Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3139322e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          RbItHc99HKwQUzeQ6YI1roX4k+jiNvnJ0Oq7eXIHd18=
Subject key identifier:   92:17:56:99:D1:5B:60:16:8C:DB:92:94:DE:D9:E3:A8:05:58:78:87
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       0D0C0580AE7B9FE56DD1BC305EF66CE09A68D65B
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:59:08 +0000
ROA not before:           Fri 10 Apr 2026 05:54:08 +0000
ROA not after:            Fri 09 Apr 2027 05:59:08 +0000
asID:                     45062
IP address blocks:        45.253.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0c:05:80:ae:7b:9f:e5:6d:d1:bc:30:5e:f6:6c:e0:9a:68:d6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:54:08 2026 GMT
            Not After : Apr  9 05:59:08 2027 GMT
        Subject: CN=92175699D15B60168CDB9294DED9E3A805587887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:83:cb:34:b5:d0:fe:da:5a:22:14:13:3e:
                    a5:ef:6d:4a:bd:2f:d1:4e:e9:18:2f:98:33:d7:70:
                    eb:7d:28:a6:d1:3f:25:bd:50:49:71:fb:11:dc:96:
                    7f:32:66:cd:53:93:a7:a8:42:f5:c8:f4:44:8f:ae:
                    02:ac:22:29:32:b1:79:7d:93:3c:99:d2:0f:85:01:
                    e5:98:fd:95:31:d4:bd:e4:f3:37:33:2c:6a:77:19:
                    64:f4:1f:ba:f7:58:9a:79:85:c2:c6:c9:34:4c:1d:
                    ef:6e:07:0a:03:66:1b:a9:3f:04:ad:e6:da:30:19:
                    29:31:68:c0:55:d9:da:52:0f:e7:57:cb:bd:8e:48:
                    31:dd:86:57:33:cb:59:37:44:a9:d6:74:4f:cf:d7:
                    ee:60:ea:e2:ba:67:86:8a:ed:39:33:c9:8d:a5:e3:
                    81:6b:fe:37:64:f5:2b:ac:d8:99:8f:fa:6c:96:81:
                    05:8c:d2:f6:b9:24:10:3e:3c:5a:87:b7:67:62:80:
                    15:dd:95:ac:f3:c1:c9:a2:a9:61:93:00:78:a7:ba:
                    31:39:72:7b:77:61:2b:7e:e9:50:94:28:b3:7c:18:
                    bf:e0:05:d3:00:00:0e:2e:63:44:49:bd:f7:00:dc:
                    35:a6:ff:f2:cd:61:ef:78:d1:3b:af:24:2f:69:07:
                    d3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:17:56:99:D1:5B:60:16:8C:DB:92:94:DE:D9:E3:A8:05:58:78:87
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:cf:b5:26:f7:2c:fb:e0:81:1e:f7:3e:f7:8f:d3:d6:2d:49:
         c3:99:64:59:87:fa:45:09:4f:ec:a2:eb:78:92:e1:b8:c9:b2:
         57:28:cc:65:6d:2b:0d:e0:19:85:44:1b:96:5a:d3:ce:e0:bb:
         34:71:3c:5b:c7:6e:fe:14:fd:76:19:1a:8f:c8:49:eb:d6:f8:
         d2:fe:91:87:4b:41:3a:5a:ae:72:df:71:b5:5c:63:e7:ac:fd:
         a5:f6:a5:2d:ad:2e:0e:aa:07:74:76:45:66:d2:2c:32:e4:17:
         62:38:72:7c:9e:bc:8e:02:c6:98:6b:ef:de:59:b2:c9:55:c4:
         39:02:1b:f6:dd:7b:96:5f:aa:f4:ee:1e:55:0f:9c:38:8b:92:
         b1:e8:90:a3:77:a8:66:18:d1:cf:4a:ca:e8:4c:dd:59:56:3a:
         e0:87:9c:34:c9:a2:74:5c:e0:16:6a:9b:93:19:4d:78:0f:df:
         4d:fe:bb:64:d4:57:ed:1f:09:17:bb:bc:8f:02:87:24:ce:2a:
         0d:b9:1e:d6:b0:25:f1:0a:55:c8:f1:db:38:42:81:8c:7c:85:
         06:47:56:39:22:0d:ce:16:01:26:3f:4f:cf:36:a3:ef:5b:4f:
         6b:c6:dd:54:0e:42:e0:76:f7:50:67:53:23:ab:45:39:5d:3a:
         fe:b4:0a:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client