Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa
File:                     34352e3235342e36342e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier:          DTyIYZUKa3sAK2XzqcW1WitCGqp1Q8920WO7aVnwM6I=
Subject key identifier:   1A:49:6E:99:A9:4E:40:6E:0A:60:07:A8:43:B8:07:A0:ED:8D:67:95
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       61381BF3ABB04EA15559FB42076107D0A3E0954A
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa
Signing time:             Fri 10 Apr 2026 06:07:17 +0000
ROA not before:           Fri 10 Apr 2026 06:02:17 +0000
ROA not after:            Fri 09 Apr 2027 06:07:17 +0000
asID:                     23724
IP address blocks:        45.254.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:38:1b:f3:ab:b0:4e:a1:55:59:fb:42:07:61:07:d0:a3:e0:95:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 06:02:17 2026 GMT
            Not After : Apr  9 06:07:17 2027 GMT
        Subject: CN=1A496E99A94E406E0A6007A843B807A0ED8D6795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:45:ce:60:41:7a:42:08:9f:fd:5c:31:5a:d9:
                    9e:7e:c1:af:45:63:33:17:d9:bc:0f:73:cf:11:3d:
                    be:40:45:c7:20:d4:d4:1f:98:5f:54:12:80:d3:0f:
                    c8:04:17:c6:d6:c0:23:b4:b6:a1:75:4a:a7:65:26:
                    d8:ba:da:e4:ad:17:e0:a0:27:16:6d:d9:b1:0c:fd:
                    6a:20:a2:53:bf:db:25:5d:aa:0f:86:9b:2c:19:a3:
                    57:54:d2:e4:35:c0:20:ed:75:9a:cd:60:d9:e2:12:
                    5b:a2:de:87:29:60:a2:5e:fd:e7:28:3c:cd:dc:70:
                    dd:6e:48:fe:d8:e9:b9:15:5e:03:90:35:4f:bb:59:
                    cf:ad:61:90:91:76:57:3e:8e:fd:57:ef:46:d1:cf:
                    63:81:92:ce:6d:bc:04:37:07:0f:55:ad:6a:74:31:
                    36:6c:c1:de:a5:c8:7a:7a:67:11:ae:de:dc:43:9e:
                    15:c1:1e:84:3b:38:22:f6:28:22:d7:9f:80:f0:63:
                    bf:ba:2f:96:f8:eb:ae:8d:e3:00:1c:fe:84:13:af:
                    9a:e7:66:37:28:27:82:b3:aa:cb:e8:80:a8:ca:a2:
                    53:80:84:a4:0a:10:20:9a:1f:95:1a:0e:55:11:39:
                    b9:13:33:78:cc:fc:6c:52:07:a7:7c:c9:e8:d8:af:
                    5e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:49:6E:99:A9:4E:40:6E:0A:60:07:A8:43:B8:07:A0:ED:8D:67:95
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:6f:04:ff:6f:31:2c:ac:20:b8:28:73:2c:36:d2:67:a4:8f:
         5a:7f:88:94:ac:2d:f0:65:3f:1e:41:1a:6d:11:b1:54:ce:77:
         5b:b9:cf:cb:5c:a9:dc:e5:d1:a7:26:a2:f6:00:71:07:2e:b4:
         72:f2:73:7c:85:27:5e:8c:b2:7a:5c:53:11:77:5b:12:ef:da:
         b6:c9:39:a2:99:85:7b:22:32:84:e5:50:3d:89:df:09:22:62:
         76:de:52:24:46:e5:9e:c9:ec:92:89:0f:ee:e3:1e:7a:7b:57:
         65:26:05:4e:36:f7:94:f0:fc:18:67:26:1e:08:9a:dc:aa:da:
         e2:ac:68:4e:e2:c6:e3:ba:2d:ca:f1:9f:23:ae:a1:77:13:67:
         7c:1a:fb:ab:2e:d0:cf:01:93:9b:c1:85:15:11:3e:20:ac:71:
         db:e3:d0:92:68:51:64:8d:7d:a0:57:df:30:19:d4:81:88:02:
         e1:f3:90:14:ef:8b:13:51:41:4d:e5:cb:4c:35:ad:c6:95:76:
         b0:ba:c3:5f:84:5f:c5:c8:e3:67:7b:76:6b:4c:92:c2:ed:25:
         15:b4:68:8a:a5:a6:43:cf:ea:4a:85:fe:20:b4:9a:d6:95:96:
         a6:0a:fa:30:82:bb:de:b9:42:6e:10:20:0d:3d:4c:72:3b:e1:
         78:c9:a6:34
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUYTgb86uwTqFVWftCB2EH0KPglUowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNjAyMTdaFw0yNzA0MDkwNjA3MTdaMDMxMTAvBgNV
BAMTKDFBNDk2RTk5QTk0RTQwNkUwQTYwMDdBODQzQjgwN0EwRUQ4RDY3OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Rc5gQXpCCJ/9XDFa2Z5+wa9F
YzMX2bwPc88RPb5ARccg1NQfmF9UEoDTD8gEF8bWwCO0tqF1SqdlJti62uStF+Cg
JxZt2bEM/WogolO/2yVdqg+GmywZo1dU0uQ1wCDtdZrNYNniElui3ocpYKJe/eco
PM3ccN1uSP7Y6bkVXgOQNU+7Wc+tYZCRdlc+jv1X70bRz2OBks5tvAQ3Bw9VrWp0
MTZswd6lyHp6ZxGu3txDnhXBHoQ7OCL2KCLXn4DwY7+6L5b4666N4wAc/oQTr5rn
ZjcoJ4KzqsvogKjKolOAhKQKECCaH5UaDlURObkTM3jM/GxSB6d8yejYr16PAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUGklumalOQG4KYAeoQ7gHoO2NZ5UwHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODE5NTI3OTEwMjI3OTcxLzAvMzQzNTJlMzIzNTM0
MmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi3+QDANBgkqhkiG9w0BAQsFAAOCAQEAZG8E/28xLKwguChzLDbSZ6SPWn+I
lKwt8GU/HkEabRGxVM53W7nPy1yp3OXRpyai9gBxBy60cvJzfIUnXoyyelxTEXdb
Eu/atsk5opmFeyIyhOVQPYnfCSJidt5SJEblnsnskokP7uMeentXZSYFTjb3lPD8
GGcmHgia3Kra4qxoTuLG47otyvGfI66hdxNnfBr7qy7QzwGTm8GFFRE+IKxx2+PQ
kmhRZI19oFffMBnUgYgC4fOQFO+LE1FBTeXLTDWtxpV2sLrDX4RfxcjjZ3t2a0yS
wu0lFbRoiqWmQ8/qSoX+ILSa1pWWpgr6MIK73rlCbhAgDT1McjvheMmmNA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client