Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230382e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3230382e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          FWgu/8dT7D8LRyvrP/SUjQdsY65H/r7zM4pBcZv9dAE=
Subject key identifier:   EF:76:D7:55:96:27:9B:8A:67:65:B0:CE:47:DF:BF:9F:7F:FB:DF:F8
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       653098F672D8D5970A5DEC3DA0379463EC001DF9
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230382e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:59:08 +0000
ROA not before:           Fri 10 Apr 2026 05:54:08 +0000
ROA not after:            Fri 09 Apr 2027 05:59:08 +0000
asID:                     45062
IP address blocks:        45.253.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:30:98:f6:72:d8:d5:97:0a:5d:ec:3d:a0:37:94:63:ec:00:1d:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:54:08 2026 GMT
            Not After : Apr  9 05:59:08 2027 GMT
        Subject: CN=EF76D75596279B8A6765B0CE47DFBF9F7FFBDFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:8c:e1:32:ad:ef:e5:b3:39:d3:12:4f:92:
                    cc:0c:9c:80:db:ad:7a:f6:3b:80:3e:6f:69:c4:f9:
                    af:7b:a3:10:7d:ce:e7:70:e5:f1:d1:f1:d7:46:f9:
                    e5:92:76:1c:fe:35:e9:e5:ea:45:24:e1:c4:c6:a9:
                    65:82:d2:44:7f:9a:7b:d9:70:3b:69:57:52:3f:5d:
                    52:15:46:50:51:d0:1f:99:4c:6d:fc:9f:29:d6:6f:
                    52:c2:6e:0b:ff:8d:c2:1e:8c:90:e1:b2:46:af:eb:
                    4b:3f:a6:e9:ab:54:f2:fc:eb:7a:52:ab:5a:01:df:
                    97:58:ee:b4:e3:6b:57:9b:31:ec:cd:a8:96:a3:d6:
                    99:7f:a6:45:f5:43:da:b3:38:ad:00:1a:85:df:86:
                    08:6d:58:b2:18:71:94:36:36:b6:11:c3:9b:53:8c:
                    3b:11:58:02:1d:1b:32:0d:63:ce:6b:21:55:03:d2:
                    48:7c:ec:43:30:40:c7:32:8f:9b:3c:b5:87:33:11:
                    75:3d:32:7c:35:2b:8b:4d:51:32:f0:7e:96:c5:d4:
                    67:cc:43:ad:1d:9a:6b:43:9a:e6:1c:54:2a:f8:e1:
                    56:8f:70:cc:aa:ab:6b:c1:7c:36:30:02:52:7d:46:
                    b8:23:ed:17:e5:ce:51:29:09:21:92:95:14:9d:47:
                    50:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:76:D7:55:96:27:9B:8A:67:65:B0:CE:47:DF:BF:9F:7F:FB:DF:F8
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3230382e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:4c:c0:d1:ad:d0:e9:f6:5c:5d:87:4c:d0:94:cf:e8:d2:
         ab:aa:97:ed:39:f9:34:02:c1:df:ea:a6:83:a8:7a:5d:ce:49:
         15:58:8c:84:c4:fb:0f:d0:e2:bc:b2:61:2c:db:06:dc:c6:54:
         b3:55:b7:3a:d1:d1:8a:c1:0a:ef:a4:ed:c7:db:0c:a2:bd:16:
         94:06:ba:7c:99:92:62:fd:f1:fa:d9:94:2c:69:71:98:4d:10:
         17:96:6c:d0:69:c1:dc:32:29:fa:55:05:56:10:a6:ee:9e:c0:
         b7:03:94:0c:e2:a8:5b:e6:24:4f:ae:b7:78:d0:4c:a4:f3:a7:
         aa:cf:f9:bd:4d:51:10:83:5b:8a:2e:58:24:4f:2b:bb:f2:bc:
         37:ad:69:6c:4f:8a:e1:4d:81:3c:9d:59:33:63:27:6f:17:6a:
         00:0f:33:af:a2:ab:bc:52:a8:5a:11:62:13:e3:39:27:52:fe:
         87:00:de:d6:79:b2:97:d8:15:ca:ad:14:9e:4a:d4:dd:d8:b7:
         c2:06:de:19:db:5a:e4:9a:97:a1:95:c6:4e:1f:78:8f:7b:96:
         17:a4:d6:e8:0b:ab:e3:a8:a9:30:19:8b:52:1e:83:d6:65:7b:
         29:0c:c9:47:f9:f8:8d:2c:ea:27:74:11:1a:fa:cb:ae:42:e9:
         f6:c5:36:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:48 2026 by rpki-client