91:80:27:21:
         03:37:d7:55:3d:5a:53:dd:19:ce:33:d9:88:2e:71:40:72:d7:
         de:e9:c8:f3:86:71:a4:f5:63:59:df:20:62:76:6d:b5:e9:78:
         aa:16:84:75:13:9e:c5:91:05:e1:b4:b3:1c:c9:78:bc:d4:94:
         20:4b:dc:3d:a2:23:a3:7f:ea:7b:51:4a:87:58:c6:de:27:9e:
         5b:55:bf:1a:e2:46:67:74:5f:e6:e8:b7:67:1f:fd:c4:c1:b8:
         38:0b:8d:06:98:7e:09:ec:8f:e3:2d:58:6f:d1:0c:80:dc:dd:
         2c:84:76:29:dd:be:eb:2a:80:d8:7a:90:9e:b0:d8:13:bb:4b:
         4c:0f:7e:7f:4f:5d:e9:ac:f3:11:aa:98:0a:93:e6:e5:a8:84:
         9a:c2:9a:86:b2:2d:02:49:ce:7c:ea:f4:0d:91:66:52:a5:73:
         48:36:92:11:10:31:5b:f5:08:c0:09:78:7e:64:70:d9:b7:91:
         ed:7b:fb:88:e9:50:41:5c:08:ef:43:8e:36:8a:3d:38:7b:7b:
         a9:75:8b:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:26 2026 by rpki-client