Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa
File:                     34352e3235342e37322e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier:          +sFVmb0ilpOCQElg2i46jQp0UuEd972SGcmuZhruNuU=
Subject key identifier:   EC:01:41:71:03:A1:2C:89:5C:B2:E4:4C:E4:F6:1E:9F:90:55:F0:09
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       70C4E302B64457B707697258A48597DCB465BB3E
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa
Signing time:             Fri 10 Apr 2026 06:07:17 +0000
ROA not before:           Fri 10 Apr 2026 06:02:17 +0000
ROA not after:            Fri 09 Apr 2027 06:07:17 +0000
asID:                     23724
IP address blocks:        45.254.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 06:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c4:e3:02:b6:44:57:b7:07:69:72:58:a4:85:97:dc:b4:65:bb:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: Apr 10 06:02:17 2026 GMT
            Not After : Apr  9 06:07:17 2027 GMT
        Subject: CN=EC01417103A12C895CB2E44CE4F61E9F9055F009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:58:2e:e0:b3:74:e3:5e:b2:e6:71:e6:77:
                    85:cd:7d:a6:30:36:96:76:51:d5:8a:42:49:b2:d1:
                    76:49:5b:20:c6:8c:a1:60:4d:c2:b9:0b:38:95:84:
                    5b:ae:35:b9:19:04:b6:aa:ab:a6:5a:50:7f:f9:7e:
                    81:af:0d:d1:50:60:1a:1f:58:0a:d4:1f:6e:8e:6d:
                    f7:d4:a2:b0:5a:74:fb:99:31:0f:40:c6:25:3b:99:
                    8a:07:45:49:f3:7f:5b:86:6f:59:70:e0:f3:c0:54:
                    98:05:69:5f:85:fd:21:ed:1a:a9:3b:d9:64:0d:73:
                    3e:2a:be:29:31:2d:67:c3:4b:71:38:b1:7a:1e:cd:
                    b3:ae:26:6c:93:cf:2e:e9:2b:1b:38:07:83:2d:bb:
                    34:5c:ae:f6:dd:ef:e8:ca:ab:84:7f:7d:1f:eb:42:
                    a6:55:a8:5a:d4:f3:a9:ff:d0:01:d5:e0:e2:27:31:
                    1a:69:9e:4c:e9:a5:a1:0d:7b:ab:c5:fb:5e:93:33:
                    2b:75:8f:c3:aa:05:45:05:19:8c:3d:4a:8e:40:91:
                    43:70:6a:72:7b:d8:cd:59:60:c5:92:18:d1:1c:4a:
                    f8:83:d9:d9:3f:0b:ef:0d:e1:78:3b:2d:bd:69:dc:
                    78:79:96:7b:39:be:39:ed:e1:c1:c2:15:05:0b:83:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:01:41:71:03:A1:2C:89:5C:B2:E4:4C:E4:F6:1E:9F:90:55:F0:09
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:50:a5:a3:a3:65:51:ec:09:ec:d5:b1:8f:06:f7:f8:39:
         5d:5b:9b:0f:e6:e0:6b:36:0a:22:3e:cd:ff:ba:84:86:ab:63:
         35:74:69:db:d2:6c:93:b4:7d:0d:fe:5a:0f:53:fd:fc:f6:64:
         e4:50:f7:8f:ec:7a:64:4c:a9:f6:6d:fa:d2:89:08:c6:fa:56:
         26:8b:ca:69:b1:64:90:69:da:28:0e:1f:c3:fe:d7:1b:1a:97:
         b0:c2:f4:9b:8c:a4:d4:65:fd:71:c7:32:49:cf:21:ae:58:b7:
         b9:0b:1c:25:dd:62:ba:c3:27:a0:e0:e9:e6:ce:b5:6a:a9:92:
         7a:6f:9c:35:1d:d2:d9:a5:66:33:08:0e:07:36:82:5c:37:67:
         c1:3d:57:af:66:81:cd:1f:f1:1b:bc:2e:6f:2e:4f:67:ca:27:
         aa:f3:de:15:ed:36:58:db:67:30:15:5b:1f:ec:d0:5d:ca:49:
         32:9d:1e:44:b9:7a:87:36:95:fe:b9:24:fe:8a:4b:d3:f8:25:
         58:2b:da:df:bd:57:7a:8f:1e:0d:cd:34:35:41:1d:89:cf:11:
         48:b7:d9:d7:fe:ca:f4:a9:79:d1:ec:4a:a6:e7:03:c8:6f:54:
         b5:e1:75:0c:85:fd:c0:50:cf:b4:bd:01:d0:46:b2:cc:36:0e:
         7d:9f:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:43 2026 by rpki-client