Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3232342e302f32322d3234203d3e203435303632.roa
File:                     34352e3235332e3232342e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier:          FWZ7MHije/ULoQSP05Jt8B1CL6MJYCKmIFf18lS6k0s=
Subject key identifier:   4D:EC:FF:79:65:CC:E1:4A:1A:6E:D4:C8:F0:3D:85:A5:1D:AC:11:A9
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       744E5069C6CE4DA320D7C4E3FC36D96EFF341498
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3232342e302f32322d3234203d3e203435303632.roa
Signing time:             Fri 10 Apr 2026 05:56:00 +0000
ROA not before:           Fri 10 Apr 2026 05:51:00 +0000
ROA not after:            Fri 09 Apr 2027 05:56:00 +0000
asID:                     45062
IP address blocks:        45.253.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:4e:50:69:c6:ce:4d:a3:20:d7:c4:e3:fc:36:d9:6e:ff:34:14:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 05:51:00 2026 GMT
            Not After : Apr  9 05:56:00 2027 GMT
        Subject: CN=4DECFF7965CCE14A1A6ED4C8F03D85A51DAC11A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:f6:73:da:b2:73:d8:51:da:87:43:36:41:
                    26:1e:55:e5:65:65:b3:37:b0:f1:15:5b:d1:d5:21:
                    ed:2e:4a:e7:4a:4c:0b:fc:2d:c2:36:6f:e2:f3:35:
                    9d:24:f6:d1:5c:08:97:4b:d8:e6:e5:5a:6a:72:c4:
                    e5:03:46:7b:9c:d8:b5:30:73:5c:72:f1:6a:8c:ca:
                    20:8d:fb:39:68:33:7d:ae:fd:3f:53:a8:f9:40:78:
                    7a:0b:50:f7:e6:92:42:30:75:12:47:f4:26:3c:df:
                    05:35:fc:10:cb:ad:9e:6d:61:f7:1b:61:a5:f3:23:
                    8b:a8:aa:72:16:99:c4:ca:1e:42:af:32:9e:6f:22:
                    cb:96:14:12:fa:4b:45:ee:b4:e3:35:59:dc:c3:a7:
                    71:5e:88:b3:d7:87:b7:a4:d7:58:26:45:3f:ca:df:
                    c3:b8:fa:c7:76:c6:0a:3d:82:4e:11:35:3d:fb:fe:
                    dd:b0:32:84:61:7c:8e:e5:77:78:c2:9a:29:bd:cc:
                    0b:d0:77:dd:42:0a:fc:1d:8a:87:f2:81:a9:bb:40:
                    ac:4e:44:89:49:eb:ec:a1:4c:40:d1:2a:ed:c2:42:
                    25:b4:ba:8a:a3:e6:f6:e3:58:8c:8c:22:5c:3f:63:
                    4f:49:6a:4a:09:7a:4d:96:b3:91:8d:d4:88:dd:69:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EC:FF:79:65:CC:E1:4A:1A:6E:D4:C8:F0:3D:85:A5:1D:AC:11:A9
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3232342e302f32322d3234203d3e203435303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.253.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ed:2b:8c:dc:48:cf:21:65:ef:f8:34:b7:af:1c:9a:f6:50:
         7f:95:e5:2e:0b:3c:92:c4:0f:48:ba:e5:de:43:8c:f3:08:34:
         6c:c2:7d:0c:f1:a4:0b:ec:62:cc:22:55:9b:f1:01:9c:4c:48:
         52:a5:3a:32:77:97:2e:66:68:12:32:a0:40:27:3d:2b:b4:2d:
         27:60:fa:31:5e:90:30:07:64:15:b6:0f:a1:66:c0:f2:0f:ba:
         55:5f:2c:86:b4:28:ec:55:1a:a2:7b:92:62:9f:67:6f:05:32:
         c8:f9:42:1a:d5:3e:da:63:6c:2b:5c:f3:89:67:27:2b:0c:7c:
         3d:8f:4f:0f:95:f4:c9:36:3a:9e:3d:ae:c3:55:b8:cf:9a:41:
         09:02:b3:23:9e:8e:d3:fc:8a:96:1f:39:94:58:d2:ca:27:81:
         48:54:da:ab:cd:f7:09:c6:29:e5:4a:08:3c:29:41:ca:37:cf:
         ae:c5:9e:a3:27:91:25:e4:16:1f:0d:6f:db:82:81:09:af:fd:
         76:29:a8:bf:8c:b7:37:27:bf:47:7f:0a:4d:06:78:09:94:09:
         2a:9c:ca:66:9f:5b:51:97:6b:3f:18:6b:fb:cf:b0:f2:9b:14:
         44:40:50:0e:21:0b:e6:95:92:cf:99:56:a2:5f:82:f4:a6:a9:
         7e:6a:cd:b6
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUdE5QacbOTaMg18Tj/DbZbv80FJgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTUxMDBaFw0yNzA0MDkwNTU2MDBaMDMxMTAvBgNV
BAMTKDRERUNGRjc5NjVDQ0UxNEExQTZFRDRDOEYwM0Q4NUE1MURBQzExQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPvZz2rJz2FHah0M2QSYeVeVl
ZbM3sPEVW9HVIe0uSudKTAv8LcI2b+LzNZ0k9tFcCJdL2OblWmpyxOUDRnuc2LUw
c1xy8WqMyiCN+zloM32u/T9TqPlAeHoLUPfmkkIwdRJH9CY83wU1/BDLrZ5tYfcb
YaXzI4uoqnIWmcTKHkKvMp5vIsuWFBL6S0XutOM1WdzDp3FeiLPXh7ek11gmRT/K
38O4+sd2xgo9gk4RNT37/t2wMoRhfI7ld3jCmim9zAvQd91CCvwdiofygam7QKxO
RIlJ6+yhTEDRKu3CQiW0uoqj5vbjWIyMIlw/Y09JakoJek2Ws5GN1IjdaYCvAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUTez/eWXM4UoabtTI8D2FpR2sEakwHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz
MzJlMzIzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi394DANBgkqhkiG9w0BAQsFAAOCAQEAru0rjNxIzyFl7/g0t68cmvZQ
f5XlLgs8ksQPSLrl3kOM8wg0bMJ9DPGkC+xizCJVm/EBnExIUqU6MneXLmZoEjKg
QCc9K7QtJ2D6MV6QMAdkFbYPoWbA8g+6VV8shrQo7FUaonuSYp9nbwUyyPlCGtU+
2mNsK1zziWcnKwx8PY9PD5X0yTY6nj2uw1W4z5pBCQKzI56O0/yKlh85lFjSyieB
SFTaq833CcYp5UoIPClByjfPrsWeoyeRJeQWHw1v24KBCa/9dimov4y3Nye/R38K
TQZ4CZQJKpzKZp9bUZdrPxhr+8+w8psUREBQDiEL5pWSz5lWol+C9KapfmrNtg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:22 2026 by rpki-client