Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa
File:                     34352e3234382e3130302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=
Subject key identifier:   9A:70:E0:AE:7A:A7:B7:C2:B9:7B:FB:E8:03:FE:B3:94:E9:D5:22:38
Certificate issuer:       /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial:       7B5E81FAAA5689BB16E78BBAB43CEBE445B2A2A9
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa
Signing time:             Fri 10 Apr 2026 03:34:53 +0000
ROA not before:           Fri 10 Apr 2026 03:29:53 +0000
ROA not after:            Fri 09 Apr 2027 03:34:53 +0000
asID:                     0
IP address blocks:        45.248.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 09:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5e:81:fa:aa:56:89:bb:16:e7:8b:ba:b4:3c:eb:e4:45:b2:a2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
        Validity
            Not Before: Apr 10 03:29:53 2026 GMT
            Not After : Apr  9 03:34:53 2027 GMT
        Subject: CN=9A70E0AE7AA7B7C2B97BFBE803FEB394E9D52238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:36:c4:5d:c5:e4:e1:dd:ae:2a:48:56:3e:
                    e5:7c:84:5c:d7:89:d3:31:d1:06:d7:ca:a3:a6:9d:
                    82:b7:52:fa:31:8e:03:50:21:6d:21:d1:2f:63:4f:
                    45:43:49:91:3a:39:43:fa:ab:29:f3:a0:61:0d:4b:
                    ca:7b:e2:4f:d7:2e:8d:d9:1b:24:d1:69:cd:8b:5d:
                    58:40:44:0d:78:b2:c9:85:ec:d1:b9:49:93:4d:d5:
                    aa:ce:98:29:62:9a:23:f0:e9:3c:fe:33:a9:19:4f:
                    c2:50:15:2b:86:42:f5:77:d2:a9:99:cf:a2:65:d7:
                    be:b6:2d:a3:4f:c0:27:2e:79:b0:62:b4:5d:5f:23:
                    2a:1a:24:d8:41:9a:11:c7:90:a7:8e:b6:3d:a1:1d:
                    9c:06:53:e9:ba:a6:e3:dd:6b:21:88:48:db:1f:f3:
                    99:e9:f6:ff:d8:d4:70:c0:87:e3:da:5f:4a:54:1e:
                    f9:1d:61:39:13:bd:6d:47:10:f5:80:74:08:03:c8:
                    7c:ed:a4:ec:64:6f:f2:14:5f:74:c1:9d:70:36:a1:
                    22:4d:43:c8:68:93:c5:30:85:f5:20:90:41:b8:04:
                    53:b3:bb:b7:fa:24:c6:2e:97:05:aa:98:25:2e:12:
                    6d:c3:f6:8f:09:76:83:58:28:35:79:1d:83:e0:c4:
                    7e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:E0:AE:7A:A7:B7:C2:B9:7B:FB:E8:03:FE:B3:94:E9:D5:22:38
            X509v3 Authority Key Identifier:
                keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.248.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:5c:53:2d:22:c8:2f:b0:68:82:1c:e1:5f:ad:fb:5c:12:
         dd:72:f0:0f:e7:99:71:db:c5:1a:3e:3b:58:8e:91:94:42:8f:
         01:db:12:38:60:07:03:a0:6d:45:fd:eb:aa:8a:ae:25:72:e9:
         f6:de:cf:88:55:9f:f6:4d:7b:d1:8c:41:9a:47:fc:dc:83:d6:
         a9:d8:77:c2:0a:82:5f:a8:3e:50:5e:a3:6d:0a:7b:ba:29:f9:
         3e:e8:82:d9:5c:a5:cf:37:38:f5:0d:31:12:78:e2:98:1c:93:
         d9:04:89:67:d7:97:9a:f3:cc:19:8b:9a:f9:71:88:e0:1d:87:
         db:9c:90:d4:1a:56:b6:5b:3b:5e:a0:b1:51:6a:da:27:25:76:
         01:75:84:61:1a:75:b8:75:24:8c:04:a4:86:a5:ff:8f:bf:3d:
         f2:e2:ae:34:81:2c:9e:a2:25:d3:8f:be:f0:09:8d:ce:34:40:
         b0:fc:57:59:ac:c7:45:3c:57:03:59:03:34:31:9c:58:2c:fd:
         10:62:9c:60:dd:a0:89:82:3b:08:37:af:db:0b:50:61:29:1c:
         3a:ed:51:12:d2:ee:8f:87:12:0d:f1:86:94:19:b7:32:42:ff:
         6b:f1:9d:3c:ae:d8:30:26:0d:c2:b9:68:25:da:d8:ef:9a:e3:
         08:c1:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:24 2026 by rpki-client