Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/AS4837.roa
File:                     AS4837.roa (raw, json)
Hash identifier:          PSrtVxpi26hNqHMhLR1owZy3r9A9ax7WlKodFyCEOUE=
Subject key identifier:   B8:16:E5:98:30:23:47:6C:3F:A8:44:2A:E1:A9:17:86:26:D1:CB:AD
Certificate issuer:       /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial:       5FC87A182264F0C8D950EB2B1AA6C5A8935C777A
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/AS4837.roa
Signing time:             Fri 15 May 2026 03:00:44 +0000
ROA not before:           Fri 15 May 2026 02:55:44 +0000
ROA not after:            Fri 14 May 2027 03:00:44 +0000
asID:                     4837
IP address blocks:        45.254.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 May 2026 11:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c8:7a:18:22:64:f0:c8:d9:50:eb:2b:1a:a6:c5:a8:93:5c:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
        Validity
            Not Before: May 15 02:55:44 2026 GMT
            Not After : May 14 03:00:44 2027 GMT
        Subject: CN=B816E5983023476C3FA8442AE1A9178626D1CBAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5d:2c:d4:33:07:ca:73:a4:90:bf:f0:e5:15:
                    e2:c0:8c:0a:df:49:d1:92:77:df:4d:1a:d7:c8:76:
                    ae:e8:ff:80:33:70:60:85:31:5a:a5:a2:70:0a:e4:
                    9c:6a:fa:2f:69:2a:c3:e8:80:4a:a3:6f:c8:81:41:
                    ac:57:42:0c:e3:e8:03:8d:21:d9:b4:e3:b5:78:2a:
                    6a:a8:7b:df:a8:16:1a:1b:1a:8c:da:43:cb:69:34:
                    9d:32:62:b8:97:16:89:14:6b:16:4b:35:c9:f4:67:
                    f4:fc:24:09:da:39:9a:d3:e0:3f:cf:70:e9:dd:cb:
                    28:59:86:55:39:19:06:39:72:a2:ce:29:d6:92:c6:
                    13:81:f9:fb:fc:d9:62:3e:2d:45:cb:5e:15:7e:e6:
                    c7:c1:8a:c2:3b:09:4b:f3:b7:18:37:e8:be:b9:dc:
                    02:b6:49:ab:14:cb:46:11:46:7b:c2:36:bd:ee:5a:
                    81:a9:3d:2d:10:46:e4:46:99:6d:ca:13:78:6c:0f:
                    ac:e7:11:d0:fa:80:88:b2:03:47:3b:25:59:d2:b9:
                    fc:7b:da:b8:70:93:bb:e0:60:73:31:b5:7d:45:0a:
                    39:d5:1b:48:54:38:2b:e9:df:b3:77:52:e9:d8:74:
                    c6:29:71:0b:ae:6e:d4:57:43:0a:33:85:56:14:e5:
                    72:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:16:E5:98:30:23:47:6C:3F:A8:44:2A:E1:A9:17:86:26:D1:CB:AD
            X509v3 Authority Key Identifier:
                keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/AS4837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.254.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:4f:ee:76:be:35:6b:7b:59:99:6e:c0:d7:d9:e5:8e:36:
         70:70:f6:fb:9b:54:70:f3:44:85:39:c6:84:0f:5a:56:72:ac:
         9b:df:62:c9:d9:94:33:05:f7:ef:d3:dc:d5:0a:84:07:30:fa:
         09:63:14:ab:58:20:77:b4:8f:a0:ab:46:d0:f5:0a:c4:fa:f9:
         c5:79:96:ec:b3:df:96:f6:5e:0f:43:a7:17:c4:fe:e2:2c:89:
         a9:89:75:93:85:11:28:bc:6a:f4:c8:7f:91:a5:ed:93:43:44:
         09:ae:b6:a2:b3:3b:50:d4:62:f3:e7:c2:cb:47:94:f5:9e:f9:
         b6:91:2f:da:24:0e:06:cf:7f:b5:a1:c3:7e:88:10:a1:6f:e6:
         b8:27:89:ef:86:de:5f:f7:90:ea:9f:48:f8:67:e9:93:ce:99:
         0e:6a:6b:26:bd:fc:7c:82:c8:54:87:99:1e:15:b4:35:53:9e:
         2a:e0:e7:ac:39:e0:95:16:76:f7:79:90:be:b0:70:17:a2:59:
         33:9e:32:96:ca:d0:15:25:de:4d:fc:d4:10:aa:df:2e:c4:72:
         e7:55:77:8d:29:dc:bf:23:71:b2:c2:e8:69:aa:6e:3d:a9:00:
         81:51:30:da:ea:ca:41:53:36:18:a1:cf:38:e6:ca:56:3c:4c:
         92:57:23:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:49:11 2026 by rpki-client