Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138382e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3138382e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          NEWDRgXSYigJYq5Ofzi46OMuHmWeW5V3ClvuzJqW3dU=
Subject key identifier:   E9:3F:B6:F7:5A:9A:B9:EB:31:3F:DD:1F:0B:26:5C:C8:1B:85:9C:C5
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       06A47481C972D96F6E2A415A37A006D7BB091F25
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138382e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:52:57 +0000
ROA not before:           Fri 10 Apr 2026 05:47:57 +0000
ROA not after:            Fri 09 Apr 2027 05:52:57 +0000
asID:                     45062
IP address blocks:        45.253.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a4:74:81:c9:72:d9:6f:6e:2a:41:5a:37:a0:06:d7:bb:09:1f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:47:57 2026 GMT
            Not After : Apr  9 05:52:57 2027 GMT
        Subject: CN=E93FB6F75A9AB9EB313FDD1F0B265CC81B859CC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:b5:a7:c6:35:1e:1f:97:8e:9a:d7:ac:a3:
                    98:96:5d:30:9c:06:87:3f:ec:77:08:b1:29:62:80:
                    62:8e:f5:8b:25:0f:23:a9:5a:0d:f8:fa:34:78:fa:
                    81:9f:36:7d:08:b6:83:fb:9f:0b:33:44:26:69:fa:
                    5e:79:42:ff:e9:53:86:bc:26:cc:74:1a:d9:c9:dd:
                    b5:a3:e0:03:45:dc:80:bb:ec:89:53:63:d1:c5:06:
                    0a:c8:d7:e5:18:fd:7f:37:16:2c:2d:74:23:73:f8:
                    72:9c:5f:ea:44:2c:51:4a:7e:16:59:89:c0:73:73:
                    fc:1f:cf:14:2b:15:89:ed:36:e2:5a:af:94:ba:c3:
                    a1:83:36:3a:8f:bc:47:95:f8:e6:94:1d:9e:3d:7b:
                    20:47:34:eb:f4:61:ef:fb:e2:c5:f2:09:b3:c7:b4:
                    19:d4:2d:b7:86:86:15:fe:3d:ec:99:e9:e1:de:ed:
                    cc:ee:a4:83:de:7c:b2:1c:bf:8b:ab:c5:05:1b:dd:
                    4d:12:a6:33:b7:39:7e:2e:92:e1:9e:ab:4f:a9:97:
                    38:64:d8:f9:24:6d:dd:a7:7f:18:cc:e3:6d:be:9e:
                    f7:a2:cb:75:cb:15:35:3c:bf:4a:a4:8a:b2:5a:9a:
                    9d:20:64:58:94:a7:b7:18:0f:58:6d:cc:38:b8:cf:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3F:B6:F7:5A:9A:B9:EB:31:3F:DD:1F:0B:26:5C:C8:1B:85:9C:C5
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138382e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:47:e9:b6:d7:b1:1d:14:7a:45:41:0b:19:41:f4:98:fb:
         c0:69:de:fa:37:b8:fd:cc:a2:12:0f:eb:6f:2d:dd:f4:b9:fc:
         fd:50:d0:19:fb:79:6f:e8:7b:16:10:25:b6:eb:fe:70:b4:66:
         3e:4e:59:90:f1:11:5f:0f:be:75:58:71:b3:68:6e:4c:d5:4a:
         3d:7d:6b:09:1e:f5:e6:c0:21:fa:c2:48:c7:b5:7b:6e:83:a2:
         00:b8:2f:64:4f:5d:1b:6b:a1:c4:2c:4f:3b:27:d0:63:27:36:
         86:b1:04:ce:c0:47:da:15:16:09:94:a3:db:6e:06:c9:10:bb:
         99:88:62:ca:df:ec:47:a6:13:34:02:3f:ed:f2:ab:7b:ee:7d:
         fc:e4:63:5b:b6:27:3d:34:8f:ce:00:6c:8b:d4:a6:76:de:b5:
         a4:3e:77:73:60:0b:f8:c5:15:fb:a4:37:c6:a3:74:83:8c:0f:
         71:ff:06:ba:a5:2f:e8:91:73:eb:9d:02:81:5a:50:56:32:7a:
         7f:13:d6:8c:0a:16:f5:b1:d2:b8:03:bc:08:bf:9c:81:70:29:
         64:c2:0c:a4:53:00:82:e2:72:9b:5b:9c:7b:8f:41:91:bc:76:
         9a:dc:a6:4b:bb:3f:82:75:99:cf:89:76:ed:f4:78:98:68:7b:
         87:cd:4f:14
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUBqR0gcly2W9uKkFaN6AG17sJHyUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTQ3NTdaFw0yNzA0MDkwNTUyNTdaMDMxMTAvBgNV
BAMTKEU5M0ZCNkY3NUE5QUI5RUIzMTNGREQxRjBCMjY1Q0M4MUI4NTlDQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ELWnxjUeH5eOmteso5iWXTCc
Boc/7HcIsSligGKO9YslDyOpWg34+jR4+oGfNn0ItoP7nwszRCZp+l55Qv/pU4a8
Jsx0GtnJ3bWj4ANF3IC77IlTY9HFBgrI1+UY/X83FiwtdCNz+HKcX+pELFFKfhZZ
icBzc/wfzxQrFYntNuJar5S6w6GDNjqPvEeV+OaUHZ49eyBHNOv0Ye/74sXyCbPH
tBnULbeGhhX+PeyZ6eHe7czupIPefLIcv4urxQUb3U0SpjO3OX4ukuGeq0+plzhk
2Pkkbd2nfxjM422+nveiy3XLFTU8v0qkirJamp0gZFiUp7cYD1htzDi4z0ABAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU6T+291qauesxP90fCyZcyBuFnMUwHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz
MzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi39vDANBgkqhkiG9w0BAQsFAAOCAQEAEKlH6bbXsR0UekVBCxlB9Jj7
wGne+je4/cyiEg/rby3d9Ln8/VDQGft5b+h7FhAltuv+cLRmPk5ZkPERXw++dVhx
s2huTNVKPX1rCR715sAh+sJIx7V7boOiALgvZE9dG2uhxCxPOyfQYyc2hrEEzsBH
2hUWCZSj224GyRC7mYhiyt/sR6YTNAI/7fKre+59/ORjW7YnPTSPzgBsi9Smdt61
pD53c2AL+MUV+6Q3xqN0g4wPcf8GuqUv6JFz650CgVpQVjJ6fxPWjAoW9bHSuAO8
CL+cgXApZMIMpFMAguJym1uce49Bkbx2mtymS7s/gnWZz4l27fR4mGh7h81PFA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:11 2026 by rpki-client